Privacy Policy

The responsible handling of your personal data is important to us. We therefore process your data exclusively in accordance with the applicable legal provisions (GDPR, Austrian Data Protection Act (DSG), Telecommunications Act (TKG)). With this Privacy Policy, we aim to provide you with transparent information about what data we collect, how we process it, and what rights you have regarding your personal data when using our online services under the domains certainity.com and crtnty.it (hereinafter collectively referred to as the “Websites”).

1. Name and Contact Details

The controller within the meaning of Art. 4(1)(7) GDPR, who independently determines the purposes and means of processing personal data, is:
CERTAINITY Holding GmbH,
Elmargasse 2-4 1190,
Vienna
Email: office@certainity.com
If you have any questions regarding data protection or the processing of personal data, please contact datenschutz@certainity.com or write to our company address, adding “Data Protection” to the address.

2. Categories of Personal Data, Their Collection and Storage, and the Nature and Purpose of Processing

2.1 Processing of Personal Data When Visiting Our Website

The processing of the data described below is technically necessary in order to display our Website to you and is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in responding to your request to access our Website:

  1. IP address
  2. Content of the request (page visited)
  3. Access status/HTTP status code

When you use the Website for informational purposes only, i.e. merely view it without registering or otherwise providing us with information, we also process the following data transmitted by your web browser to our server for the purposes of stability and security pursuant to Art. 6(1)(f) GDPR: date and time of the request

  1. Time zone difference from Greenwich Mean Time (GMT)
  2. Amount of data transferred
  3. Referrer (previously visited page)
  4. Web browser
  5. Operating system
  6. Language and version of the web browser software.

To better understand your usage behavior and adapt our content accordingly, we also collect the following data pursuant to Art. 6(1)(f) GDPR:

  1. Entry page
  2. Pages visited
  3. Exit page
  4. Time spent on a subpage of the Website (visit duration)
  5. Time spent on the Website (total visit duration)
  6. Country / region / city from which the Website is accessed
  7. Device type, device brand, and resolution

In addition to the data mentioned above, when you use our Website, we use cookies that are (temporarily) stored on your end device and associated with the web browser you use, allowing certain information to be transmitted to the party that sets the cookie.
This Website only uses technically necessary cookies that are required to display the Website and provide technically essential functions. The use of these cookies is based on our legitimate interest within the meaning of Art. 6(1)(f) GDPR in providing our Website with the intended technical functionality and does not require your consent. These are generally temporary cookies, such as so-called “session cookies”, which are deleted after your visit to the Website ends, at the latest when you close your web browser. You cannot object to the use of these technical cookies if you wish to use our Website.

2.3 If You Enter into a Business Relationship with Us, We Collect the Following Information from You:

  1. Form of address, title (if applicable), first name, last name
  2. Email address
  3. Telephone number (landline and/or mobile)
  4. Contact details (including postal address)
  5. Contract data required for processing
  6. Billing data and information relating to previous payment behavior
  7. Bank details (financial institution, bank account details, credit information, etc.)

Processing is carried out at your request and is necessary pursuant to Art. 6(1)(b) GDPR for the performance of a contract or in order to take steps prior to entering into a contract. Without providing this data, the relevant activities cannot be carried out. The data we collect will be stored until the expiry of the statutory retention periods and subsequently deleted, unless longer retention periods apply pursuant to Art. 6(1)(c) GDPR due to tax and corporate law retention and documentation obligations (under the Austrian Federal Fiscal Code (BAO) or Austrian Criminal Code (StGB)), or you have consented to further storage pursuant to Art. 6(1)(a) GDPR.

2.4. If You Complete Our Contact Form, We Collect the Following Information from You:

  1. Name (first name, last name)
  2. Email address
  3. Content of the inquiry
  4. IP address
  5. Date and time of the inquiry

Processing is carried out at your request and is based on our legitimate interest within the meaning of Art. 6(1)(f) GDPR in responding to your inquiry. Without processing this data, we would not be able to respond to your inquiry. For this processing, we use the “Brevo” service provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, which processes your personal data on our behalf. We have entered into a data processing agreement with Sendinblue GmbH pursuant to Art. 28 GDPR.

2.5. If You Register for a Webinar, We Collect the Following Information from You:

  1. Name (first name, last name)
  2. Email address
  3. Organization
  4. Position
  5. Date and time of registration

Processing is carried out on the basis of your registration and your consent pursuant to Art. 6(1)(a) GDPR. For this processing, we use the “Microsoft Teams Events App” provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin, D18 P521, Ireland, which processes your personal data on our behalf. We have entered into a data processing agreement with Microsoft Corporation pursuant to Art. 28 GDPR.

3. Disclosure of Data to Third Parties

The data referred to above is disclosed only for the purposes described. Your data is shared with third parties exclusively on the basis of the legal grounds specified above. In particular, your data is disclosed to the following recipients for the following purposes:

  1. Disclosure of your payment data to our payment service provider
  2. Disclosure to our processors
  3. Disclosure to our affiliated companies

The data disclosed may only be processed by third parties for the purposes specified above.

4. Newsletter

Through our newsletter, we regularly inform you about our services and activities and present current offers to you. You can subscribe to our newsletter free of charge by consenting to receive it by completing the relevant form on our Website. You will then receive a confirmation email in which you must confirm your consent in order to receive the newsletter (double opt-in).
You may withdraw your consent to receive the newsletter at any time, for example by using the unsubscribe link included in every newsletter email. The withdrawal of your consent does not affect the lawfulness of data processing carried out on the basis of your consent prior to its withdrawal.
If you consent to receiving the newsletter, we process the following personal data:

  1. Form of address
  2. First and last name;
  3. Email address;
  4. Date and time of consent and confirmation; and
  5. “Signals” such as IP address, TLS fingerprint, User-Agent header, Sitekey, and the associated origin.

We process this personal data for the following purposes:
a. Storage in our customer relationship management system (CRM);
b. Storage in our email distribution list;
c. Documentation of consent in our email marketing system;
d. Recurring distribution of marketing emails;
e. Analysis of user behavior relating to marketing emails for performance measurement;
f. Whether the email was opened; and
g. When the email was opened.
h. Distinguishing human users from bots and blocking bot traffic

For the purposes specified above, we will disclose your personal data to the following recipients:

  1. For the first purpose under point a, we use the “Pipedrive” service provided by Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia, which processes your personal data on our behalf. We have entered into a data processing agreement with Pipedrive OÜ pursuant to Art. 28 GDPR.
  2. For the purposes under points b to e, we use the “Brevo” service provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, which processes your personal data on our behalf. We have entered into a data processing agreement with Sendinblue GmbH pursuant to Art. 28 GDPR.
  3. For the final purpose under point h, we use the “Turnstile” service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which processes only your “Signals” on our behalf. We have entered into a data processing agreement with Cloudflare, Inc. pursuant to Art. 28 GDPR. According to Cloudflare, Inc.’s Privacy Policy, Cloudflare is not able to directly identify individuals from the signals collected by Turnstile, including IP addresses. For the purpose of improving its bot detection capabilities, Cloudflare processes this data as a data controller (see Turnstile Privacy Addendum).

The legal basis for processing your personal data is your consent pursuant to Art. 6(1)(a) GDPR. We store your personal data in our email distribution list and customer relationship management system until you withdraw your consent.

5. Your Rights

As a data subject under the GDPR, you have the rights set out below.

  1. Right of access to personal data concerning you (Art. 15 GDPR);
  2. Right to rectification of inaccurate personal data concerning you (Art. 16 GDPR);
  3. Right to erasure of personal data (Art. 17 GDPR);
  4. Right to restriction of processing of personal data (Art. 18 GDPR);
  5. Right to object to the processing of personal data (Art. 21 GDPR);
  6. Right to withdraw any consent you have previously given to us at any time. As a result, we may no longer continue the data processing based on this consent in the future (Art. 7(3) GDPR);
  7. Right to data portability (Art. 20 GDPR);
  8. Right to lodge a complaint with a supervisory authority. You have the right to contact the competent data protection supervisory authority if you believe that the processing of your personal data is unlawful (Art. 77 GDPR).

6. Right to Object to Processing

Where your personal data has been collected on the basis of our legitimate interests within the meaning of Art. 6(1)(f) GDPR, you have the right to object to the processing. To exercise this right, simply send an email to datenschutz@certainity.com. If you have any questions regarding the processing of your data, please feel free to contact us at any time.

7. Changes to this Privacy Policy

We reserve the right to amend, update, or modify our Privacy Policy at any time and without prior notice by publishing such amendments, updates, or modifications on the Website.

First published: 2023-09-27 17:30 CET
Last updated: 31.08.2026