Privacy Policy

1. Controller

The controller responsible for processing personal data in connection with this website is:

2. Website access and hosting

This website is provided through OpenAI Sites. When the website is accessed, technically necessary connection and access data are processed. These may include the IP address, time and duration of access, pages requested, amount of data transferred, and browser and device information.

Processing is carried out to provide the website securely, reliably and efficiently, to analyse technical faults and to protect the website against misuse. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.

Recipients of this data include OpenAI as the provider of the hosting platform and its technical service providers. OpenAI Sites currently does not offer a fixed data-residency option for deployed websites, logs and related artefacts. Processing may therefore take place outside the European Economic Area. Where required, such transfers are based on the data-protection safeguards provided by the supplier.

We do not maintain separate server logs. Retention at platform level is governed by the technical and contractual rules of the hosting platform.

3. Basic audience measurement

OpenAI Sites automatically records page views and unique visitors for deployed websites and provides us with basic, aggregated usage statistics. We do not add any separate analytics or marketing software and do not create advertising profiles.

Processing is based on our legitimate interest in understanding basic website use and technical performance under Article 6(1)(f) GDPR.

4. Contacting us

The enquiry form does not itself submit data to a web server. Information entered into the form is processed only in the browser. Selecting “Prepare enquiry” opens the email application configured on the device with a pre-filled draft. We receive no information unless the email is subsequently sent.

If you contact us by email, we process the information you provide — in particular your name, company, email address, industry, preferred type of enquiry and message — to handle and respond to your request. The legal basis is Article 6(1)(b) GDPR where the communication concerns pre-contractual steps, and otherwise Article 6(1)(f) GDPR based on our legitimate interest in handling business enquiries.

We use Google Workspace for email. Google therefore also receives data as a technical service provider. Processing by Google and its subprocessors may take place outside the European Economic Area; the supplier's contractual data-protection safeguards apply to such processing.

Enquiries that do not lead to a contractual relationship are generally deleted no later than six months after they have been dealt with, unless statutory retention duties or legitimate reasons require longer storage. If a contract is concluded, the necessary data are retained for the applicable statutory retention periods.

5. Cookies and external content

We do not use our own marketing cookies and do not embed external videos, maps, social-media plugins or comparable third-party content. Technically necessary cookies or similar storage mechanisms may be used by the hosting and security infrastructure where required to provide and protect the website.

6. Your rights

Subject to the applicable statutory requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. Any consent given may be withdrawn at any time with effect for the future.

To exercise your rights, contact kontakt@ventora.at. You also have the right to lodge a complaint with a data-protection supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna.

7. Automated decision-making

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.