PRIVACY POLICY

Last updated: February 2026

1. Controller
TRIOTRONIK GmbH
Energiestraße 10
8160 Weiz
Austria

Phone: +43 (0)3172 422990
Email: dsgvo@triotronik.com

Managing Directors: Thomas Thir-Greiter Peter Hofer-Perner

2. General Information on Data Processing
We process personal data exclusively for specific purposes, in good faith, in compliance with the principle of data minimization, and by applying appropriate technical and organizational security measures.

3. Legal Bases for Processing
· Art. 6(1)(a) GDPR – Consent
· Art. 6(1)(b) GDPR – Performance of a contract / pre-contractual measures
· Art. 6(1)(c) GDPR – Legal obligation
· Art. 6(1)(d) GDPR – Protection of vital interests
· Art. 6(1)(f) GDPR – Legitimate interest
· Section 165 Austrian Telecommunications Act (TKG 2021) – Cookies

4. B2B Data Processing
In the B2B sector, we process personal data of contact persons such as name, position, email address, telephone number, and order data.
Legal basis: Art. 6(1)(b) and (f) GDPR.

5. Server Log Files
The following data are processed:
· IP address
· Date and time of access
· Browser type
· Operating system
· Referrer URL
· Pages accessed
Retention period: 14 days.

6. Contact Form
When using the contact form, we process name, email address, message, and, where applicable, telephone number. Retention period: 6 months.

7. Shopware Webshop
Processed data include:
· Company name
· VAT number
· Contact person
· Billing and delivery address
· Payment data
· Order data
Retention period: 7 years in accordance with Section 132 Austrian Federal Fiscal Code (BAO).

8. Payment Processing
If PayPal or credit card payment is selected, payment data are transmitted to the respective payment service provider.
Legal basis: Art. 6(1)(b) GDPR.
Transfers to third countries may take place based on the EU-U.S. Data Privacy Framework.

9. IT Services & Remote Support
Remote access is granted exclusively on a contractual basis in accordance with Art. 28 GDPR. All access activities are logged.

10. Cookies & Tracking
Non-essential cookies are only set with the user’s consent. We use Google Analytics and Meta Pixel.
Legal basis: Art. 6(1)(a) GDPR.

11. Newsletter
We use a double opt-in procedure. Processed data include email address, IP address, and time of registration.

12. Applications
We process CVs, certificates, and contact details.
Retention period: 6 months.

13. Data Subject Rights
· Access (Art. 15 GDPR)
· Rectification (Art. 16 GDPR)
· Erasure (Art. 17 GDPR)
· Restriction of processing (Art. 18 GDPR)
· Data portability (Art. 20 GDPR)
· Object (Art. 21 GDPR)
· Withdraw consent at any time

14. Right to Lodge a Complaint
Complaints may be lodged with the Austrian Data Protection Authority: Austrian Data Protection Authority Barichgasse 40–42 1030 Vienna Austria
www.dsb.gv.at

15. Data Security
We implement appropriate technical and organizational measures, including:
· SSL/TLS encryption
· Access restrictions
· Firewalls
· Backup systems
· Logging
· Employee training

16. Amendments
We reserve the right to amend this Privacy Policy if necessary.