Privacy Policy

Introduction

hexalab GmbH ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website hexalab.pro or use our services. We comply with the General Data Protection Regulation (GDPR) and Austrian data protection laws.

Data Controller Information

The data controller for your personal information is hexalab GmbH, a company registered in Austria with registration number 41873952. Our registered office is located at Hernalser Hauptstraße 62, 9011 Klagenfurt, Carinthia, Austria. For any privacy-related enquiries, please contact us at privacy@hexalab.pro.

Data We Collect

The data we collect depends on how you interact with our website and services. We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, company name, and postal address when you contact us or request our services
• Website Usage Data: IP address, browser type, operating system, pages visited, time spent on pages, and referral sources
• Communication Data: Records of correspondence when you contact us via email, phone, or our contact forms
• Technical Data: Cookies and similar tracking technologies to enhance your website experience
• Professional Information: Job title, industry, business requirements, and project details when engaging our consulting services

How We Use Your Information

We use the personal data we collect for legitimate business purposes, including how we use your information to provide and improve our services:

• To respond to your enquiries and provide customer support
• To deliver our consulting services and fulfil contractual obligations
• To communicate with you about our services, updates, and relevant business information
• To improve our website functionality and user experience
• To analyse website usage and optimise our digital presence
• To comply with legal obligations and protect our legitimate business interests
• To prevent fraud and ensure the security of our systems

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds: performance of a contract when providing our consulting services; legitimate interests for improving our services and website functionality; compliance with legal obligations; and your consent where specifically requested, such as for marketing communications or cookie usage.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances: with trusted service providers who assist us in operating our website and delivering our services, under strict confidentiality agreements; when required by law or to protect our rights and safety; with your explicit consent; or in connection with a business transfer, merger, or acquisition, subject to the same privacy protections.

International Data Transfers

As we operate primarily within the European Economic Area (EEA), your personal data is generally processed within the EEA. If we need to transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy. Specifically: contact form enquiries are retained for 2 years; client project data is retained for 7 years after project completion for legal and business purposes; website usage data is retained for 26 months; and marketing communications data is retained until you withdraw consent or for 3 years of inactivity.

Your Rights

Under GDPR and Austrian data protection law, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Request transfer of your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience and analyse website usage. For detailed information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure servers, access controls, and regular security assessments. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete such information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website with a revised "Last updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using the following information:

Supervisory Authority

You have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe we have not handled your personal data in accordance with applicable data protection laws. You can contact them at www.dsb.gv.at or by post at Barichgasse 40-42, 1030 Vienna, Austria.