Privacy Policy

Privacy notice pursuant to the General Data Protection Regulation (GDPR).

The protection of your personal data is important to us. We process your data only on the basis of applicable law (GDPR and the Austrian Data Protection Act). This notice explains what data we process when you visit this website or contact us, on what legal basis, and what rights you have. Last updated: June 2026.

Data Controller

Aventario Services GmbH
Tuchlauben 7a, 1010 Vienna, Austria
Email: office@aventario.com

Hosting and Server Log Files

This website is hosted by Vercel Inc. on infrastructure located in the European Union (Frankfurt region). When you access the site, our hosting provider automatically processes technical access data in server log files: your IP address, the date and time of the request, the page requested, the referring URL, and your browser and operating system. This data is necessary to deliver the website securely and reliably, and is processed on the basis of our legitimate interest in a stable and secure website (Art. 6(1)(f) GDPR). Vercel acts as our processor, bound by the data processing terms that form part of its service. Where Vercel, as a US-based company, may access data, that transfer is covered by the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

Fonts, Styles and Icons

All fonts, stylesheets and icons used on this website are served directly from our own server in the European Union. We do not load fonts, scripts or other resources from third-party content delivery networks (for example Google Fonts). No data is transmitted to such providers when you view our pages.

Contact and Enquiry Forms

When you contact us by email or submit our contact or whitepaper forms, we process the data you provide (such as your name, email address, company and message) to handle your enquiry and to follow up on related questions. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give via the checkbox on the form, and our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). You can withdraw your consent at any time with future effect by emailing us.

These form submissions are stored on our behalf by Supabase, which holds the data on servers located in the European Union (Ireland), bound by its standard data processing terms. We do not share this data with other third parties without your consent.

Vendor Maturity Assessment

Our online vendor maturity assessment is provided by Typeform (Typeform S.L., Barcelona, Spain), which processes your responses on our behalf within the European Union, bound by its standard data processing terms. We use the results to give you tailored feedback and, where you provide contact details, to follow up. Please see Typeform's data processing terms for details.

Advisory Engagements

Within the scope of an advisory engagement, we process the personal data necessary to provide our services, on the basis of the contract with you or your organisation (Art. 6(1)(b) GDPR). This data is treated as strictly confidential and is not disclosed to third parties without authorisation.

Cookies and Analytics

This website does not use tracking, advertising or analytics cookies, and it does not profile your behaviour. Only technically necessary data required to deliver the site is processed (see "Hosting and Server Log Files" above). Because we set no non-essential cookies, no cookie consent banner is required.

Data Transfers Outside the EU/EEA

We process personal data within the European Union and the European Economic Area. Where a processor is a company based in a third country (such as the United States), the data itself is stored within the EU, and any access from outside the EU/EEA is safeguarded by the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

Your Rights

You have the right to access, rectify, erase, restrict and port your personal data, to object to processing, and to withdraw consent at any time with future effect. To exercise any of these rights, contact us at office@aventario.com. If you believe the processing of your data infringes data protection law, you may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).

Retention

We retain personal data only as long as necessary for the purposes described above or as required by applicable law (for example commercial and tax law retention periods). Enquiry data is deleted once your request has been dealt with and no retention obligation applies.

Contact for Privacy Matters

For any questions regarding the processing of your personal data, please contact us at office@aventario.com.