Privacy Policy / Datenschutzerklärung

1. Scope

This privacy notice explains how personal data may be processed when this website is accessed, when a form on this website is submitted, or when contact is made via the stated email address.

2. Hosting, server and access data

This website is hosted by Webflow, Inc., San Francisco, USA. When this website is accessed, technical information required for delivery, stability and security is processed by the hosting environment. Depending on the technical configuration, this may include the IP address, date and time of access, requested page or file, referrer information, browser type, device or operating-system information and server status information.

This processing serves the legitimate interests of secure and reliable website delivery, error analysis and protection against misuse, and is based on Art. 6(1)(f) GDPR.

3. Contact by email

If you contact ARWA Bio Systems via email, the data contained in your message, such as your name, email address and the information you provide, will be processed for the purpose of handling your enquiry and any related follow-up communication. The legal basis is Art. 6(1)(b) GDPR where the communication is connected to pre-contractual steps, or Art. 6(1)(f) GDPR where the processing is based on the legitimate interest in responding to enquiries.

4. Forms and update registration

If you register for updates through a form on this website, we process the email address you provide and, where applicable, your name. Registration uses a double opt-in procedure: you receive an email asking you to confirm your registration, and your address is only added to our list after that confirmation. We also record the time of registration and confirmation and the wording of the consent given, in order to demonstrate that consent was obtained.

The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with future effect, using the unsubscribe link in every email or by writing to info@arwabiosystems.com. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

5. Processing of form submissions (Make and Google Sheets)

Form submissions are transmitted through the automation service Make, operated by Celonis SE, and stored in Google Sheets, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Both providers act as processors on our behalf under data processing agreements pursuant to Art. 28 GDPR. The data stored consists of the information you entered, together with the time of registration and confirmation and the consent wording.

6. Email distribution (Brevo)

For sending update emails we use, or intend to use, the email service Brevo, operated by Sendinblue SAS, Paris, France, as a processor under a data processing agreement pursuant to Art. 28 GDPR. Addresses collected through the registration described above may be transferred to Brevo for this purpose; your consent covers this transfer. Brevo may record whether an email was opened and which links were clicked, in order to improve the content of future updates. You can object to this analysis at any time by unsubscribing.

7. Web analytics (Google Analytics)

Subject to your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies and similar technologies to analyse how the website is used, for example pages visited, time spent on the site, approximate location at country or region level, device and browser information and the referring website. In Google Analytics 4, IP addresses are not logged or stored.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 165(3) of the Austrian Telecommunications Act 2021. You can withdraw your consent at any time with future effect via the cookie settings on this website. Analytics data is retained for 14 months.

8. Cookies and consent

We use technically necessary cookies to provide the website. Non-essential cookies and similar technologies, in particular for web analytics, are only used after you have given your consent through our cookie banner. You can change or withdraw your consent at any time via the cookie settings on this website.

9. Recipients and international transfers

Personal data may be processed by technical service providers where this is necessary for hosting, form processing, email delivery, analytics, IT administration or security, in particular Webflow, Make, Google and Brevo. Such providers are used only where a lawful basis exists and a data processing agreement is in place.

Where a provider processes personal data outside the European Economic Area, such processing only takes place where the requirements of Chapter V GDPR are met, in particular on the basis of an adequacy decision such as the EU-U.S. Data Privacy Framework, or on the basis of standard contractual clauses under Art. 46 GDPR.

10. Retention

Personal data is stored only for as long as necessary for the respective purpose, to fulfil legal obligations, or to establish, exercise or defend legal claims. Enquiries are deleted once they have been fully handled, unless statutory retention obligations apply. Registration data is stored until you withdraw your consent; records demonstrating consent may be retained for as long as needed to prove lawful processing.

11. Your rights

Under applicable data-protection law, you may have the right to request access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time with future effect.

12. Complaint to a supervisory authority

You also have the right to lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).

13. Automated decision-making

No automated decision-making within the meaning of Art. 22 GDPR takes place through this website.