Privacy Policy

Introduction

aqualuxisum AG ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website or use our enterprise digital process optimization platforms.

This policy applies to all personal data processing activities carried out by aqualuxisum AG, registration number FN369852a, located at Schulgasse 40, 1037 Vienna, Austria.

Data Controller Information

aqualuxisum AG acts as the data controller for the personal information we collect and process. As a data controller, we determine the purposes and means of processing your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

For any privacy-related enquiries, you can contact us at privacy@aqualuxisum.world or by telephone at +43 18092716.

Data We Collect

The data we collect depends on how you interact with our website and services. We collect personal information that you voluntarily provide to us and certain information automatically when you visit our website.

Information You Provide

• Contact information (name, email address, phone number, company name)
• Communication preferences and enquiry details
• Business requirements and consultation requests
• Technical specifications and platform requirements
• Correspondence and support communications

Information Collected Automatically

• Website usage data and browsing behaviour
• Device information (browser type, operating system, IP address)
• Cookies and tracking technologies data
• Referral sources and website navigation patterns
• Session information and interaction data

How We Use Your Information

We use your personal data for specific, legitimate business purposes. How we use your information depends on the services you use and your relationship with aqualuxisum. The following outlines how we use your data and our legal basis for processing.

Service Provision and Communication

• Responding to your enquiries and consultation requests
• Providing information about our enterprise platforms and services
• Managing client relationships and support services
• Processing and fulfilling service agreements
• Delivering technical support and platform assistance

Business Operations and Improvement

• Analysing website usage to improve user experience
• Developing and enhancing our platform capabilities
• Conducting market research and business analysis
• Maintaining security and preventing fraud
• Ensuring compliance with legal and regulatory requirements

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

Our website uses both first-party and third-party cookies to enhance functionality, analyse usage patterns, and provide personalised content. For detailed information about the cookies we use, please refer to our Cookie Policy.

We implement Google Consent Mode v2 to respect your privacy choices regarding analytics and advertising cookies. Your consent preferences are honoured across all tracking and advertising technologies used on our website.

Legal Basis for Processing

Under GDPR, we must have a valid legal basis for processing your personal data. We rely on the following legal bases:

• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, marketing, and business development
• Contract Performance: Processing necessary to perform contracts with our clients or to take steps prior to entering into a contract
• Consent: Where you have given explicit consent for specific processing activities, such as marketing communications or cookies
• Legal Obligation: Processing required to comply with applicable laws, regulations, or legal processes

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With trusted service providers who assist us in operating our business and delivering services
• When required by law, regulation, or legal process
• To protect our rights, property, or safety, or that of our clients or others
• In connection with business transfers, mergers, or acquisitions
• With your explicit consent for specific purposes

All third-party service providers are contractually bound to maintain the confidentiality and security of your personal information and are prohibited from using it for any purpose other than providing services to us.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal requirements. Our data retention periods are based on the nature of the information and the purposes for processing.

• Contact and enquiry data: Retained for 3 years from last contact or until you request deletion
• Client relationship data: Retained for 7 years after contract termination for legal and business purposes
• Website analytics data: Retained for 26 months in accordance with Google Analytics settings
• Marketing data: Retained until consent is withdrawn or for 2 years from last engagement
• Legal compliance data: Retained as required by applicable laws and regulations

International Data Transfers

As a European-based company, we primarily process data within the European Economic Area (EEA). When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for countries with equivalent data protection standards
• Certification schemes and codes of conduct
• Binding corporate rules for intra-group transfers

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data. You can exercise these rights by contacting us at privacy@aqualuxisum.world.

• Right of Access: Request copies of your personal data and information about how it's processed
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of processing in specific situations
• Right to Data Portability: Request transfer of your data to another organisation
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

We will respond to your requests within one month, though this may be extended in complex cases. You also have the right to lodge a complaint with the Austrian Data Protection Authority if you believe we have not handled your data appropriately.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication systems
• Employee training on data protection and security
• Incident response and breach notification procedures

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protection measures.

Children's Privacy

Our services are designed for businesses and enterprise clients. We do not knowingly collect personal information from individuals under 16 years of age. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete such information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date at the top of this policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes indicates your acceptance of the updated policy.

Contact Information

If you have any questions about this Privacy Policy or our data processing practices, please contact us using the following information:

For general enquiries about our services, you can also contact us at contact@aqualuxisum.world.