Privacy Policy

We attach great importance to the responsible handling of your personal data. We therefore process your data exclusively in accordance with the applicable legal provisions (GDPR, DSG, TKG). This Privacy Policy provides transparent information about the personal data we collect, how we process it, and the rights you have regarding your personal data when using our online services available under the domains certainity.com and crtnty.it (hereinafter collectively referred to as the “Websites”).

1. Name and Contact Details

The controller within the meaning of Article 4(1)(7) GDPR, who solely determines the purposes and means of the processing of personal data, is:
CERTAINITY Holding GmbH
Elmargasse 2-4
1190 Vienna
Austria
E-mail: office@certainity.com
If you have any questions regarding data protection or the processing of personal data, please contact us at datenschutz@certainity.com or by post at the above company address, adding the reference “Data Protection”.

2. Categories of Personal Data, Their Collection, Storage, and the Nature and Purpose of Processing

2.1 Processing of Personal Data When Visiting Our Website

The processing of the data listed below is technically necessary to display our Website and is carried out based on our legitimate interest pursuant to Article 6(1)(f) GDPR in providing you with access to our Website:

  1. IP address
  2. Requested content (visited page)
  3. Access status / HTTP status code

When you use our Website for informational purposes only — that is, when you simply browse the Website without registering or otherwise providing us with information — we also process the following data transmitted by your web browser for the purposes of ensuring the stability and security of the Website pursuant to Article 6(1)(f) GDPR: Date and time of the request

  1. Time zone difference to Greenwich Mean Time (GMT)
  2. Amount of data transferred
  3. Referrer (previously visited page)
  4. Web browser
  5. Operating system
  6. Language and version of the web browser software

To better understand how our Website is used and to optimize our content, we also collect the following information pursuant to Article 6(1)(f) GDPR:

  1. Landing page
  2. Visited pages
  3. Exit page
  4. Time spent on individual pages
  5. Total time spent on the Website
  6. Country / region / city from which the Website is accessed
  7. Device type, device manufacturer, and screen resolution

In addition to the data described above, we use cookies when you visit our Website. Cookies are stored (temporarily) on your end device and are associated with the web browser you use, enabling the party setting the cookie to receive certain information.
This Website uses only technically necessary cookies that are required to display the Website and provide essential technical functionality. The use of these cookies is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in providing the Website with the required technical functionality and does not require your consent. These are generally temporary cookies, such as so-called “session cookies”, which are deleted automatically at the end of your visit or when you close your web browser. If you wish to use our Website, you cannot object to the use of these technically necessary cookies.

2.3 If You Enter into a Business Relationship with Us, We Collect the Following Information

  1. Salutation, academic title (if applicable), first name, and last name
  2. E-mail address
  3. Telephone number (landline and/or mobile)
  4. Contact details (including postal address)
  5. Contract-related information required for contract execution
  6. Billing information and information relating to previous payment history
  7. Banking details (financial institution, bank account details, credit information, etc.)

The processing of this data is carried out at your request and is necessary pursuant to Article 6(1)(b) GDPR for the performance of a contract or to take steps prior to entering into a contract. Without this information, the requested services cannot be provided. We retain the data we collect until the expiry of the applicable statutory retention periods and subsequently delete it, unless longer retention periods are required pursuant to Article 6(1)(c) GDPR due to tax or commercial law obligations (e.g. under the Austrian Federal Fiscal Code (BAO) or the Austrian Commercial Code (UGB)), or you have consented to further storage pursuant to Article 6(1)(a) GDPR.

2.4 If You Complete Our Contact Form, We Collect the Following Information

  1. Name (first name and last name)
  2. E-mail address
  3. Content of your enquiry
  4. IP address
  5. Date and time of your enquiry

The processing is carried out at your request and is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in responding to your enquiry. Without processing this data, it would not be possible to handle your request.

For this purpose, we use the service Brevo, provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, which processes your personal data on our behalf. We have concluded a data processing agreement with Sendinblue GmbH in accordance with Article 28 GDPR.

3. Transfer of Data to Third Parties

The data described above will only be transferred for the purposes outlined in this Privacy Policy. Your personal data will only be disclosed to third parties on the basis of the legal grounds described above.

In particular, your data may be transferred for the following purposes:

  1. Transfer of your payment data to our payment service provider
  2. Transfer to our data processors
  3. Transfer to our affiliated companies

Any recipient may process the transferred data solely for the purposes specified above.

4. Newsletter

Our newsletter provides regular updates on our services, activities, and current offers. You can subscribe to our newsletter free of charge by completing the relevant form on our Website and providing your consent to receive marketing communications. You will then receive a confirmation e-mail requiring you to confirm your subscription before receiving the newsletter (double opt-in).

You may withdraw your consent to receive the newsletter at any time, for example by using the unsubscribe link included in every newsletter e-mail. Withdrawal of your consent does not affect the lawfulness of any processing carried out on the basis of your consent before its withdrawal.

If you subscribe to our newsletter, we process the following personal data:

  1. Salutation
  2. First and last name
  3. E-mail address
  4. Company name
  5. Date and time of your consent and confirmation
  6. IP address

We process this personal data for the following purposes:
a. Storage in our Customer Relationship Management (CRM) system;
b. Storage in our e-mail distribution list;
c. Documentation of your consent in our e-mail marketing system;
d. Sending recurring marketing e-mails;
e. Analysing the performance of our marketing e-mails, including:
• Whether an e-mail has been opened; and
• When an e-mail has been opened.

For the purposes listed above, we transfer your personal data to the following recipients:

  1. For the first purpose (point a), we use the service Pipedrive, provided by Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia, which processes your personal data on our behalf. We have concluded a data processing agreement with Pipedrive OÜ in accordance with Article 28 GDPR.
  2. For the remaining purposes (points b to e), we use the service Brevo, provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, which processes your personal data on our behalf. We have concluded a data processing agreement with Sendinblue GmbH in accordance with Article 28 GDPR.

The legal basis for processing your personal data is your consent pursuant to Article 6(1)(a) GDPR. We store your personal data in our CRM system and e-mail distribution list until you withdraw your consent.

5. Your Rights

As a data subject under the GDPR, you are entitled to the following rights:

  1. The right to obtain information about your personal data (Article 15 GDPR);
  2. The right to rectification of inaccurate personal data concerning you (Article 16 GDPR);
  3. The right to erasure of your personal data (Article 17 GDPR);
  4. The right to restriction of processing of your personal data (Article 18 GDPR);
  5. The right to object to the processing of your personal data (Article 21 GDPR);
  6. The right to withdraw any consent you have given to us at any time. Withdrawal of your consent means that we will no longer process your personal data based on that consent in the future (Article 7(3) GDPR);
  7. The right to data portability (Article 20 GDPR);
  8. The right to lodge a complaint with a supervisory authority. If you believe that the processing of your personal data is not carried out in accordance with applicable data protection laws, you have the right to lodge a complaint with the competent data protection supervisory authority (Article 77 GDPR).

6. Right to Object

Where your personal data is processed on the basis of our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing. To exercise this right, simply send an e-mail to datenschutz@certainity.com. If you have any questions regarding the processing of your personal data, please do not hesitate to contact us at any time.

7. Changes to This Privacy Policy

We reserve the right to amend, update, or modify this Privacy Policy at any time without prior notice by publishing the respective changes, updates, or modifications on this Website.

First published: 2023-09-27 17:30 CET
Last updated: 30 June 2026