Introduction and Overview
Protecting your personal data is very important to us. This Privacy Policy informs you about the personal data we collect, how we process it, and for what purposes. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the applicable Austrian data protection regulations.

Scope
This Privacy Policy applies to all personal data processed in connection with the use of our website or our services. This includes:

• Use of the website
• Contact via form

Legal Basis for Processing
We process personal data only on the basis of legal provisions:

• Contract fulfillment (Art. 6(1)(b) GDPR) – e.g., processing inquiries or applications
• Consent (Art. 6(1)(a) GDPR) – e.g., sending newsletters
• Legitimate interest (Art. 6(1)(f) GDPR) – e.g., website analysis, marketing, IT security
• Legal obligation (Art. 6(1)(c) GDPR) – e.g., retention obligations

Data Controller
Breitenbachstraße 89b
8502 Lannach
Austria
Phone: 0676 84 16 67 788
Email: info@granat-xtri.at

Rights of Data Subjects
You have the right to:

• Access your stored personal data
• Rectify incorrect data
• Delete your data, unless there is a statutory retention obligation
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent

To exercise these rights, please contact us using the details above.

Right to Complain
You can file a complaint at any time with the Austrian Data Protection Authority:
Barichgasse 40–42, 1030 Vienna
Email: dsb@dsb.gv.at
Web: https://www.dsb.gv.at

Child Protection and Consent of Minors
Our website is not directed at children. Persons under 14 years may not provide personal data without parental consent. Persons aged 14 and above can consent to the processing of their data themselves. Data from children under 14, provided without parental consent, will be deleted immediately.

Cookies
We use cookies to improve the use of our website and provide essential functions. You can change your cookie settings at any time via our consent tool or disable cookies in your browser.

Contact Form
If you use our contact form, your name, email address, subject, and message will be collected to process your inquiry. Data will not be shared with third parties.

Application Form
For applications via our online form, we process:

• Contact information (name, address, email, phone number)
• Application documents (CV, certificates, cover letter)
• Any other voluntary information

Processing is for handling your application and deciding on employment. The legal basis is Art. 6(1)(b) GDPR. Application documents of rejected candidates will be deleted no later than 6 months after the conclusion of the application process, unless consent for longer storage has been given.

Server Logs & Web Hosting
When visiting our website, data such as IP address, date/time, browser type, operating system, and referrer are automatically stored. These data are used solely to ensure smooth operation and are deleted after a short period.

Data Security
We implement technical and organizational measures to protect your data, including:

• Encrypted transmission (SSL/TLS)
• Access restrictions
• Regular backups and security updates

Data Retention
Personal data are stored only as long as necessary for the respective purpose or as required by law.

Data Transfer to Third Countries
Data transfer to third countries only occurs if an adequate level of data protection is ensured, e.g., through standard contractual clauses.

Copyright, Image Rights & Liability
All content on our website (texts, photos, graphics, videos) is protected by copyright. Use without express consent is not permitted. We assume no liability for the content of external links.

Changes to the Privacy Policy
We reserve the right to adjust the Privacy Policy if necessary, e.g., due to new legal requirements or changes in our services. The current version is always available on our website.