Privacy Policy

1. Controller

Acridan IT Solutions OG
Altebergenstrasse 2C/2/3, 1140 Vienna, Austria
Email: [email protected]

2. Purposes and legal bases

• Handling contact and project enquiries on the basis of Article 6(1)(b) GDPR (pre-contractual measures).
• Documenting and following up enquiries on the basis of Article 6(1)(b) GDPR and Article 6(1)(f) GDPR (structured handling of business requests).
• Abuse prevention, rate limiting, and IT security on the basis of Article 6(1)(f) GDPR.
• Optional web analytics and ads measurement via Google Analytics and Google Ads only on the basis of your consent under Article 6(1)(a) GDPR.

3. Categories of data we process

Depending on how you use the site and our forms, we may process the following categories of data:

• name, email address, company, topic, and message from the general contact form
• name, email address, company, project type, budget, and message from the project enquiry form
• contact and configuration details from the restaurant configurator
• technical usage data such as consent status, browser details, device details, approximate location, and measurement data

4. Recipients and service providers

• internal teams responsible for sales, project handling, and customer support
• our SMTP and mail server infrastructure for delivering form requests by email
• our Supabase database infrastructure for storing and following up contact enquiries
• Google Ireland Limited and Google LLC, but only if you consent to optional analytics or marketing features
• technical hosting and security providers where required to operate the website

5. Contact forms

When you contact us through a form, your details are validated server-side, technically checked for abuse, and then forwarded to us by email. We also store form submissions in our database so that we can process and track your enquiry reliably.

To reduce abuse, we use a honeypot field and server-side rate limiting. The legal basis for this is our legitimate interest in operating secure and reliable forms.

6. Necessary storage and optional Google services

We use only technically necessary storage until you make an optional choice. This includes, in particular, storing your consent choice in localStorage and the website language preference.

Google Analytics 4 and Google Ads are loaded only after you have given explicit consent in the cookie banner. Without your consent, the optional Google tags are not loaded.

If you consent, Google Analytics and Google Ads may process measurement data relating to page views, interactions, campaign attribution, and conversion events. Google-related identifiers such as cookie-consent, NEXT_LOCALE, _ga, _ga_<container-id>, or _gcl_aw may then be stored in or read from your browser. The exact lifetime of optional Google identifiers depends on Google, your browser, and your settings; some identifiers can remain for up to two years unless you delete them earlier or withdraw consent.

You can change or withdraw your consent at any time through the Cookie Settings button in the footer. After withdrawal, we do not load optional Google tags again and we attempt to delete known Google measurement cookies.

7. International transfers

If you consent to optional Google services, data may also be processed in third countries, especially the United States. According to Google, such transfers rely on appropriate safeguards, including standard contractual clauses and, where applicable, certification under the EU-U.S. Data Privacy Framework.

8. Retention periods

• We generally store enquiries without a resulting contract for up to 24 months.
• Contract-related records are stored in line with statutory retention obligations.
• We store your consent settings until you change them, withdraw them, or we technically renew the consent mechanism.
• Optional Google identifiers remain stored for the lifetime defined by Google and your browser, unless you delete them earlier or withdraw consent.

9. Your rights

In particular, you have the right to:

• access under Article 15 GDPR
• rectification under Article 16 GDPR
• erasure and restriction of processing under Articles 17 and 18 GDPR
• data portability under Article 20 GDPR
• withdraw consent with effect for the future
• object to processing based on legitimate interests under Article 21 GDPR

10. Right to lodge a complaint

You have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna. www.dsb.gv.at.

11. Version

Version: March 2026