Privacy Policy

Controller responsible for data processing:

INFAS GmbH
Am Steinfeld 15
A-2511 Pfaffstätten
Austria

Email: info@infas.gmbh

Phone: +43 680 2228029

We appreciate your interest in our company. Protecting your privacy is very important to us. Below we provide detailed information about how we handle your data.

---

1. Access Data and Hosting

You can visit our website without providing personal information. Each time a webpage is accessed, the web server automatically stores a so-called server log file containing, for example, the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data), and documents the access.

These access data are evaluated exclusively to ensure trouble-free operation of the site and to improve our offering. This serves to safeguard our legitimate interests in the correct presentation of our offering in accordance with Art. 6(1)(f) GDPR. All access data are deleted no later than seven days after the end of your visit.

1.1 Hosting

Hosting and website display services are provided in part by our service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in forms provided on this website are processed on their servers.

If you have questions about our service providers and the basis of our cooperation with them, please use the contact options described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection:
Canada

Our service providers are also located and/or use servers in the USA and other countries outside the EU and EEA. For these countries, no adequacy decision by the European Commission exists. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses.

Data may be transferred to third countries without an adequacy decision due to additional functions used by our service providers. An adequate level of data protection is ensured through the conclusion of Standard Contractual Clauses of the European Commission.

1.2 Content Delivery Network (CDN)

To reduce loading times, we use a Content Delivery Network (“CDN”) for some services. With this service, content such as large media files is delivered via regionally distributed servers of external CDN providers. Access data are therefore processed on the servers of these providers.

Our service providers act on our behalf under data processing agreements. They are located and/or use servers in countries outside the EU and EEA for which no adequacy decision exists. Our cooperation is based on Standard Contractual Clauses of the European Commission.

For further information, please use the contact details provided in this privacy policy.

---

2. Contact

As part of customer communication, we collect personal data to process your inquiries in accordance with Art. 6(1)(b) GDPR when you voluntarily provide them to us (e.g., via contact form or email).

Mandatory fields are marked as such because we require this information to process your request. The data collected are evident from the respective input forms.

After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) GDPR or we reserve the right to further use of the data as permitted by law and described in this policy.

---

3. Email Advertising

3.1 Email Newsletter with Registration and Separate Consent for Tracking

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter regularly based on your consent in accordance with Art. 6(1)(a) GDPR.

You may unsubscribe at any time by sending a message to the contact details provided below or via the unsubscribe link in the newsletter. After unsubscribing, we delete your email address from the mailing list unless you have expressly consented to further use or we reserve the right to use the data as permitted by law.

If you have also given consent to analyze our newsletter, we measure and evaluate open rates and click rates to optimize future newsletter campaigns (“newsletter tracking”).

The emails contain one-pixel technologies (e.g., web beacons or tracking pixels). For evaluation purposes, we may link the following newsletter data:

• Referrer URL
• Date and time of access
• Browser type
• IP address
• Email address
• Date and time of subscription and confirmation

Unsubscribing from tracking is possible at any time via the contact options or the link provided in the newsletter.

Information is stored as long as you are subscribed to the newsletter.

3.2 Requests for Reviews by Email

If you have given explicit consent in accordance with Art. 6(1)(a) GDPR during or after your order, we use your email address to request a review of your order.

You may withdraw this consent at any time via the contact options provided or the link in the email.

---

4. Cookies and Other Technologies

4.1 General Information

To make our website attractive and enable certain functions, we use technologies including cookies. Cookies are small text files automatically stored on your device.

Some cookies are deleted after the browser session ends (session cookies). Others remain on your device and allow us to recognize your browser on your next visit (persistent cookies).

Protection of Privacy on End Devices

We use strictly necessary technologies to provide the telemedia service expressly requested by you. Storing or accessing information on your device does not require consent in such cases.

For functions that are not strictly necessary, storing or accessing information on your device requires your consent. Without consent, parts of the website may not function fully.

Your consent remains valid until you change or reset your device settings.

Subsequent Data Processing

We use technologies necessary for certain functions (e.g., shopping cart features). These technologies process IP address, time of visit, device and browser information, and usage data.

This serves our legitimate interests in an optimized presentation of our services under Art. 6(1)(f) GDPR.

We also use technologies to comply with legal obligations (e.g., documenting consent) and for web analytics and marketing. Further information is provided below.

You can find browser cookie settings here:
Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

You may withdraw consent at any time via the contact options or the consent management interface. Website functionality may be limited if cookies are declined.

---

4.2 Usercentrics Consent Management Platform

We use the Usercentrics Consent Management Platform to inform you about cookies and obtain, manage, and document your consent.

This is required under Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR.

Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany processes data on our behalf.

When visiting our website, a server log file is stored containing anonymized IP address, date and time, device and browser information, and consent behavior.

Data are deleted after three years unless further consent is given or legal retention applies.

---

5. Cookies and Technologies for Analytics and Advertising

If you have given consent under Art. 6(1)(a) GDPR, we use cookies and third-party technologies. Data are deleted when no longer required. Consent may be withdrawn at any time.

5.1 Adobe Services

We use technologies from Adobe Systems Software Ireland Limited, Dublin, Ireland.

Data collected about your use of the website may be transferred to Adobe servers in the USA. Cooperation is based on Standard Contractual Clauses.

IP addresses are shortened or replaced before storage where possible.

Adobe Fonts
To display content uniformly, Adobe Fonts collects IP address, time of visit, and device and browser data and processes them under joint responsibility agreements (Art. 26 GDPR).

---

5.2 Google Services

We use technologies from Google Ireland Ltd., Dublin, Ireland.

Data may be transferred to Google LLC in the USA based on Standard Contractual Clauses. IP anonymization is generally enabled.

Google Analytics
Used for website analysis and creation of pseudonymous usage profiles. Cookies may be used.

Features may include:

• Data sharing with Google services
• Google Optimize testing
• User-ID functionality
• Google Signals cross-device tracking
• DoubleClick cookie

Google Ads
Used for remarketing and conversion tracking. Cookies may track visits and interactions.

Google Fonts
Used for consistent content display; data are transmitted to Google.

YouTube Plugin
When playing videos, IP address and device information may be transmitted to Google.

---

5.3 Meta (Facebook) Services

We use the Facebook Pixel and related services from Meta Platforms Ireland Ltd.

Collected data may include:

• IP address
• Visit time
• Device and browser data
• Website interactions

These data may be transferred to servers in the USA based on Standard Contractual Clauses.

Services used:

• Facebook Pixel
• Facebook Analytics
• Facebook Ads and Custom Audiences
• Conversion tracking

---

5.4 Information on Data Transfers to Third Countries

Some service providers process data in countries outside the EU/EEA, including the USA, where no adequacy decision exists.

We use Standard Contractual Clauses and, where possible, additional safeguards.

However, there is a risk that authorities in third countries may access personal data without sufficient legal remedies.

Where necessary, we request your consent under Art. 49(1)(a) GDPR for such transfers.

---

6. Social Media

6.1 Social Plugins

Our website uses social media buttons implemented as HTML links. A connection to the provider is only established when you click a button.

6.2 Online Presence on Social Media

If you consent to data processing by social media operators, data may be collected for market research and advertising purposes and pseudonymous usage profiles may be created.

Platforms:

• Facebook
• Instagram
• YouTube

Data may be transferred to the USA based on Standard Contractual Clauses.

Further information is available in the respective providers’ privacy policies.

---

7. Contact Options and Your Rights

7.1 Your Rights

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Right to Object

If processing is based on legitimate interests, you may object for reasons arising from your particular situation.

If processing is for direct marketing, you may object at any time.

---

7.2 Contact

For questions regarding the collection, processing, or use of your personal data, or to request information, correction, restriction, deletion, or withdrawal of consent, please contact us using the details provided in our legal notice.

Effective date: 08 February 2026