Privacy Policy

Last updated: April 5, 2026

This Privacy Policy explains how personal data is processed when you visit atorico.at and its subdomains.

1. Controller

The controller responsible for the processing of personal data on this website is:

Matthew Bednarski
2320 Schwechat
Austria

Email: info@atorico.at
Website: https://atorico.at/

2. What personal data we process

Depending on how you use this website, we may process the following categories of personal data:

  • contact details you provide to us, such as your name, email address, company name, and the content of your message
  • technical data required to deliver the website, such as IP address, date and time of access, requested URL, referrer URL, browser type, operating system, device information, and language settings
  • analytics data relating to your use of the website, such as page views, approximate location, browser and device information, interactions with pages, session data, and similar usage information

3.1 Access to the website and server logs

When you access this website, your browser automatically transmits certain technical data to the server.

Processed data:
IP address, date and time of request, requested page, referrer URL, browser type/version, operating system, and similar technical information.

Purpose:
To provide the website, ensure stability and security, prevent misuse, and troubleshoot technical issues.

Legal basis:
Article 6(1)(f) GDPR — legitimate interests.
The legitimate interest is the secure, stable, and efficient operation of the website.

Retention:
Server log data is retained only for as long as necessary for security, technical operation, and abuse prevention, unless longer retention is required by law or necessary to investigate specific incidents.

3.2 Contact by email or contact form

If you contact us by email or via a contact form, the information you provide is processed to handle your request.

Processed data:
Name, email address, company name, message content, and any other information you choose to provide.

Purpose:
To respond to your inquiry and communicate with you.

Legal basis:

  • Article 6(1)(b) GDPR, if your request relates to pre-contractual steps or an existing contractual relationship
  • Article 6(1)(f) GDPR in all other cases
    The legitimate interest is the efficient handling of inquiries and business communications.

Retention:
Inquiry data is retained only for as long as necessary to handle the request and any follow-up communication, unless longer retention is required by law or necessary to establish, exercise, or defend legal claims.

3.3 Web analytics using Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google, to understand how the website is used and to improve its content, structure, and performance.

Google Analytics may process information such as page views, approximate geographic information, browser and device information, interactions with the website, technical identifiers, and usage data. Google Analytics 4 uses cookies and similar technologies to distinguish users and measure sessions and interactions.

According to Google, for users in the European Union, Google Analytics does not log or store individual IP addresses.

Purpose:
To measure website usage, understand visitor behavior, improve the website, and evaluate the reach and effectiveness of content.

Legal basis:
Article 6(1)(a) GDPR — consent, to the extent analytics cookies or similar technologies require prior consent.

Processed data:
Usage data, device/browser information, approximate location, pages visited, interactions, session data, and online identifiers generated via analytics cookies or similar technologies.

Recipients:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and potentially Google LLC and affiliated entities where required for service provision.

Retention:
Analytics data is retained for as long as configured in the Google Analytics property and only as long as necessary for analytics purposes.

Withdrawal of consent:
You may withdraw your consent at any time with effect for the future by changing your cookie or consent settings on the website, if available, or by blocking analytics cookies in your browser.

4. Cookies and analytics technologies

This website uses cookies and similar technologies.

Some cookies may be technically necessary for the operation and security of the website. In addition, Google Analytics may use analytics cookies or similar technologies to distinguish users, measure sessions, and analyze website usage.

Analytics cookies are used only on the basis of your consent where such consent is required by applicable law.

You can also control or delete cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.

5. Recipients / service providers

Personal data may be shared with service providers that are necessary for the operation, hosting, maintenance, security, or analytics of the website, where required.

Such recipients may include:

  • hosting providers
  • email providers
  • IT and security service providers
  • analytics providers, including Google

Where required by law, data may also be disclosed to courts, authorities, or other third parties.

6. International data transfers

If personal data is transferred to recipients outside the European Economic Area (EEA), this will only take place where permitted by law and where appropriate safeguards are in place.

Such safeguards may include:

  • an adequacy decision of the European Commission, or
  • Standard Contractual Clauses approved by the European Commission

Google may process data on servers outside the EEA. Where this occurs, Google states that appropriate safeguards are used for relevant transfers.

You may request more information about applicable safeguards by contacting us.

7. Retention periods

Unless a more specific retention period is stated in this Privacy Policy, personal data is retained only for as long as necessary for the purposes described here, including to comply with legal obligations, resolve disputes, and enforce legal claims.

Retention periods may vary depending on:

  • the type of data
  • the purpose of processing
  • statutory retention duties
  • limitation periods under applicable law
  • configured analytics retention settings

8. Your rights

Under applicable data protection law, you may have the following rights:

  • the right of access to your personal data
  • the right to rectification of inaccurate data
  • the right to erasure
  • the right to restriction of processing
  • the right to data portability
  • the right to withdraw consent at any time, where processing is based on consent
  • the right to object to processing based on legitimate interests
  • the right to lodge a complaint with a competent supervisory authority

If you wish to exercise any of these rights, please contact: info@atorico.at

Additional information may be requested where necessary to verify identity before processing a request.

9. Obligation to provide data

You are generally not required to provide personal data. However, certain data may be necessary to use the website, submit an inquiry, or receive a response.

Providing analytics-related data is voluntary where processing is based on consent.

10. Automated decision-making

Personal data is not used for automated decision-making, including profiling, within the meaning of Article 22 GDPR.

11. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect legal, technical, or business developments.

The current version is always available on this website.