Privacy Policy

1. Scope

This privacy policy explains how Datamedrix GmbH ("we", "us") collects, processes, and protects personal data when you visit this website. We process personal data exclusively in compliance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

---

2. Data We Collect

2.1 Server Log Files

When you access this website, our web server automatically records the following data based on our legitimate interest in ensuring the security and operation of the site (Art. 6(1)(f) GDPR): IP address (anonymised — the last octet is removed), date and time of access, pages requested, HTTP status code, data volume transferred, referrer URL, and browser/operating system. This data is not combined with other data sources and is deleted after 30 days.

2.2 Contact Form

When you submit our contact form, the data you provide (name, email address, organisation, and your message) is processed on our own server for the purpose of responding to your inquiry (Art. 6(1)(b) GDPR — pre-contractual measures). We retain your inquiry only as long as necessary to handle it, unless a longer retention period is required by law.

2.3 Cookies and Analytics

This website does not set any cookies. For aggregated visitor statistics we use Umami Analytics, a privacy-friendly, cookieless analytics tool self-hosted on our own server (same Hetzner infrastructure as this website). Umami does not use cookies, does not store personal data, does not fingerprint users, and respects the browser's Do-Not-Track header. Only anonymous, aggregated metrics (page views, referrer, country, device type) are recorded. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring website effectiveness). No data leaves our EU infrastructure.

---

3. No Data Transfer to Third Countries

This website does not transfer personal data to countries outside the EU/EEA. All fonts are hosted locally on our own server. Analytics are self-hosted (Umami) on the same EU infrastructure. No third-party analytics services, social media plugins, or advertising networks are integrated.

---

4. Third-Party Processors

4.1 Web Hosting

---

5. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise any of these rights, contact us at office@datamedrix.com.

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, dsb.gv.at) if you believe your data is being processed unlawfully.

---

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or destruction. All data transmitted between your browser and our server is encrypted via TLS/SSL.

---

7. Changes to This Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or our data processing practices. The current version is always available on this page.