Privacy Policy

Privacy policy under GDPR — as of April 2026

1. Controller

2. General principles of data processing

We process personal data of our users only to the extent necessary for providing a functional website and our content and services.

3. Legal bases

Art. 6(1)(a) GDPR (consent) · (b) (contract performance) · (c) (legal obligation) · (f) (legitimate interest).

4. Website provision & server logs

Each request is automatically logged with: anonymised IP address, date/time, accessed file, referrer URL, browser and operating system. Log files are automatically deleted after 7 days. Legal basis: Art. 6(1)(f) GDPR.

5. Contact by e-mail

When contacting us by e-mail, your data is stored for the purpose of processing the enquiry and deleted after completion (at the latest after 6 months). Legal basis: Art. 6(1)(f) GDPR.

6. Cookies

This website uses exclusively technically necessary cookies (Art. 6(1)(f) GDPR). No marketing or tracking cookies are used.

7. Disclosure to third parties

Personal data is generally not transferred to third parties, except with explicit consent, for contract performance, under a legal obligation, or based on a legitimate interest under Art. 6(1) GDPR.

8. Retention period

Personal data is deleted as soon as the purpose of its processing ceases. Statutory retention periods (in particular under BAO/UGB, e.g. 7 years) remain unaffected.

9. Your rights

Art. 15 Access · Art. 16 Rectification · Art. 17 Erasure · Art. 18 Restriction · Art. 20 Data portability · Art. 21 Objection · Art. 7(3) Withdrawal of consent.

To exercise your rights please contact info@aggregatx.com.

10. Supervisory authority

Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria
dsb@dsb.gv.at · www.dsb.gv.at

11. Online dispute resolution

https://ec.europa.eu/consumers/odr

12. Version

As of April 2026. The current version of this privacy policy is always available at aggregatx.com/en-privacy.html.