Data privacy policy

Protecting your privacy is important to us. Therefore, we handle your personal data with care and process it only in accordance with the GDPR, the Austrian Data Protection Act (DSG), and the Telecommunications Act (TKG).

The following information explains how and why we collect, share, and process your data.

• Prospective customers

• Communication and contractual partners (recipients of emails, letters, etc.)

• Users (e.g., website visitors, users of online services)

We kindly ask you to review the content of our privacy policy regularly. We will update it whenever changes in our data processing make this necessary. We will inform you if such changes require action on your part (e.g., renewed consent) or any other individualized notification.

Please note that the addresses and contact details of companies and organizations listed in this privacy policy may change over time, so we recommend verifying them before contacting us.

8.1. To provide our online services securely and efficiently, we use the services of one or more web hosting providers whose servers (or servers they manage) allow access to our online services. For this purpose, we may use infrastructure and platform services, computing capacity, storage and database services, as well as security and technical maintenance services. The data processed as part of hosting services may include any information relating to users of our online services that is generated during usage and communication. This typically includes the IP address, which is necessary to deliver content to browsers, as well as all entries made within our online services or on websites.

8.2. Email dispatch and hosting:
The web hosting services we use also include sending, receiving, and storing emails. For this purpose, the addresses of recipients and senders, as well as additional information related to email transmission (e.g., involved providers) and the content of the respective emails, are processed. The aforementioned data may also be processed for spam detection purposes.

Please note that emails sent over the internet are generally not encrypted. While emails may be encrypted during transmission, they are usually not encrypted on the servers from which they are sent or received (unless end-to-end encryption is used). We therefore cannot assume responsibility for the transmission of emails between sender and recipient on our server.

8.3. Collection of access data and log files:
We, or our hosting provider, collect data each time a server is accessed (so-called server log files). Server log files include, among other things, the address and name of the accessed web pages and files, date and time of access, data volume transferred, notification of successful access, browser type and version, user operating system, referrer URL (the previously visited page), and usually IP addresses and the requesting provider.

Server log files may be used for security purposes, e.g., to prevent server overload (especially in the case of abusive attacks like DDoS attacks) and to ensure server stability and optimal load distribution.

Categories of data processed:
Content data (e.g., text entries, photos, videos),
User data (e.g., pages visited, interest in content, access times),
Meta/communication data (e.g., device information, IP addresses)

Categories of data subjects:
Users (e.g., website visitors, users of online services)

Legal basis:
Legitimate interests (Art. 6(1)(f) GDPR).

Mavie Next GmbH, headquartered at Rothschildplatz 4, 1020 Vienna, is the data controller pursuant to Art. 4(7) of the General Data Protection Regulation (GDPR). We operate this website.

Our managing directors are Lukas Mayrl and Ondrej Gandel.
Email: contact@mavie.care

Our data protection officer is lexetdata, Dr. Beata Mangelberger.
For data protection inquiries, please contact: datenschutz@mavie.care.

We process the following personal data in accordance with the principles outlined in Art. 5 GDPR and on the legal basis of Art. 6 GDPR:

• Master data (e.g., name, address)

• Content data (e.g., text entries, photos, videos)

• Contact data (e.g., email address, phone numbers)

• Meta/communication data (e.g., device information, IP addresses)

• Usage data (e.g., pages visited, interest in content, access times)

• Location data (information about the geographical position of a device or person)

The provision of personal data is necessary for the purpose of our business operations, as contractual or legal obligations cannot otherwise be fulfilled. If you do not provide this data, you will not be able to use our services.

In the course of processing personal data, it may occur that data is transferred or disclosed to other locations, companies, or individuals. Recipients of such data may include, for example, payment institutions (for payment transactions), IT service providers, or providers of services and content embedded in a website. In such cases, all legal requirements are observed, and appropriate agreements (specifically data processing agreements) or other arrangements that protect your data are concluded with these recipients.

6.1. Data transfers within the corporate group:
We may transfer personal data to other companies within our corporate group or otherwise grant them access to the data. Where such disclosure serves administrative purposes, it is carried out on the basis of our legitimate business and economic interests, or where necessary to fulfill our contractual obligations, or where the data subjects have given consent, or where otherwise permitted by law.

6.2. Data processing in third countries:
We strive, wherever possible, to process data within the EEA. If a transfer of your data to a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) is necessary, or if processing occurs as part of the use of third-party services or through the disclosure of data to other individuals, organizations, or companies, such transfer only takes place in compliance with legal requirements. This means the EU Commission must have determined an adequate level of data protection through an adequacy decision, or we have concluded Standard Contractual Clauses along with additional safeguards to ensure such a level of protection.

Below, we inform you about the provisions of the General Data Protection Regulation (GDPR) that form the legal basis for processing personal data. Please note that, in addition to the GDPR, the national data protection regulations of the country in which you or we are located or have our business headquarters may also apply. If more specific legal bases apply in individual cases, we will inform you of these within this privacy policy.

• Consent (Art. 6(1)(a) GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.

• Performance of a contract and responding to pre-contractual requests (Art. 6(1)(b) GDPR) – Processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the data subject’s request prior to entering into a contract.

• Compliance with a legal obligation (Art. 6(1)(c) GDPR) – Processing is necessary for compliance with a legal obligation to which we are subject.Legitimate interests (Art. 6(1)(f) GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests, fundamental rights, or freedoms of the data subject which require the protection of personal data.

National data protection provisions in Austria:
In addition to the data protection requirements of the GDPR, Austria’s national regulations also apply. These include, in particular, the Federal Act on the Protection of Natural Persons Regarding the Processing of Personal Data (Datenschutzgesetz – DSG). The DSG contains, among other things, specific provisions on the right to access, rectification, or deletion; processing of special categories of personal data; processing for other purposes; as well as data transfers and automated decision-making in individual cases.

• Provision of our online services, user experience

• Conversion tracking (measuring the effectiveness of marketing activities)

• Marketing based on interests and behavior

• Contact inquiries and communication

• Profiling (creating user profiles)

• Remarketing

• Web analytics (e.g., access statistics, recognition of returning visitors)

• Targeting (e.g., profiling based on interests and behavior, use of cookies with prior consent)

• Provision of contractual services and customer support

For certain processing activities on our corporate pages, we are joint controllers together with the respective social media platform. If you interact with our company page or have questions about it, you can contact us directly at any time. Please note that we have no influence over the type and scope of data processing carried out by social media providers.

We process your data within the respective social media platform to the extent that you share it with us. This may include your username, interactions with our profiles or pages, and comments. Such processing is based on the use of the platform's functionality (§ 165(3) TKG) and our overriding legitimate interest pursuant to Art. 6(1)(f) GDPR, as long as this content remains publicly available on the platform.
For direct messages, we process the data they contain for contractual or pre-contractual communication (Art. 6(1)(b) GDPR).

On our website, you may find links to social networks and other third-party providers. When you activate these links, you may be redirected from our website directly to the websites of those providers. In these cases, your data is transferred to the respective provider based on your consent (Art. 6(1)(a) GDPR). This consent also includes your agreement that, for example, upon visiting a Google service, your data may be processed in the USA. While many social media platforms now participate in the EU–US Privacy Framework, due to ongoing concerns and uncertainties regarding data use, fully GDPR-compliant use of social media cannot be guaranteed at this time.

For details on how social networks handle your personal data, please consult their respective privacy policies.

LinkedIn

Our website contains links to LinkedIn, and we maintain a LinkedIn company page.
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

If you follow a link to LinkedIn or visit our company profile, your data will be processed by LinkedIn as the controller, according to their privacy policy. If you interact with our company page (e.g., comment, like posts, follow our page), your data will be processed by both us and LinkedIn within the scope of LinkedIn’s functionality.
Please note that interactions on public company pages may be visible to others and are technically required for LinkedIn’s features.

You may request information at any time about the personal data we process about you. If we process data about you that is incorrect or incomplete, you may request that it be rectified or completed. You may also request the deletion of unlawfully processed data. Please note, however, that this applies only to data that is incorrect, incomplete, or unlawfully processed. These rights complement each other, meaning you may request either rectification/completion or deletion of your data—but not both simultaneously.If it is unclear whether the data we process about you is incorrect, incomplete, or unlawfully processed, you may request that the processing of your data be restricted until this question is definitively resolved.Even if your data is accurate, complete, and lawfully processed, you may, in certain individual cases justified by your particular circumstances, object to the processing. If the processing of your data is based on a balancing of interests (Art. 6(1)(f) GDPR – legitimate interests), you have the right to object at any time to the processing. When exercising your right to object, please explain your reasons why we should no longer process your personal data as we have been doing. We will then review the situation and either stop or adjust the processing, or explain to you our compelling legitimate grounds for continuing. We will also continue processing if it is required for the establishment, exercise, or defense of legal claims.You may receive the personal data we process about you—provided we received it directly from you—in a machine-readable format specified by us, or you may instruct us to transfer this data directly to a third party of your choice, provided this is technically feasible for the recipient and provided that the data transfer does not require disproportionate effort and is not prevented by legal or confidentiality obligations.For all matters, please contact us using the contact details provided. We may ask you to verify your identity, for example by submitting an electronic copy of an ID document.Even though we make every effort to protect your data and ensure its integrity, disagreements may arise regarding how we use your data. If you believe that we are using your data unlawfully, you have the right to file a complaint with the Austrian Data Protection Authority.However, we kindly ask that you contact us first so we can attempt to resolve the matter together.

16. Terms and Definitions

7.1. The use of our websites is generally possible without providing personal data; however, when you access our website, cookies are set (more details under “COOKIES”), and information (device, date, time, IP address, etc.) is stored. When you visit this website, the browser used on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following data is collected without any action on your part and stored until it is automatically deleted:
• IP address of the requesting device
• Date and time of access
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Browser used, and, where applicable, your device’s operating system and the name of your access provider

To ensure stable system operation, a smooth connection, and convenient use of our website, we rely on our legitimate interest under Art. 6(1)(f) GDPR. The data collected will never be used to identify you personally.

For security and to protect the transmission of confidential content (e.g., inquiries you send to us), this site uses SSL encryption. You can recognize an encrypted connection by the browser address switching from “http://” to “https://” and the lock symbol in your browser bar. When SSL encryption is activated, data you transmit to us cannot be read by third parties.

7.2. Cookies are text files containing data from visited websites or domains, stored by a browser on the user’s device. Cookies are primarily used to save information about users during or after their visit to an online service—for example, language settings, login status, shopping cart contents, or where a video was last watched. The term “cookies” also includes similar technologies that fulfill the same purposes (e.g., pseudonymous user IDs).

Types and purposes of cookies:

• Session cookies: deleted once the user leaves the online service and closes the browser.

• Persistent cookies: remain stored even after the browser is closed (e.g., to remember login status or show preferred content).

• First-party cookies: set by us.

• Third-party cookies: set by external providers (e.g., advertisers).

We delete the data we process in accordance with legal requirements as soon as the permission to process it is revoked or its processing is no longer permitted (e.g., when the purpose of the processing no longer applies or the data is no longer necessary for that purpose).

If the data is not deleted because it is required for other legally permissible purposes, its processing is restricted to those specific purposes. This means the data is blocked and not processed for any other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons, or data that must be stored for the establishment, exercise, or defense of legal claims, or to protect the rights of another natural or legal person.

Further information on the deletion of personal data can also be found in the individual privacy notices within this privacy policy.

When you contact us (e.g., via contact form, email, telephone, or social media), the data of the inquiring individuals is processed to the extent necessary to respond to the inquiries and perform the requested actions.
Responses to inquiries within the scope of contractual or pre-contractual relationships are processed to fulfill our contractual obligations or to answer (pre-contractual) questions. All other inquiries are processed based on our legitimate interest in handling and responding to requests.

Categories of data processed:

• Master data (e.g., name, address)

• Contact data (e.g., email, phone numbers)

• Content data (e.g., text entries, photos, videos)

• User data (e.g., pages visited, interest in content, access times)

• Meta/communication data (e.g., device information, IP addresses)

Categories of data subjects:
Communication partners (recipients of emails, letters, etc.)

Purposes of processing:
Contact inquiries and communication

Legal basis:
Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR),
Legitimate interests (Art. 6(1)(f) GDPR).

We process personal data for online marketing purposes, which may include the promotion of advertising space or the display of advertising and other content (collectively referred to as “content”) based on users’ potential interests, as well as the measurement of the effectiveness of such advertising.

For these purposes, so-called user profiles are created and stored in a file (“cookie”) or a similar system where relevant user information is recorded. This information may include content viewed, websites visited, used online networks, communication partners, and technical data such as the browser used, the operating system, and details about usage times. If users have consented to the collection of additional data, such data may also be processed.

Users’ IP addresses are also stored; however, we apply IP masking (i.e., pseudonymization via IP shortening) to enhance user protection by ensuring that only a pseudonym is processed. Generally, online marketing does not store clear personal identifiers (such as email addresses or names), but rather pseudonyms. This means that neither we nor the providers of online marketing technologies know users’ actual identities—only the information stored in user profiles.

The profile information is typically stored in cookies or similar technologies. These cookies can later be read and analyzed on other websites that use the same online-marketing technology, and the data can be supplemented and stored on the servers of the respective providers.

In certain cases, unique data may be assigned to profiles—for example, if users are logged into a social network whose marketing technology we use, and the network links profile data with the usage data. Users may also enter into separate agreements with social networks or other service providers (e.g., consent during registration).

As a rule, we receive only aggregated information about the performance of our advertising. Within the scope of conversion measurement, however, we can determine which of our online marketing activities resulted in a “conversion,” i.e., the completion of a contract. This analysis helps us evaluate the effectiveness of our marketing efforts.

Unless otherwise noted, cookies used for this purpose are stored for a period of two years.

Legal basis:
If we ask users for consent (e.g., via a cookie banner), the processing is based on this consent. Otherwise, user data is processed based on our legitimate interests (i.e., analysis, optimization, and efficient operation of our online services). Please refer to the cookie section of this privacy policy for further details.

Categories of data processed:
User data (e.g., pages visited, interest in content, access times)
Meta/communication data (e.g., device information, IP addresses)

Categories of affected persons:
Users (e.g., website visitors, users of online services), prospective customers

Purposes of processing:

• Targeting (e.g., interest- and behavior-based profiling, cookie-based personalization)

• Remarketing

• Conversion tracking (measurement of advertising effectiveness)

• Interest- and behavior-based marketing

• Profiling (creation of user profiles)

• Web analytics (e.g., access statistics, recognition of returning visitors)

Security measures:
IP masking (pseudonymization of IP addresses)

Legal basis:
Consent (Art. 6(1)(a) GDPR), legitimate interests (Art. 6(1)(f) GDPR)

Opt-out:
Please also review the privacy policies and opt-out options provided by the respective service providers. If no individual opt-out option is offered, you can disable cookies in your browser settings, though this may limit the functionality of our online services.
Additional region-specific opt-out options:
a) Europe: https://www.youronlinechoices.eu
b) Canada: https://www.youradchoices.ca/choices
c) USA: https://www.aboutads.info/choices
d) Global: https://optout.aboutads.info

12.1. We maintain online presences on social networks and process user data in this context to communicate with users active on those platforms or to provide information about our company. Please note that user data may also be processed outside the European Union. This may pose risks for users, for example due to more difficult enforcement of user rights.

Additionally, user data on social networks is generally processed for market research and advertising purposes. User profiles can be created based on user behavior and interests. These profiles may be used to display advertisements inside and outside the social networks that presumably match users' interests. For this purpose, cookies are usually stored on users’ devices, which record their usage behavior and interests. Data may also be stored in user profiles across devices (especially if users are logged into or later join the respective networks).

For detailed descriptions of the processing activities and opt-out options, please refer to the privacy policies and information provided by the respective platform operators. Please note that the easiest way to request information or exercise data subject rights is directly through the platform provider, as only they have access to user data and can take the appropriate actions. We are, however, available to support you if needed.

Categories of data processed:
Master data (e.g., name, address), contact data (e.g., email, phone number), content data (e.g., text entries, photos, videos), user data (e.g., pages visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses)

Categories of data subjects:
Users (e.g., website visitors, users of online services)

Purposes of processing:
Contact inquiries and communication, targeting (e.g., interest-based profiling, cookies), remarketing

Legal basis:
Legitimate interests (Art. 6(1)(f) GDPR)

Services and service providers used:

LinkedIn – Social network
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Website: https://www.linkedin.com
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

12.2. Plugins and embedded functions and content
We integrate functional and content elements into our online services that are obtained from servers of third-party providers (“third parties”). These may include graphics, videos, social media buttons, or posts (collectively referred to as “content”).

For such integration to function, third-party providers must process users’ IP addresses, since content cannot be sent to the browser without an IP address. The IP address is therefore essential for displaying such content or features. We strive to use only those providers who use the IP address solely to deliver content.

Third-party providers may also use pixel tags (invisible graphics or “web beacons”) for statistical or marketing purposes. Pixel tags can be used to evaluate visitor flows on our website. Pseudonymized information may also be stored in cookies on users’ devices and can include technical data such as browser and operating system details, referring websites, visit times, and other information about online usage. This data may be combined with similar information from other sources.

Legal basis:
If we ask users for consent (e.g., via a cookie banner), the processing is based on that consent. Otherwise, user data is processed based on our legitimate interests (e.g., analysis, optimization, and economic operation of our online services). Please also review the cookie-related information in this privacy policy.

Categories of data processed:
User data (e.g., pages visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses), location data (geographical position of a device or person)

Categories of data subjects:
Users (e.g., website visitors, users of online services)

Purposes of processing:
Provision of online services and functionality, performing contractual services, customer support

Legal basis:
Legitimate interests (Art. 6(1)(f) GDPR)

12.3. Services and service providers used:

Google Maps – Map integration
Processed data includes in particular IP addresses and location data (only with user consent, usually through mobile device settings).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Website: https://cloud.google.com/maps-platform
Privacy policy: https://policies.google.com/privacy
Opt-out:
Google Analytics Opt-Out Add-on: https://tools.google.com/dlpage/gaoptout?hl=en
Ad settings: https://adssettings.google.com/authenticated