Privacy Policy

Last updated: February 2026

 

1. Controller

DEWINE Labs GmbH
Inffeldgasse 33/IV
8010 Graz
Austria

Email: info@dewinelabs.com
Phone: +43 660 149 28 38

Imprint: https://dewinelabs.com/en/imprint/ 

 

2. General Information on Data Processing

We process personal data exclusively in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

Personal data means any information relating to an identified or identifiable natural person, such as name, email address or IP address.

 

3. Purposes and Legal Bases of Processing

We process personal data in particular for the following purposes:

  • provision and operation of our website,
  • responding to enquiries and communication,
  • performance of contracts and pre-contractual measures,
  • ensuring IT security and system stability,
  • website analytics and optimisation,
  • marketing activities based on consent.

 

Processing is carried out on the basis of:

  • Art. 6(1)(a) GDPR — consent,
  • Art. 6(1)(b) GDPR — performance of a contract or pre-contractual measures,
  • Art. 6(1)(c) GDPR — compliance with legal obligations,
  • Art. 6(1)(f) GDPR — legitimate interests.

 

Our legitimate interests include in particular:

  • maintaining a secure and stable online service,
  • analysing and improving our website,
  • preventing misuse,
  • developing and managing our business operations efficiently.

 

4. Website Provision and Hosting

When visiting our website, certain information is automatically collected in server log files, including:

  • IP address,
  • date and time of access,
  • browser type and version,
  • operating system,
  • referrer URL,
  • accessed pages.

 

Processing takes place on the basis of Art. 6(1)(f) GDPR for ensuring system security and technical stability.

Log file information is generally deleted after a maximum of 30 days unless further retention is required for evidentiary purposes.

Our website is operated using WordPress.

 

5. Use of Cookies

Our website uses cookies. Cookies are small text files stored on your device.

We distinguish between:

  • technically necessary cookies,
  • statistics cookies,
  • marketing cookies.

 

Cookies that are not technically necessary are only used based on your consent pursuant to Art. 6(1)(a) GDPR.

Consent is managed through our consent management platform. You may withdraw or modify your consent at any time.

 

6. Website Analytics

Google Analytics

We use Google Analytics to analyse the use of our website.

Provider: Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland

 

Google Analytics creates pseudonymised usage profiles. IP anonymisation (IP masking) is enabled. Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Further information: https://policies.google.com/privacy

Opt-out: https://tools.google.com/dlpage/gaoptout

 

Google Tag Manager

We use Google Tag Manager to centrally manage website tags.

Google Tag Manager itself does not create user profiles or perform independent analyses but enables the integration of other services.

Legal basis: consent pursuant to Art. 6(1)(a) GDPR.

 

7. Online Marketing

Google Ads

We use Google Ads for advertising and conversion measurement.

Provider: Google Ireland Limited.

Legal basis: consent pursuant to Art. 6(1)(a) GDPR.

 

LinkedIn Insight Tag

We use the LinkedIn Insight Tag to measure campaign performance and build audiences.

Provider: LinkedIn Ireland Unlimited Company
Wilton Place, Dublin 2, Ireland

Legal basis: consent pursuant to Art. 6(1)(a) GDPR.

Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

 

8. Contact Requests

If you contact us by email or via contact forms, we process:

  • name,
  • email address,
  • message content,
  • any additional information you voluntarily provide.

 

Processing takes place:

  • for pre-contractual measures pursuant to Art. 6(1)(b) GDPR,
  • based on our legitimate interest in responding to enquiries pursuant to Art. 6(1)(f) GDPR.

 

9. HubSpot CRM

We use HubSpot to manage customer enquiries, communication and marketing processes.

Provider: HubSpot Ireland Limited, Dublin, Ireland

A data processing agreement has been concluded.

 

Legal basis:

  • Art. 6(1)(b) GDPR,
  • Art. 6(1)(f) GDPR,
  • where applicable Art. 6(1)(a) GDPR (newsletter subscription).

 

Further information: https://legal.hubspot.com/privacy-policy

 

10. Newsletter

If you subscribe to our newsletter, we process:

  • email address,
  • name (if provided),
  • interaction data such as openings and clicks.

 

Legal basis: consent pursuant to Art. 6(1)(a) GDPR.

You may unsubscribe at any time via the unsubscribe link included in each newsletter or by contacting us.

 

11. Embedded Content and Third-Party Services

We integrate content and services from third-party providers, including:

  • YouTube,
  • Google Maps,
  • LinkedIn,
  • Facebook,
  • Instagram.

When such content is accessed, your IP address may be transmitted to the respective provider.

Processing is based on:

  • consent where required, or
  • legitimate interests in providing functional website features.

 

12. Data Retention

Personal data is stored only as long as necessary for the respective purposes or where statutory retention obligations apply.

Typical retention periods under Austrian law include:

  • seven years for tax-relevant documentation,
  • three years for civil law limitation periods.

 

13. Data Subject Rights

You have the following rights under the GDPR:

  • right of access (Art. 15 GDPR),
  • right to rectification (Art. 16 GDPR),
  • right to erasure (Art. 17 GDPR),
  • right to restriction of processing (Art. 18 GDPR),
  • right to data portability (Art. 20 GDPR),
  • right to object (Art. 21 GDPR),
  • right to withdraw consent at any time.

 

You also have the right to lodge a complaint with a supervisory authority.

 

Competent supervisory authority in Austria:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
https://www.dsb.gv.at

 

14. Data Security

We implement appropriate technical and organisational measures pursuant to Art. 32 GDPR.

Data transmission via our website is protected using TLS/SSL encryption (HTTPS).

 

15. Amendments to this Privacy Policy

We reserve the right to update this Privacy Policy where necessary to reflect legal, technical or operational changes.