As of September 2026
We appreciate your interest in Ceraflex® GmbH. The protection of your personal data is important to us. With this Privacy Policy, we inform you—in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Austrian Data Protection Act (DSG)—about what personal data we process in connection with this website, for what purpose this is done, and what rights you have in this regard.
The data controller within the meaning of the GDPR is:
Ceraflex® GmbH
Grossendorf 113
4551 Ried im Traunkreis
Austria
Phone: +43 7588 20444
Email: info@ceraflex.at
You can find our complete company information in our legal notice.
We process personal data only if at least one of the following legal bases is met:
In addition to the GDPR, as an Austrian company, we are subject to the Data Protection Act (DSG) and, where applicable, the Telecommunications Act of 2021 (TKG) with regard to access to end devices (e.g., cookies).
We store personal data only for as long as is necessary for the respective processing purpose or as required by statutory retention obligations (e.g., under the Commercial Code or the Federal Tax Code). After that, the data is deleted or anonymized. Specific retention periods are listed below for each type of processing.
This website is operated on technical infrastructure provided and maintained by Interad Software GmbH, Reininghausstraße 13a, 8020 Graz, Austria.
When you visit this website, so-called server log files are automatically created, containing, among other things, the following data:
This data is stored for approximately two weeks and then automatically deleted. The legal basis is Article 6(1)(f) of the GDPR (legitimate interest in the secure and stable operation of the website). A data processing agreement has been entered into with the hosting provider in accordance with Article 28 of the GDPR.
For security reasons, this website uses TLS encryption (SSL). You can recognize encrypted connections by the padlock icon in your browser’s address bar and by the fact that the address begins with “https://”.
This website does not currently use any cookies or tracking technologies for advertising or marketing purposes. Only the following cookie, which is strictly necessary for technical reasons, is used:
Since this is an absolutely necessary (functional) cookie that serves exclusively to provide a service you have expressly requested (displaying the website in the desired language), no separate consent is required pursuant to Section 165(3) of the TKG 2021. The legal basis is Article 6(1)(f) of the GDPR (legitimate interest in a fully functional, multilingual presentation of the website).
The hCaptcha spam protection feature, which runs in the background when filling out forms (see item 11), may also temporarily process technical data if necessary; by default, it does not set a persistent cookie.
If, in the future, we use additional cookies that are not strictly necessary (e.g., for marketing or advanced analytics), we will obtain your consent in advance via a cookie consent tool and update this Privacy Policy accordingly.
We use the open-source web analytics service Matomo to statistically analyze user behavior on our website and improve our offerings (e.g., which pages are visited and how often, and from which regions the visits originate).
If you submit inquiries to us via the contact form on our website, the data you provide in the form (e.g., name, email address, phone number, and your message), as well as the technical data collected at the time of submission (including IP address, date, and time), will be processed by us for the purpose of handling your inquiry and for any follow-up questions.
Technically, the data is transmitted via email to our mailbox; it is not stored in a separate form database beyond that. Your emails are processed by our email service provider, Microsoft (Microsoft 365 / Exchange Online, Microsoft Ireland Operations Limited or Microsoft Corporation); we have a data processing agreement with Microsoft based on the EU Standard Contractual Clauses in cases where data may be processed outside the EU/EEA.
Legal basis: Article 6(1)(a) of the GDPR (consent by submitting the form) or Article 6(1)(b) of the GDPR, if your request is intended to initiate a contract.
Retention Period: Your inquiry, including email correspondence, will be deleted as soon as it is no longer needed for processing, but no later than the expiration of the statutory retention periods.
You can use the “Request Catalog” feature to request our product catalog from us by mail or electronically. We process the information you provide (e.g., name, mailing address, email address) solely for the purpose of sending you the requested catalog.
Legal basis: Article 6(1)(a) of the GDPR (consent) or Article 6(1)(b) of the GDPR (precontractual measures).
Retention Period: The data will be deleted after the catalog is sent, unless there is a legal requirement to retain it or you have consented to further contact.
To protect our forms from automated abuse (spam, bots), we use the hCaptcha service provided by Intuition Machines, Inc., 350 Bush Street, Floor 2, San Francisco, CA 94104, USA.
In this process, technical data such as IP addresses, mouse movements, and browser and device information are processed to determine whether an input was made by a human or a machine. This may involve the transfer of data to the United States. This transfer to a third country is safeguarded on the basis of EU Standard Contractual Clauses pursuant to Art. 46 of the GDPR.
Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest in ensuring that forms function properly and are protected against misuse).
For more information, please see hCaptcha’s Privacy Policy: https://www.hcaptcha.com/privacy
Your data will only be disclosed to third parties to the extent necessary for the performance of the contract, due to legal obligations, or based on your consent, as well as to processors we engage (including hosting providers, email service providers, hCaptcha), with whom corresponding contracts have been or will be concluded in accordance with Article 28 of the GDPR.
As a data subject, you have the following rights in particular:
To exercise these rights, simply send an informal message using the contact information listed above in point 2.
Austrian Data Protection Authority
Director: Mag. Matthias Schmidl
Address: Barichgasse 40–42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/
We reserve the right to update this Privacy Policy to keep it current in light of changes in the legal landscape or modifications to the service or data processing. The most recent version of the Privacy Policy will then apply to your next visit.
If you have any questions regarding data protection or exercising your rights, please contact:
Ceraflex® GmbH, Grossendorf 113, 4551 Ried im Traunkreis, Austria
Email: info@ceraflex.at