Privacy policy

Last updated January 30, 2026

Principles of data processing

ivii attaches great importance to the protection of your private sphere and your personal data. When processing your personal data, conformity with the relevant data protection laws and in particular with the provisions of the General Data Protection Regulation (GDPR) is of great importance to ivii. Processing of personal data by ivii always takes place under the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation as well as integrity and confidentiality.

To fulfil our obligations to provide information according to Article 13 et seq. of the General Data Protection Regulation (GDPR), we are glad to provide you with the following information about data protection.

Who is responsible for data processing?

As defined in the data protection law, data controller is:

ivii GmbH
Gewerbeparkstraße 17
8143 Dobl bei Graz
Austria

Phone: +43 5 04954 77 01
privacy@ivii.eu

Further information about our company is found at: ivii.eu/imprint.

Which personal data is processed by ivii, and for what purpose?

If we have received data from you, then we only use this data, in general, for the purpose for which we have received or collected it.

Data processing for a different purpose would only come into question to the extent that the legal requirements according to Article 6(4) GDPR are fulfilled. In that case we will of course observe any obligations to inform under Article 13(3) GDPR and Article 14(4) GDPR.

Contact

If you are contacting us via E-Mail, the data you provide will only be stored by ivii for processing your request and, if applicable, in the case of follow-up questions for as long as necessary. The legal basis for this is legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. This data will not be processed further without your consent.

Website use

The use of this website is generally possible without providing any personal data, however, it is possible, that your IP-adress as well as the start and ending of the session will be recorded. This is a technical requirement and thus qualifies as a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. Unless otherwise stated below, this data will not be processed further.

Only you determine whether, for example, you want to give us your email address or your postal address in order for us to get in touch with you, to process your request, or to grant you access to special information or offers. We do not collect any personal data on our website in this respect without your explicit and voluntary consent. If you provide us with personal data, it will be handled in strict confidence and will not be passed on to third parties without your explicit consent. All information we receive from you when you use our Internet services is exclusively used to process user information and for communication regarding orders, products and services.

Cookies

As soon as you contact us, we receive and store certain information. Among other things, we use cookies. Cookies are pieces of information that are automatically stored on your computer in accordance with strict rules and with content that you can check. We use cookies solely to make our website more user-friendly for you, for example, to enable you to access the site without entering your password or your preferences every time.

BorlabsCookie: Cookie-Consent Manager; Service provider: Hosted locally on our server, no data transfer to third parties; Website: https://borlabs.io/borlabs-cookie/; Further Information: An individual user ID, language as well as types of consent and the time of their submission are stored on the server and in the cookie on the user’s device.
WPML: Essential cookie for the multilingualism of the website. These are used by the WPML plugin to identify the preferred user language, as the website is offered multilingually. Further information: https://wpml.org/documentation/support/browser-cookies-stored-wpml/
Google Maps: We integrate the maps of the service “Google Maps” from the provider Google. The data processed may include, in particular, IP addresses and location data of users; Service provider: Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Website: https://mapsplatform.google.com/; Privacy Policy: https://policies.google.com/privacy.
Facebook Pixel and Custom Audiences (Custom Audiences): With the help of the Facebook pixel (or equivalent functions, to transfer Event-Data or Contact Information via interfaces or other software in apps), Facebook is on the one hand able to determine the visitors of our online services as a target group for the presentation of ads (so-called “Facebook ads”). Accordingly, we use Facebook pixels to display Facebook ads placed by us only to Facebook users and within the services of partners cooperating with Facebook (so-called “audience network” https://www.facebook.com/audiencenetwork/ ) who have shown an interest in our online services or who have certain characteristics (e.g. interests in certain topics or products that are determined on the basis of the websites visited) that we transmit to Facebook (so-called “custom audiences”). With the help of Facebook pixels, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not appear annoying. The Facebook pixel also enables us to track the effectiveness of Facebook ads for statistical and market research purposes by showing whether users were referred to our website after clicking on a Facebook ad (known as “conversion tracking”); Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal Basis: Consent (Article 6 (1) (a) GDPR); Website: https://www.facebook.com; Privacy Policy: https://www.facebook.com/about/privacy; Data Processing Agreement: https://www.facebook.com/legal/terms/dataprocessing; Further Information: User event data, i.e. behavioral and interest data, is processed for the purposes of targeted advertising and audience building on the basis of the joint controllership agreement (“Controller Addendum”, https://www.facebook.com/legal/controller_addendum). The joint controllership is limited to the collection and transfer of the data to Meta Platforms Ireland Limited, a company located in the EU. Further processing of the data is the sole responsibility of Meta Platforms Ireland Limited, which concerns in particular the transfer of the data to the parent company Meta Platforms, Inc. in the USA (on the basis of standard contractual clauses concluded between Meta Platforms Ireland Limited and Meta Platforms, Inc.).
Vimeo: Social network and video platform; Service provider: Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Website: https://vimeo.com; Privacy Policy: https://vimeo.com/privacy.
YouTube: Social network and video platform; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Privacy Policy: https://policies.google.com/privacy; Opt-Out: https://adssettings.google.com/authenticated.
HubSpot: Marketing software for lead generation, marketing automation and analysis of marketing activities; Service provider: HubSpot, Inc., 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA; Legal Basis: Consent Art. 6 para. 1 sentence 1 lit. a GDPR, legitimate interest Art. 6 para. 1 sentence 1 lit. f. GDPR; Website: https://www.hubspot.de; Privacy Policy: https://legal.hubspot.com/privacy-policy; Data Processing Agreement: https://legal.hubspot.com/dpa; Standard Contractual Clauses (Safeguarding the level of data protection when processing data in third countries): https://legal.hubspot.com/dpa.
Instagram: Social network; Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR); Website: https://www.instagram.com; Privacy Policy: https://instagram.com/about/legal/privacy.
Google Analytics: Web analytics service; Service provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: Consent pursuant to Art. 6(1)(a) GDPR in conjunction with Art. 49(1)(a) GDPR; Website: https://marketingplatform.google.com/analytics/; Further information: Google Analytics uses cookies to analyze user behavior. Among other things, an individual user ID, truncated IP address, language, device and browser information, interaction data (e.g., page views, length of stay), and timestamps of activities are recorded. The data may be transferred to Google servers in the USA and processed there, and may be passed on to third parties if required by law or commissioned by Google. The European Court of Justice considers the level of data protection in the USA to be inadequate; therefore, there is a risk of access by US authorities without effective legal remedies. Processing is carried out exclusively on the basis of your express consent in accordance with Art. 6 (1) (a) GDPR in conjunction with Art. 49 (1) (a) GDPR. The purpose, storage period, data categories, and cookies used can be found in the consent banner, where you can revoke your consent at any time with effect for the future.

The European Court of Justice classifies the level of data protection in the USA as inadequate. Therefore, there is a risk, that the data collected can be accessed by US authorities for control and monitoring purposes, whereas no effective legal remedies are available. That is why, you will be asked for your express consent in accordance with Art. 6 Para. 1 lit. a GDPR in conjunction with Art. 49 Para. 1 lit. a GDPR for the respective data processing, including the purpose of the processing, the storage period as well as the categories of data, before cookies are set. This information as well as the information regarding cookies can be found in the consent banner. You can also revoke your consent at any time with effect for the future.

Server log files

The website provider automatically collects and saves information in server log files, which your browser automatically transmits to us. They are as follows:

Browser type / browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server query
Apache-Log
PHP-Log

This data cannot be attributed to specific persons. This data will not be combined with other sources of data. We reserve the right to check this data at a later time, if we learn of specific evidence of unlawful use.

What is the legal basis for the processing described above?

The legal basis for processing personal data is, in general – as long there is no specific legal requirement – Article 6 GDPR. Here the following possibilities must be observed in particular:

Consent (Article 6(1)(a) GDPR)
Data processing for the performance of contracts (Article 6(1)(b) GDPR)
Data processing based on the consideration of interests (Article 6(1)(f) GDPR)
Data processing for the compliance with a legal obligation (Article 6(1)(c) GDPR)

If personal data of yours will be processed on the basis of consent, you have the right to revoke such consent at any time and we are bound to respect the revocation in the future.

If we process data based on the consideration of interests, you, as the data subject, have the right to object with regard to the provisions of Article 21 GDPR to the processing of personal data.

How long will the data be saved?

We process the data as long as it is necessary for the purpose.

If there are legal obligations to retain the data – for example, under company law or tax law – the relevant personal data will be saved for the duration of the retention obligation. Once the retention obligation expires, a check is made whether further necessity exists for processing. When there is no necessity, the data is deleted.

You can naturally request information (see below) about your personal data that has been saved and, in the case, where there is no necessity, request that the data be deleted or that the processing be limited.

To which recipients will the data be given to?

Your personal data is generally only given to third parties if this is necessary to fulfil a contract with you, the data is permitted to be passed on based on the consideration of interests within the meaning of Article 6(1)(f) GDPR, we are legally obligated to pass the data on or if and when you have issued a consent.

7. How does ivii guarantee the security of data?

We take careful precautions to protect your data from loss, manipulation and unauthorized access. The precautions are in accordance with the current state of technology and legal requirements.

How can I exercise my rights as a “data subject”?

You have the right to access to the personal data that we have processed.

If the request for access to the data is not made in writing, we kindly ask you to note that we, if necessary, require proof from you that verifies that you are the person who you claim to be.

You also have a right to request rectification or erasure or restriction of processing as far as you are legally entitled.

You also have a right to object to such processing in accordance with legal requirements. The same applies to a right to data portability.

In particular, you have a right to object, according the Article 21(1) and (2) GDPR, to the processing of your data in connection to direct marketing purposes, if this is based on the consideration of interests.

You furthermore have the right to complain to the data protection supervisory authority regarding our processing of personal data. The responsible Austrian supervisory authority can be reached under following address:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien
Phone: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at

Wherever we collect data for a specific purpose on this website, you will be given the opportunity to exclude your data, either by clicking a box or by adjusting your browser settings accordingly.

You can consult privacy@ivii.eu at any time for notices in connection to the above-mentioned rights, complaints as well as other questions, concerns or suggestions pertaining to the topic of data protection.

Links to other websites

The website contains links to external websites. As we are unable to influence these websites, we cannot take any responsibility for their content and data protection policies.