This is an English translation for your convenience. The German version is the legally binding one.

Privacy policy

Last updated: 4 October 2026

Contents

Controller

Polytherium OG
Wienerbergstraße 11/12a, Vienna Twin Towers
1100 Vienna, Austria
Email: office@polytherium.com
Phone: +43 699 112 799 33

Further details are in our imprint.

Summary

  • Our website sets no cookies and uses no analytics, tracking or advertising services.
  • All content, including fonts, images and scripts, is served from our own server. Visiting the website transfers no data to third parties such as Google, Facebook or content delivery networks.
  • We process personal data only as far as needed to run the website (server log files) and to answer your enquiries (contact form, email, phone).

We process personal data under the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). Specifically, we rely on:

  • Consent (Art. 6(1)(a) GDPR) – you have consented to the processing of your data for a specific purpose, for example when you submit the contact form.
  • Contract and pre-contractual requests (Art. 6(1)(b) GDPR) – the processing is necessary to answer your enquiry or to prepare or perform a contract with you.
  • Legitimate interests (Art. 6(1)(f) GDPR) – the processing is necessary for our legitimate interests, such as the secure and stable operation of the website, unless your interests override them.

Providing the website and web hosting

Our website runs on a server we rent from IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The server is located in the European Union. IONOS processes the data only on our behalf and according to our instructions (data processing under Art. 28 GDPR).

Server log files: Each time our website is accessed, our web server automatically records:

  • the IP address of the requesting device,
  • the date and time of access,
  • the page or file requested and the response status code,
  • the amount of data transferred,
  • the previously visited page (referrer), if your browser sends it,
  • browser type and version and operating system (user agent).

Purpose: delivering the website and keeping it stable and secure, in particular detecting and preventing attacks and abuse.
Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
Retention: log files are deleted automatically after 14 days. Data needed to investigate a specific security incident is kept until the incident is resolved.

Contact form, email and phone

When you contact us through the contact form, by email or by phone, we process the information you give us in order to answer your enquiry.

Contact form: Through the form you send us your name, a way to reply to you (email address or phone number) and your message. The transmission is encrypted (HTTPS). Our server forwards the information by encrypted email to our mailbox; the content of your message is not stored on the web server itself.

To protect against spam and abuse, your IP address is processed briefly: we limit the number of submissions per IP address per hour. For this, the IP address is kept only in memory and discarded after one hour at the latest. If a submission is detected as automated spam, we record its IP address in the server's technical logs, which are deleted after 30 days.

Purpose: handling and answering your enquiry, protection against abuse.
Legal basis: your consent, given when you submit the form (Art. 6(1)(a) GDPR); pre-contractual measures or performance of a contract, if your enquiry relates to one (Art. 6(1)(b) GDPR); our legitimate interest in answering enquiries and preventing abuse (Art. 6(1)(f) GDPR).
Retention: we keep your enquiry as long as needed to handle it, and delete it afterwards unless statutory retention obligations apply, for example if a contract results from it.
Withdrawal: you can withdraw your consent at any time with effect for the future, for example by email to office@polytherium.com.

Our email mailboxes are also operated by IONOS SE as a processor.

Cookies, tracking and embedded content

Our website sets no cookies and stores no information on your device (including local storage or similar mechanisms). We use no analytics, audience measurement, tracking or advertising services, and embed no third-party content such as videos, maps, social media plugins or externally loaded fonts. No cookie consent is therefore required.

Our website contains links to other providers, such as Google Play, the Apple App Store and LinkedIn. These are plain links: only when you click one do you leave our website, and the privacy policy of that provider applies. No data is sent to these providers beforehand.

Recipients and processors

We share personal data only as far as necessary for the purposes above. The recipient is our hosting and email provider IONOS SE, with whom we have concluded a data processing agreement under Art. 28 GDPR. Data is passed to other third parties only where we are legally required to do so.

Transfers to third countries

We process your data exclusively within the European Union. No data is transferred to countries outside the EU or the European Economic Area.

Security measures

In line with the legal requirements and the state of the art, we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk. These include in particular encrypted transmission throughout (HTTPS with HSTS), restrictive browser security policies (Content Security Policy), not embedding third-party content, limiting access rights to our servers, and automatic deletion of log files.

Your rights

Under the GDPR you have in particular the following rights:

  • access to the data we process about you (Art. 15 GDPR),
  • rectification of inaccurate or completion of incomplete data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • objection to processing based on legitimate interests, on grounds relating to your particular situation (Art. 21 GDPR),
  • withdrawal of consent with effect for the future (Art. 7(3) GDPR).

To exercise your rights, an informal message to office@polytherium.com is enough.

Right to lodge a complaint: if you believe the processing of your data violates data protection law, you can complain to a supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.