Skip to main content

Privacy Policy

Last updated: March 2026

1. Data Controller

cellcreek GmbH
Buxersiedlung 13
9470 St. Paul im Lavanttal
Austria
Email: office@cellcreek.com
Phone: +43 660 85 88 788

2. Data Collected

We collect personal data exclusively through the contact form on our website. The following data is processed:

  • Name (required)
  • Email address (required)
  • Phone number (optional)
  • Company name (optional)
  • Message (required)
  • Inquiry type (required)

3. Purpose of Data Processing

The data submitted via the contact form is used exclusively to process your inquiry and to contact you. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Providing your name, email address, and message is required to process your inquiry. Without this data, we cannot respond to your request. Providing your phone number and company name is optional.

4. Email Delivery

For sending emails (confirmation to you and notification to our team), we use Azure Communication Services by Microsoft. Data is processed on servers within the European Union. Microsoft processes data in accordance with the Data Processing Agreement (DPA).

Your data is shared with Microsoft (Azure Communication Services) for email delivery and with our internal team (office@cellcreek.com) for processing your inquiry.

5. Abuse Prevention

To protect against misuse of the contact form, your IP address is temporarily stored in server memory (rate limiting). This data is automatically deleted after 15 minutes and is not stored persistently. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing abuse).

6. Cookies

Our website uses no tracking cookies and no analytics tools. No cookies that require consent are set.

7. Data Retention

We store your data for the following periods:

  • Contact form data: Deleted after your inquiry is resolved, no later than 6 months.
  • Business correspondence: 7 years per § 132 Austrian Federal Tax Code (BAO), if commercially relevant.
  • Rate limiting data: Automatically deleted after 15 minutes (in-memory only).
  • Server logs: Per Microsoft Azure Static Web Apps default retention period.

8. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR) — You may request information about your stored data.
  • Right to rectification (Art. 16 GDPR) — You may request correction of inaccurate data.
  • Right to erasure (Art. 17 GDPR) — You may request deletion of your data.
  • Right to restriction (Art. 18 GDPR) — You may request restriction of processing.
  • Right to data portability (Art. 20 GDPR) — You may request your data in a portable format.
  • Right to object (Art. 21 GDPR) — You may object to the processing of your data.

To exercise your rights, please contact: office@cellcreek.com

Data protection contact: Gernot Gutschi, office@cellcreek.com
A Data Protection Officer is not required under Art. 37 GDPR.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent data protection authority:

Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna, Austria
www.dsb.gv.at

10. Hosting

This website is hosted on Azure Static Web Apps by Microsoft. Servers are located in the European Union. No personal data is stored server-side beyond standard web access logging (IP address, timestamp, requested resource).

11. External Links

Our website contains links to external websites (e.g. LinkedIn). When you click these links, you leave our website. The operators of external websites are solely responsible for data processing on their sites. We recommend reviewing the privacy policies of the respective websites.