Privacy Policy

Abdurrahman Cimenli Elektro e.U.
Quellenstraße 93/6, 1100 Wien, Austria
Phone: +43 660 362 25 22 · Email: cenova.austria@gmail.com

For any questions about data protection, please contact us using these details.

This website does not set any cookies. No advertising or marketing services are used, so no consent banner is required.

The only exception is the password-protected admin area in which our staff handle orders and products: only after signing in does it set a session cookie that keeps the sign-in active; it is not set when you visit the website. This storage is strictly necessary for access to the admin area (§ 165(3) of the Austrian Telecommunications Act 2021).

Only if you use the “Pause motion” button in the website footer does your browser store this setting locally (local storage), so that it also applies on your next visit. The setting is not transmitted to us. You can change it with the same button (“Resume motion”) or remove it by deleting the website data in your browser. This storage is strictly necessary for the function you have explicitly requested (§ 165(3) of the Austrian Telecommunications Act 2021).

Fonts, product images and 3D views are delivered by our hosting provider (see “Hosting and Server Logs”) and are not loaded from third-party servers. The link to our Instagram profile and the links to reference websites are plain links; a connection to their operators is only made when you click them.

So that your selection is kept while you switch between the product catalogue and the order page, your browser stores the order draft locally (local storage, key “cenova-order”): industry, type and size of the site, chosen systems and products, quantities, technical settings, preferred date and site-visit request – without contact details and without an address. The draft is only transmitted when you submit the order. You can remove it with “Clear order” or by deleting the website data in your browser. This storage is strictly necessary for the function you have requested (§ 165(3) of the Austrian Telecommunications Act 2021).

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Pages are delivered via Vercel’s global content delivery network; the server functions of this website run in a data centre in Frankfurt am Main (EU). Product images that we upload in our admin area are kept in Vercel’s file storage (Vercel Blob) and are likewise delivered via this network; they contain no personal data.

When you open a page, your browser transmits technically necessary data to Vercel’s servers; in particular, the IP address, date and time, requested address, status code and details of your browser and operating system are logged. This processing is necessary to deliver the website and keep it stable and secure; the legal basis is Art. 6(1)(f) GDPR. Vercel acts as a processor (Art. 28 GDPR). The logs are not combined with other data and are deleted automatically as soon as they are no longer needed.

If you use the contact form, we process your details (name, email address, phone number, optionally a subject, message) solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns a contract, otherwise Art. 6(1)(f) GDPR.

When you submit the form, your details are sent to our server and checked there, but neither stored nor passed on: the page offers to send the message as a prepared email from your own email program to our mailbox; our mailbox is operated by Google Ireland Limited (Gmail). To protect against automated mass submissions, your IP address is briefly counted in the server’s memory when you submit the form (counting window: one hour); it is not stored permanently (Art. 6(1)(f) GDPR).

If you submit a non-binding order via the “Create order” page, we process your details – industry, type and size of the site, chosen systems, products and quantities, technical settings, preferred date, whether you want a site visit, your name, email address and phone number and, optionally, your address, company and notes – to assess your project and prepare a quote. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract).

The order is stored in our order database (see “Storage of Your Order”); it is not forwarded by email. To protect against automated mass submissions, your IP address is briefly counted in the server’s memory when you submit (counting window: one hour); it is not stored permanently (Art. 6(1)(f) GDPR). If the order cannot be transmitted, the page offers to send it as a prepared email from your own email program to our mailbox at Google Ireland Limited (Gmail).

When you submit an order, it is stored in our order database with all details from the form (see above) – in particular your contact details, your address if given, the chosen systems, products and quantities and your notes – together with the times it was received and processed (such as status changes). We use this data to handle your request and, if a contract is concluded, to perform it. The legal basis is Art. 6(1)(b) GDPR.

The database is operated by Databricks, Inc. (“Neon”), 160 Spear Street, Suite 1300, San Francisco, CA 94105, USA, as a processor (Art. 28 GDPR); it is located in a data centre in Frankfurt am Main (EU). Only our staff have access to the stored orders, via a password-protected admin area, as well as our processors where technically necessary for operation and maintenance.

We keep your order for as long as we are processing it. If a contract is concluded, we retain it for the statutory retention period of seven years under § 132 of the Austrian Federal Fiscal Code (BAO); the legal basis for this is Art. 6(1)(c) GDPR. Requests that do not lead to a contract are deleted at the latest three years after the last contact. This period follows the three-year limitation period for damages claims under § 1489 of the Austrian Civil Code (ABGB); the legal basis is our legitimate interest in defending legal claims (Art. 6(1)(f) GDPR). Your rights (see “Your Rights”) also apply to your stored orders; statutory retention obligations take precedence over erasure.

If you contact us by email or phone, we process your details to answer your enquiry and to carry out an order (Art. 6(1)(b) or (f) GDPR).

The following service providers based in the USA or with a US parent company are involved: Vercel Inc. (hosting), Databricks, Inc. (“Neon”) (order database), Google LLC (mailbox). Although the server functions of this website run in Frankfurt am Main, access from the USA is possible because Vercel is a US company. The same applies to the order database: it is located in Frankfurt am Main, but its operator is also a US company. Google may also process emails in the USA.

The providers named state that they comply with the EU-U.S. Data Privacy Framework. Transfers are based on the European Commission’s adequacy decision (Art. 45 GDPR) and, in addition, on standard contractual clauses (Art. 46(2)(c) GDPR). Data is not passed on to any other third parties unless we are legally obliged to do so.

We store enquiries for as long as is necessary to handle them. If an enquiry leads to an order, the statutory retention periods apply, in particular seven years under § 132 of the Austrian Federal Fiscal Code (BAO). For orders from the order builder, the periods in the section “Storage of Your Order” apply. Server logs are deleted automatically after a short period. The “Pause motion” setting remains stored in your browser until you change it or delete the website data.

You have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests (Art. 15 to 21 GDPR); an informal message to cenova.austria@gmail.com is sufficient.

You can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Wien, dsb@dsb.gv.at, www.dsb.gv.at.

No automated decision-making, including profiling (Art. 22 GDPR), takes place.