Privacy policy

Privacy Policy

Privacy Policy – Valoterna GmbH

Last updated: July 2026

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

Valoterna GmbH
Tegetthoffstraße 3/10
1010 Vienna
Austria
Email: office@valoterna.com
Phone: +43 (0)1 992 7880
Website: www.valoterna.com

2. General Information on Data Processing

Personal data is processed in accordance with applicable data protection regulations, in particular the GDPR, the Austrian Data Protection Act (DSG), and the Telecommunications Act (TKG 2003).

This privacy policy informs data subjects about the nature, scope, and purpose of the processing of personal data on this website, as well as their rights.

3. Data Processing in Connection with Website Use

a) Access Data and Server Logs

When you access our website, the following data is automatically collected:

IP address of the requesting device
Date and time of access
Browser type and version
Operating system
Referrer URL
Hostname of the accessing computer
Pages/files accessed

This data is processed based on our legitimate interest (Art. 6 para. 1 lit. f GDPR) to ensure the technical operation of the website and to defend against attacks. Log data is stored for a maximum of four weeks.

b) Contact Form

If you contact us via the contact form, the data you provide (e.g., name, email address, message) will be processed to handle your inquiry.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

c) Registration / User Account

When you register voluntarily, we process personal data for the purpose of fulfilling the contract and managing your user account.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract)

d) Online Shop

When you use our online shop, we process the personal data necessary for preparing offers, fulfilling contracts, and processing orders (e.g., name, address, order details, payment details).

Legal basis: Art. 6 para. 1 lit. b GDPR (contract)
Storage period: Until the expiry of statutory retention periods or limitation periods

4. Cookies and Web Analytics

a) Cookies

This website uses cookies for technical functionality and to improve the user experience.

Legal basis:

Technically necessary cookies: Art. 6 para. 1 lit. f GDPR
Analytics and marketing cookies: Art. 6 para. 1 lit. a GDPR (consent)

You can manage and adjust the use of cookies via the cookie banner. Details about the cookies used can be viewed there.

b) Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. IP anonymization is activated.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

Data transfer to the USA: is based on Art. 49 para. 1 lit. a GDPR (explicit consent)

Cookie storage duration:

_ga: 2 years
_gid: 24 hours
_gat: 1 minute

You can object to this processing at any time via the cookie settings or the browser plugin at https://tools.google.com/dlpage/gaoptout.

5. Newsletter Distribution

If you subscribe to our newsletter, we process your email address to send you information about our products and services. This may be handled by an external service provider (e.g., Brevo).

Legal basis: Art. 6 para. 1 lit. a GDPR (consent)

Unsubscribing: You can unsubscribe at any time via the link in each newsletter.

6. Third-party providers/recipients

We use data processors within the meaning of Art. 28 GDPR for hosting, IT services, newsletter distribution, and analysis. Some of these providers are located outside the EU (e.g., the USA). The transfer of personal data is based on appropriate safeguards (standard contractual clauses) or with your consent.

7. Use of external web fonts

This website uses external fonts (e.g., Google Fonts, MyFonts). When loading these fonts, a connection may be established to servers in third countries (e.g., the USA).

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in an appealing presentation)

8. Social Media Plugins and Share Buttons

Our website includes social media buttons (e.g., Facebook, Instagram, LinkedIn). These are integrated in a privacy-friendly manner (e.g., using a 2-click solution). Data is only transferred when you actively click on a button.

Legal basis: Art. Article 6(1)(a) GDPR (Consent by clicking)

9. Your Rights (Data Subject Rights)

You have the following rights under the GDPR:

Right of access (Article 15 GDPR)
Right to rectification (Article 16 GDPR)
Right to erasure (Article 17 GDPR)
Right to restriction of processing (Article 18 GDPR)
Right to data portability (Article 20 GDPR)
Right to object to processing (Article 21 GDPR)
Right to withdraw consent (Article 7(3) GDPR)
Right to lodge a complaint with the data protection authority (Article 77 GDPR)

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

10. Updates to this Privacy Policy

We reserve the right to update this policy in the event of legal or technical changes. The current version can be found at any time at www.valoterna.com/datenschutz or in the footer of the website.