Data and Privacy Policy

Privacy Policy Website
As of: November 2025

Download: privacy_policy_en.pdf

1. Name and address of the controller
2. General information on data processing
3. Provision of the website
4. Use of cookies
5. Online customer account
6. E-mail contact
7. Rights of the data subject

1. Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

ARCHImedline GmbH
Leberstraße 20/2
1110 Wien
Österreich
office@archimedline.com
www.archimedline.com

2. General information on data processing

2.1. Scope of personal data processing

As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functional website as well as our content and services. The collection and use of personal data of our users is generally only carried out with the user’s consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law or the processing is necessary for the performance of a contract to which a user is a party or for the implementation of pre-contractual measures taken at the request of the user.

2.2. Legal basis for processing personal data

Insofar as we obtain the consent of the data subject for processing of personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the case of the processing of personal data that is necessary for the performance of a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which our company is subject, Article 6 (1) (c) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6 (1) (f) GDPR serves as the legal basis for the processing.

2.3. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

3. Provision of the website

3.1. Description and scope of data processing

Every time our website is accessed, certain data and information is automatically recorded by the system of the accessing device and stored in so-called server log files. The following data is processed:

• Information about the browser type and version used
• The user’s operating system
• Address (URL) of the accessed page
• User’s Internet Service Provider
• Amount of data transferred
• Hostname and IP address of the accessing device
• Date and time of access
• Websites from which the user’s system reaches our website
• Web pages accessed by the user’s system through our website

In connection with the time of access, the IP address generally enables the owner of the connection to be identified via the Internet provider. However, an assignment is only made if this is legally permissible and the corresponding provider provides information on this.

3.2. Legal basis for data processing

The legal basis for the temporary storage of this data is Article 6 (1) (f) GDPR. Our legitimate interest lies in the technical provision, stability and security of our website.

3.3. Purpose of data processing

The processing of the aforementioned data is necessary in order to be able to provide the website technically and deliver it to the user’s device. For this purpose, the IP address must be stored for the duration of the session. In addition, the processing serves system security, in particular to defend against and track technical faults or attacks.

These purposes also constitute our legitimate interest in data processing in accordance with Article 6 (1) (f) GDPR. The use of the website is voluntary and is not a prerequisite for the use of our other services.

3.4. Transmission of data

This personal data will be transferred to the following recipients for the purposes indicated above:

Recipients of transmission	Function
Courts, authorities, legal and/or tax representation	For any legal prosecution or for tax processing

3.5. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the aforementioned purposes. In the case of data collected for the provision of the website, this is the case at the latest at the end of the respective session.

4. Use of cookies

4.1. Description and scope of data processing

Our website uses cookies. These are small text files that are stored in the Internet browser or by the Internet browser on your device. Cookies enable the browser to be clearly assigned and contribute to the technical functionality of our website.

We only use technically necessary cookies . These are necessary for the operation of our website as well as for the use of the customer account and the login functions. The data processed in this context is automatically transmitted to our server by your browser.

We use the following types of technically necessary cookies:

• Session cookies, which are stored only for the duration of the use of the website and are automatically deleted when you leave;
• Authentication cookies, which are required to provide the login function and remain authenticated during the session. These cookies contain a unique identification number and remain stored for the duration of the session.

4.2. Legal basis for data processing

The legal basis for the use of technically necessary cookies is Art. 6 (1) (f) GDPR due to our legitimate interest in the secure and functional provision of our website. Insofar as cookies are required for the use of the customer account or for permanent login, the processing is also based on Art. 6 (1) (b) GDPR (performance of contract).

4.3. Processes data

The following data is processed within the framework of technically necessary cookies:

• Browser type and version
• User’s operating system
• Address (URL) of the accessed page
• User’s Internet Service Provider
• Amount of data transferred
• Hostname and IP address of the accessing device
• Date and time of access
• Websites from which the user arrives at our site
• Websites accessed by the user via our site
• Unique identification number of the login cookie (when using the customer account)
• Cookie ID

4.4. Purpose of data processing

The processing is necessary in order to provide the website without technical errors, to ensure the stability and security of the system and to enable the use of the customer account.

The authentication cookies are used exclusively to keep users logged in during the session.

4.5. Transmission of data

This personal data will be transferred to the following recipients for the purposes indicated above:

Recipients of transmission	Function
Courts, authorities, legal and/or tax representation	For any legal prosecution or for tax processing

4.6. Duration of storage, possibility of objection and removal

Cookies are stored on your device and can be deleted by you at any time in your browser. You can also disable or restrict the storage of cookies in general.

Session cookies are automatically deleted as soon as you leave the website.

Authentication cookies remain stored as long as you remain logged in to your customer account. When logging out, these cookies become invalid; in addition, they can be deleted manually in the browser.

If technically necessary cookies are deactivated, certain functions of our website (in particular the login area) can no longer be used or can only be used to a limited extent.

5. Online customer account

5.1. Description and scope of data processing

On our website it is possible to create a personal customer account. Registration is voluntary. However, we require certain personal data to set up the customer account. Without providing this data, we will not be able to create a customer account.

If you make use of this option, the data entered in the input mask will be transmitted to us and stored. These data are as follows:

• Name
• Address
• E-mail address
• Message
• Orders
• Payment

At the time of registration, the following data will also be stored:

• The user’s IP address
• Date and time registration

5.2. Legal basis for data processing

The legal basis for the processing of this data is Article 6 (1) (b) GDPR, as the data is required to set up and manage the customer account as well as to fulfil the contract or to carry out pre-contractual measures.

5.3. Purpose of data processing

The processing of personal data serves to set up and provide your customer account as well as to carry out the contractual relationship, including the processing of orders.

5.4. Transmission of data

This personal data will be transferred to the following recipients for the purposes indicated above:

Recipients of transmission	Function
Courts, authorities or legal representation	For any legal prosecution

5.5. Duration of storage

The personal data will be deleted as soon as it is no longer necessary for the fulfilment of the aforementioned purposes. We store your data for the duration of the contractual relationship and beyond that for the time in which legal claims arising from the contractual relationship can be asserted. This means that we delete your data no later than three years after the fulfilment of the contract or the closure of your customer account, unless there are longer statutory retention obligations. You can cancel your account at any time online or by sending an email to office@archimedline.com.

6. E-mail contact

6.1. Description and scope of data processing

There is an email address on our website that you can use to contact us. If you contact us by e-mail, the personal data that you transmit to us as part of the message will be processed. This typically includes:

• Name
• E-mail address
• Content of your message or request

In addition, the following data may be processed during transmission for technical reasons:

• The user’s IP address
• Date and time of registration

6.2. Legal basis for data processing

The legal basis for the processing of the data transmitted in the course of contacting you by e-mail is our legitimate interest in processing your request in accordance with Article 6 (1) (f) GDPR

If your contact is aimed at concluding or executing a contract, the additional legal basis is Article 6 (1) (b) GDPR.

6.3. Purpose of data processing

The processing of personal data serves to process your request and to communicate with you.

6.4. Transmission of data

Your personal data will be transferred to the following recipients for the purposes indicated above:

Recipients of transmission	Function
Courts, authorities or legal representation	For any legal prosecution

6.5. Duration of storage

The data will be deleted as soon as it is no longer necessary to achieve the respective purpose. This is usually the case when communication with you has been completed and it follows from the circumstances that the underlying facts have been finally clarified.

In addition, personal data may be retained for as long as is necessary for the assertion, exercise or defence of legal claims or for as long as there are statutory retention obligations.

6.6. Objection and removal option

You can object to the storage of your personal data at any time. In this case, communication with you cannot be continued. The objection can be made by e-mail or post to us.

In this case, all personal data stored in the course of contacting us will be deleted, provided that there are no statutory retention obligations or the data is not required for the assertion, exercise or defence of legal claims.

7. Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

7.1. Right

You can request confirmation from the controller as to whether personal data concerning you is being processed by me.

In the event of such processing, you may request the Controller to provide the following information:

1. the purposes for which the personal data is processed;
2. the categories of personal data that are processed;
3. the recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
4. the planned period of storage of personal data concerning you or, if specific information is not possible, the criteria for determining the storage period;
5. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the Controller or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. all available information about the origin of the data, if the personal data is not collected from the data subject;
8. the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is being transferred to a third country or to an international organisation. In this context, you can request to be informed about the appropriate safeguards in accordance with Article 46 GDPR in connection with the transfer.bermittelt werden. In diesem Zusammenhang können Sie verlangen, über die geeigneten Garantien gem Art 46 DSGVO im Zusammenhang mit der Übermittlung unterrichtet zu werden.

7.2. Right to rectification

You have the right to rectification and/or completion vis-à-vis the Data Controller if the personal data processed concerning you is incorrect or incomplete. The controller must make the correction without delay.

7.3. Right to restriction of processing

You can request the restriction of the processing of personal data concerning you under the following conditions:

1. if you contest the accuracy of the personal data concerning you for a period of time that allows the controller to verify the accuracy of the personal data;
2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;
3. the controller no longer needs the personal data for the purposes of the processing, but you need them to establish, exercise or defend legal claims, or
4. if you have objected to the processing in accordance with Article 21 (1) GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.wird.

7.4. Right to erasure

7.4.1. Obligation to delete

You can request the controller to delete the personal data concerning you without undue delay; the Controller is obliged to delete such data without undue delay if one of the following reasons applies:

1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
2. You revoke your consent on which the processing was based in accordance with Article 6 (1) (a) or Article 9 (2) (a) GDPR and there is no other legal basis for the processing.
3. You object to the processing in accordance with Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing in accordance with Article 21 (2) GDPR.
4. The personal data concerning you has been unlawfully processed.
5. The erasure of personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
6. The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

7.4.2. Information to third parties

If the controller has made the personal data concerning you public and is obliged to delete it in accordance with Article 17 (1) GDPR, it shall take appropriate measures, including technical measures, taking into account the available technology and the costs of implementation, to inform data controllers who process the personal data that you, as a data subject, will request the deletion of all links to these data from them. personal data or copies or replications of such personal data.

7.4.3. Exceptions

The right to erasure does not exist if the processing is necessary

1. to exercise the right to freedom of expression and information;
2. to comply with a legal obligation that requires processing under the law of the European Union or of the Member States to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the field of public health in accordance with Article 9 (2) (h) and (i) and Article 9 (3) GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1) GDPR, insofar as the right referred to in Section 6.4.1 is likely to render impossible or seriously impair the achievement of the purposes of such processing, or
5. to assert, exercise or defend legal claims.

7.5. Right to information

If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to be informed about these recipients vis-à-vis the controller.

7.6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided, provided that:

1. the processing is based on consent pursuant to Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract pursuant to Article 6 (1) (b) GDPR, and
2. the processing is carried out by automated means.

In exercising this right, you also have the right to obtain that the personal data concerning you is transferred directly from one controller to another controller, to the extent that this is technically feasible. The freedoms and rights of other persons must not be impaired by this. The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7.7. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Article 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

7.8. Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent before the revocation.

7.9. Automated decision-making in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

1. is necessary for the conclusion or performance of a contract between you and the controller,
2. is permissible on the basis of European Union or Member State law to which the controller is subject, and that legislation contains appropriate measures to safeguard your rights and freedoms and legitimate interests, or
3. with your express consent.

However, these decisions may not be based on special categories of personal data according to Article 9 (1) GDPR, unless Article 9 (2) (a) or (g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the Controller shall take appropriate measures to safeguard the rights and freedoms as well as your legitimate interests, including, at a minimum, the right to obtain the intervention of a person from the Controller, to express its own position and to challenge the decision. zu wahren, wozu mindestens das Recht auf Erwirkung des Eingreifens einer Person seitens des Verantwortlichen, auf Darlegung des eigenen Standpunkts und auf Anfechtung der Entscheidung gehört.

7.10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint was lodged shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.