Protecting your personal data matters to us. This privacy policy explains which data we process when you visit our website ermafa.at, for which purposes and on which legal basis. We process your data solely in accordance with the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).
ERMAFA ENVIRONMENTAL TECHNOLOGIES GmbH
2. Haidequerstraße 1–3, Object 36
1110 Vienna, Austria
E-mail: info@ermafa.at
Phone: +43 664 4332 380
For any questions about data protection and to exercise your rights, please contact us using the details above.
We process personal data on the following legal bases:
Our website is hosted by Raidboxes GmbH, Hafenstraße 32, 48153 Münster, Germany. The servers are located in the European Union. We have concluded a data processing agreement with Raidboxes pursuant to Art. 28 GDPR.
When you access our website, your browser automatically transmits data to the server, which is stored in server log files: IP address, date and time of access, page requested, amount of data transferred, referrer URL, browser type and operating system. This data is technically necessary to deliver the website and to ensure security and stability, for example to fend off attacks. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). The log files are stored only as long as necessary for these purposes and are then deleted. They are not combined with other data.
To deliver pages faster, our host uses a page cache (Varnish). No personal data is stored in it.
Cookies are small text files stored on your device. We use technically necessary cookies without consent. All other cookies and services that transfer data to third parties are loaded only after you have given your consent in the cookie banner.
To manage your consent, we use our own consent tool, which runs on our server and does not connect to any third party. Your choice is stored in the cookie eet_consent (stored for 12 months). As proof of your consent, we log a random consent ID, the time, your choice, language, the page visited, your browser identifier and your shortened (anonymised) IP address. This log data is deleted after 3 years. The legal basis is our legal obligation to be able to demonstrate consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).
You can change or withdraw your consent at any time with effect for the future: via the Cookie settings link in the footer or via the round button at the bottom left of every page.
The legal basis is § 165(3) TKG 2021 in conjunction with Art. 6(1)(f) GDPR. Without these cookies the website cannot be used as intended.
If you contact us via the contact form, by e-mail or by phone, we process the data you provide (for the contact form: first name, last name, phone number, e-mail address and your message) in order to answer your enquiry. The information from the contact form is sent to us by e-mail and stored in our website database. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures; otherwise it is our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR). If you additionally agree in the form to receive further information from us, the legal basis for this is your consent (Art. 6(1)(a) GDPR).
We delete your data once your enquiry has been fully processed, unless statutory retention obligations apply. Form submissions stored in the website database are deleted automatically no later than 12 months after receipt.
To protect against spam, the contact form contains a check field that is invisible to humans (honeypot). No additional data is collected and no third-party services are involved.
We use Brevo, provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany, to send our newsletter. When you subscribe, we process your first and last name and your e-mail address to send you the newsletter. We use the double opt-in procedure: after signing up, you receive an e-mail with a confirmation link. You are added to the mailing list only after you click this link. As proof of your subscription, we store the time of sign-up and confirmation and the IP address used. Brevo also allows us to see whether a newsletter was opened and which links were clicked. The data is stored on servers in the EU. We have concluded a data processing agreement with Brevo.
The sign-up form is provided by Brevo and is loaded only after you have agreed to the “External media” category in the cookie banner. The legal basis for the newsletter is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every e-mail or by writing to info@ermafa.at. After you unsubscribe, we remove your data from the mailing list; your e-mail address may be kept on a block list so that you receive no further newsletters. More information: Brevo Privacy Policy.
If you have consented to the “Statistics” category, we use Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is integrated via the “Site Kit by Google” plugin. It shows us which pages are visited, how long visitors stay and how they reach our website, so that we can improve it.
The data processed includes page views, clicks, approximate location (country, city), technical information about your device and browser, and the source of the visit. Google Analytics 4 does not store IP addresses. Event data is deleted automatically after 2 months and user data after 14 months. Google Signals and the collection of user data for advertising purposes are disabled; we have concluded a data processing agreement with Google. The cookies _ga and _ga_* are set and stored for up to 2 years. A transfer to Google LLC in the USA is possible; Google is certified under the EU-US Data Privacy Framework.
We use Google Consent Mode. Without your consent, Google Analytics is not loaded. The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021), which you can withdraw at any time via the Cookie settings. When you withdraw consent, the Analytics cookies are deleted. More information: Google Privacy Policy.
The following content is loaded only after you have agreed to the “External media” category or clicked “Allow external media and load” on the respective placeholder. Only then is a connection to the provider established and your IP address and technical information transmitted. The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021).
On our contact page we embed a map from Google Maps, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to help you find us. Google may set cookies and transfer data to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. More information: Google Privacy Policy.
On some pages we embed videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a video is loaded, YouTube learns which page you visited; if you are logged in to your YouTube or Google account, YouTube can link the visit to your account. YouTube may set cookies and transfer data to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. More information: Google Privacy Policy.
See section 6 “Newsletter (Brevo)”.
The fonts used on this website are loaded locally from our server. No connection is made to servers of Google or any other provider.
Our website links to our profiles on LinkedIn, XING, Facebook, Instagram and YouTube. These are simple links; no data is transferred to these networks when you visit our website. Only when you click a link are you taken to the provider’s page, where the provider’s privacy policy applies.
When Google services are used, personal data may be transferred to Google LLC in the USA. For the USA, an adequacy decision of the European Commission exists (EU-US Data Privacy Framework) for recipients certified under it; Google LLC is certified. Apart from this, we do not transfer data to countries outside the EU or EEA.
Unless a specific storage period is stated in this privacy policy, we store personal data only as long as necessary for the respective purpose or as required by statutory retention periods (for example under the Austrian Federal Fiscal Code and Commercial Code, usually 7 years).
Under the GDPR you have the following rights:
Simply contact us at info@ermafa.at.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, e-mail: dsb@dsb.gv.at, website: www.dsb.gv.at.
Our website uses SSL/TLS encryption. You can recognise an encrypted connection by the lock icon in your browser’s address bar and by the address starting with “https://”.
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
We update this privacy policy when our website, the services we use or the legal requirements change. The version published here applies.
Last updated: October 2026
