Privacy policy
Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). This statement explains which data we process when you visit this website.
1. Controller
Innosphere IT e.U.
Owner: Michael Ilyabaev
Vorgartenstraße 158-170/7/R01, 1020 Vienna, Austria
Phone: +43 1 3210049
Email: office@innosphere.at
2. Hosting and server log files
This website is provided via Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit the website, technically necessary data is processed, in particular your IP address, date and time of access, the page requested, the amount of data transferred, browser and operating system. This data is required to deliver the website, ensure its stability and security and defend against attacks.
The legal basis is our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission applies to transfers to the USA (Art. 45 GDPR). Cloudflare only stores the log data for as long as necessary for these purposes.
3. Contact form
If you write to us using the contact form, we process the data you provide: name, email address, optionally your phone number, the selected topic and your message. We use this data exclusively to process your request and reply to you.
Name, email address and message are required fields (marked with *). Without this information we cannot answer your request. Providing your phone number is voluntary.
The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). To deliver the message to our mailbox we use the email service Brevo (Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France). We have concluded a data processing agreement with Brevo; the data is processed in the EU. Brevo only keeps the message briefly in its sending logs. Our mailbox is provided by Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). We have concluded a data processing agreement with Microsoft. The data is generally stored in data centres in the EU. Where data is transferred to Microsoft Corporation in the USA in individual cases, this is based on its certification under the EU-US Data Privacy Framework (Art. 45 GDPR). We store your request for as long as necessary to process it and then delete it, unless statutory retention obligations apply – for example if the request leads to an order (usually seven years under § 132 of the Austrian Federal Fiscal Code).
Spam protection: To protect against automated requests (spam), we use the Cloudflare Turnstile service in the contact form (Cloudflare, Inc., address see section 2). When you open the contact page, a script from Cloudflare is loaded that checks technical characteristics of your browser and device as well as your IP address in order to distinguish humans from bots. According to Cloudflare, no cookies are set and the data is not used for advertising. The legal basis is our legitimate interest in protection against misuse and spam (Art. 6(1)(f) GDPR); access to information on your device is strictly necessary for the secure sending of the message you requested (§ 165(3) TKG 2021). Transfers to the USA are covered by the certification under the EU-US Data Privacy Framework (Art. 45 GDPR).
4. Contact by email or phone
If you contact us by email or phone, we also process your details only to handle your request. The legal bases, retention periods and recipients (Microsoft 365) from section 3 apply. We do not pass this data on without your consent.
5. Cookies, tracking and external content
This website does not set cookies and does not use any analytics or tracking tools. Fonts and videos are delivered directly from this website. Apart from the Cloudflare Turnstile spam protection on the contact page (see section 3), no content from third parties such as Google Fonts, YouTube or social media platforms is embedded, so no data is transmitted to such providers when you visit the site.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). Simply contact us at office@innosphere.at.
No automated decision-making, including profiling (Art. 22 GDPR), takes place.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.
Last updated: October 2026. This is a translation. The German version is legally binding.