1. General Information
The protection of your personal data is of particular importance to us. We process your personal data exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR) and the Telecommunications Act 2021 (TKG 2021).
In this privacy policy, we inform you about what personal data is collected and processed when you visit our website www.edrizzi.com, for what purposes this is done, and what rights you have.
2. Data processor
The data processor responsible for the processing of personal data on this website is:
brainflash GmbH
Bürgeraustraße 31
office@brainflash.at
+43 4852 726 74
3. Access data and server log files
When you visit our website, technical information is automatically recorded by the web server. This may include, in particular, the following data:
- IP address of the accessing device
- Date and time of access
- Pages and files accessed
- Browser type and browser version
- Operating system used
- Referrer URL
- HTTP status codes
This data is processed to ensure the technical operation, security and stability of our website, and to enable us to detect any technical faults or unauthorised access.
Processing is carried out on the basis of our legitimate interest in accordance with Article 6(1)(f) of the GDPR.
The data is stored only for as long as is necessary for the purposes stated. The specific storage period depends on the settings of our hosting provider.
4. Contact
If you contact us via a contact form on our website or by email, we process the personal data you provide, in particular your name, your email address and the content of your message.
We use this data exclusively to process your enquiry and for any follow-up questions that may be necessary.
Processing is carried out on the basis of Article 6(1)(b) of the GDPR, provided your enquiry relates to a contract or pre-contractual measures. In other cases, it is carried out on the basis of our legitimate interest in processing incoming enquiries in accordance with Article 6(1)(f) of the GDPR.
The data is generally stored for a period of up to 32 months, unless longer statutory retention obligations apply or further storage is necessary to establish, exercise or defend legal claims.
Data will only be disclosed to third parties insofar as this is necessary to process your enquiry, where there is a statutory obligation to do so, or where another legal basis permits it.
5. Cookies and consent management
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device and may contain certain information.
We distinguish between technically necessary cookies and cookies or technologies used for statistics, marketing or the integration of external content.
Technically necessary cookies
These cookies are required to provide basic functions of our website, such as security settings or the storage of your privacy settings.
Insofar as they are absolutely necessary for the provision of the functions you have expressly requested, no separate consent is required.
Statistical and marketing cookies
These technologies help us to analyse the use of our website, improve our services and measure the effectiveness of advertising campaigns.
They are only used if you have given your prior consent.
The legal basis is your consent in accordance with Article 6(1)(a) of the GDPR in conjunction with Section 165(3) of the TKG 2021.
Managing your consent
When you first visit our website, you can use our cookie banner to decide which optional data processing activities you wish to consent to.
You may change or withdraw your consent at any time with future effect via the cookie settings on our website.
Withdrawal does not affect the lawfulness of any processing carried out up to that point.
Furthermore, you can delete or block cookies via your browser settings. This may restrict certain functions of the website.
6. Google Analytics 4
Our website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to statistically analyse the use of our website and to improve our online offering.
In particular, the following information may be processed:
- Pages visited and interactions
- Duration and frequency of website visits
- Approximate geographical location
- Technical information about the browser and device
- Referrer information
- Online identifiers and cookie information
Google Analytics 4 uses, amongst other things, cookies and similar technologies to recognise users and analyse usage behaviour.
According to Google, IP addresses are not permanently logged or stored by Google Analytics 4. However, the IP address may still be processed during data transmission.
Processing takes place exclusively on the basis of your prior consent in accordance with Article 6(1)(a) of the GDPR.
The information collected via Google Analytics may also be transferred to servers operated by Google LLC in the USA.
Further information can be found at:
https://policies.google.com/privacy
You may withdraw your consent at any time via our cookie settings.
7. Google Ads and conversion tracking
Our website uses Google Ads, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to place adverts in Google Search and within the Google Display Network.
Where relevant functions are enabled, we use conversion tracking and remarketing technologies to evaluate the effectiveness of our advertising campaigns and to provide interest-based advertising.
In particular, the following data may be processed:
- Information about pages visited
- Interactions with adverts
- Actions carried out on our website
- Cookie and device identifiers
- Technical information about browsers and end devices
- Information about the origin of a website visit
Under certain conditions, Google may link this information with other data, particularly if you are logged in to a Google service and have enabled the relevant settings.
Processing takes place exclusively on the basis of your consent in accordance with Article 6(1)(a) of the GDPR.
Personal data may be transferred to Google LLC in the USA.
Further information:
https://policies.google.com/privacy
Settings for personalised advertising:
https://myadcenter.google.com/
You can withdraw your consent at any time via our cookie settings.
8. LinkedIn Insight Tag
Our website uses the LinkedIn Insight Tag, an analytics and marketing tool provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
The LinkedIn Insight Tag enables us to measure the effectiveness of our advertising campaigns on LinkedIn, obtain statistical analyses of website visits and, where appropriate, display targeted advertising.
In particular, the following information may be processed:
- IP address
- Device and browser characteristics
- Time and duration of the website visit
- Pages visited
- Referrer URL
- Interactions with our website
- Cookie and device identifiers
LinkedIn may link this information to existing LinkedIn user accounts, insofar as this is permitted under the relevant privacy settings and terms of use.
We generally receive statistical reports from LinkedIn regarding the use of our website and the effectiveness of our advertising measures.
The LinkedIn Insight Tag is activated exclusively following your prior consent in accordance with Article 6(1)(a) of the GDPR.
As part of this processing, personal data may also be processed outside the European Union, in particular in the USA.
Further information can be found in LinkedIn’s privacy policy:
https://www.linkedin.com/legal/privacy-policy
You can manage your advertising preferences on LinkedIn:
https://www.linkedin.com/psettings/advertising
You may withdraw your consent at any time via our cookie settings.
9. YouTube
Videos from the YouTube platform may be embedded on our website.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When embedded YouTube videos are played or loaded, a connection may be established with Google’s servers.
In particular, your IP address, technical information about your device and information about the page you are viewing may be transmitted to Google.
YouTube may also use cookies and similar technologies. If you are logged in to Google or YouTube, this information may, under certain circumstances, be associated with your user account.
The embedding is based on your consent in accordance with Article 6(1)(a) of the GDPR.
Where consent is required for the embedding, YouTube content will only be loaded once you have given your consent.
Even when using YouTube’s enhanced privacy mode, personal data may still be transmitted to Google.
Further information:
10. Google reCAPTCHA
We use Google reCAPTCHA to protect our website against automated access, malicious input and spam.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google reCAPTCHA is used to determine whether certain inputs on our website are made by a natural person or automatically by a computer programme.
In particular, the following information may be processed for this purpose:
- IP address
- Browser and device information
- Date and time of access
- Mouse movements and interactions with the website
- Information about user behaviour
- Any Google cookies that may be present
The information collected may be transferred to Google and processed there. This may also involve a transfer to the USA.
The processing serves to protect our website from misuse and to ensure its functionality.
The specific legal basis depends on the technical implementation. Insofar as reCAPTCHA relies on access to the end device or corresponding data processing that requires consent, activation will only take place after you have given your consent in accordance with Article 6(1)(a) of the GDPR and Section 165(3) of the TKG 2021.
Further information:
11. Transfer of personal data to third countries
In connection with the use of Google Analytics, Google Ads, YouTube, Google reCAPTCHA and LinkedIn, personal data may be transferred to companies or servers outside the European Economic Area, in particular to the USA.
Appropriate data protection safeguards may be in place for data transfers to the USA.
These include, in particular, the EU-US Data Privacy Framework, provided that the respective data recipient is certified accordingly and the transfer falls under the applicable adequacy decision of the European Commission.
In other cases, appropriate safeguards, in particular standard contractual clauses pursuant to Article 46 of the GDPR, may apply.
Information on the respective data transfers and protective measures can be found in the privacy policies of the service providers used.
12. Retention period
As a general rule, we only store personal data for as long as is necessary to fulfil the respective processing purposes or where statutory retention obligations apply.
The retention period may vary depending on the type of data and the service used.
We generally store data processed in connection with your enquiries for up to 32 months, unless a longer retention period is required.
For data processed by external services such as Google or LinkedIn, the respective retention and deletion periods of the service providers also apply.
You may withdraw any consent you have given at any time with effect for the future.
13. Links to external websites
Our website may contain links to external websites.
When you access such links, you leave our area of responsibility. The respective operators of external websites are generally responsible for the processing of personal data on those websites.
We recommend that you consult the privacy policies of the respective providers.
14. Your rights
In connection with the processing of your personal data, you are entitled, subject to the statutory requirements, to the following rights in particular:
Right of access (Art. 15 GDPR):
You may request information about which personal data we process about you.
Right to rectification (Art. 16 GDPR):
You may request the rectification of inaccurate data or the completion of incomplete data.
Right to erasure (Art. 17 GDPR):
You may, under certain conditions, request the erasure of your personal data.
Right to restriction of processing (Art. 18 GDPR):
You may, under certain conditions, request that the processing of your data be restricted.
Right to data portability (Art. 20 GDPR):
You may, subject to the statutory conditions, request to receive your data in a structured, commonly used and machine-readable format.
Right to object (Art. 21 GDPR):
You may, under certain conditions, object to the processing of your personal data.
Right to withdraw consent (Art. 7(3) GDPR):
You may withdraw any consent you have already given at any time, with effect for the future.
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a data protection supervisory authority.
In Austria, this is:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Wien
Website: https://www.dsb.gv.at
E-Mail: dsb@dsb.gv.at