Privacy Policy

Privacy notice pursuant to the General Data Protection Regulation (GDPR).

The protection of your personal data is important to us. We process your data only on the basis of applicable law (GDPR and the Austrian Data Protection Act). This notice explains what data we process when you visit this website or contact us, on what legal basis, and what rights you have. Last updated: June 2026.

Data Controller

Aventario Services GmbH
Tuchlauben 7a, 1010 Vienna, Austria
Email: office@aventario.com

Hosting and Server Log Files

This website is hosted by Vercel Inc. on infrastructure located in the European Union (Frankfurt region). When you access the site, our hosting provider automatically processes technical access data in server log files: your IP address, the date and time of the request, the page requested, the referring URL, and your browser and operating system. This data is necessary to deliver the website securely and reliably, and is processed on the basis of our legitimate interest in a stable and secure website (Art. 6(1)(f) GDPR). Vercel acts as our processor, bound by the data processing terms that form part of its service. Where Vercel, as a US-based company, may access data, that transfer is covered by the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

Fonts, Styles and Icons

All fonts, stylesheets and icons used on this website are served directly from our own server in the European Union. We do not load fonts, stylesheets or icons from third-party content delivery networks (for example Google Fonts). The only third-party script that may load is the Google analytics and advertising tag described under "Cookies, Analytics and Advertising" below, and only after you have given your consent.

Contact and Enquiry Forms

When you contact us by email or submit our contact or whitepaper forms, we process the data you provide (such as your name, email address, company and message) to handle your enquiry and to follow up on related questions. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give via the checkbox on the form, and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). You can withdraw your consent at any time with future effect by emailing us.

These form submissions are stored on our behalf by Supabase, which holds the data on servers located in the European Union (Ireland), bound by its standard data processing terms. We do not share this data with other third parties without your consent.

Vendor Maturity Assessment

Our online vendor maturity assessment is provided by Typeform (Typeform S.L., Barcelona, Spain), which processes your responses on our behalf within the European Union, bound by its standard data processing terms. We use the results to give you tailored feedback and, where you provide contact details, to follow up. Please see Typeform's data processing terms for details.

Advisory Engagements

Within the scope of an advisory engagement, we process the personal data necessary to provide our services, on the basis of the contract with you or your organisation (Art. 6(1)(b) GDPR). This data is treated as strictly confidential and is not disclosed to third parties without authorisation.

Cookies, Analytics and Advertising

We use Google Analytics 4 and Google Ads, services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to measure how this website is used and to evaluate the performance of our advertising. These services set cookies and process usage data such as the pages you visit, your approximate location, and device and browser information together with an online identifier.

These analytics and advertising tools load only after you give your consent through the cookie banner shown on your first visit. Until you accept, no Google analytics or advertising script is loaded and no related cookie is set. We use Google Consent Mode so that your choice is applied before any tag fires. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with future effect by declining in the banner, clearing this site's data in your browser, or contacting us.

Google may transfer data to servers operated by Google LLC in the United States. Such transfers are safeguarded by the European Commission's Standard Contractual Clauses and the EU–US Data Privacy Framework (see "Data Transfers Outside the EU/EEA" below). You can opt out of Google Analytics across all websites using Google's browser add-on at tools.google.com/dlpage/gaoptout.

Data Transfers Outside the EU/EEA

We process personal data within the European Union and the European Economic Area. Where a processor is a company based in a third country (such as the United States), the data itself is stored within the EU, and any access from outside the EU/EEA is safeguarded by the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

Your Rights

You have the right to access, rectify, erase, restrict and port your personal data, to object to processing, and to withdraw consent at any time with future effect. To exercise any of these rights, contact us at office@aventario.com. If you believe the processing of your data infringes data protection law, you may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).

Retention

We retain personal data only as long as necessary for the purposes described above or as required by applicable law (for example commercial and tax law retention periods). Enquiry data is deleted once your request has been dealt with and no retention obligation applies.

Contact for Privacy Matters

For any questions regarding the processing of your personal data, please contact us at office@aventario.com.