PRIVACY POLICY

Introduction

This privacy policy explains which personal data we process, for what purposes, and on what legal bases, as well as your rights under the GDPR. If anything is unclear, please contact us using the details below.

Controller and Contact
Momenture Consulting e.U. (cindr.la)
Kampgasse 1, 3492 Etsdorf am Kamp, Austria
Email: office@cindr.la

Scope of this Policy

This policy applies to all personal data processed via:

this website and other online presences operated by us,
our social media presences and email communication,
any mobile apps we may provide.

Legal basis for Processing

We process personal data only where at least one of the following applies:

Consent (Art. 6(1)(a) GDPR) for specific purposes you approve.
Contract (Art. 6(1)(b) GDPR) to fulfil contractual or pre-contractual obligations.
Legal obligation (Art. 6(1)(c) GDPR).
Legitimate interests (Art. 6(1)(f) GDPR) that do not override your fundamental rights and freedoms.

Consent (Art. 6(1)(a) GDPR) for specific purposes you approve.
Contract (Art. 6(1)(b) GDPR) to fulfil contractual or pre-contractual obligations.
Legal obligation (Art. 6(1)(c) GDPR).
Legitimate interests (Art. 6(1)(f) GDPR) that do not override your fundamental rights and freedoms.

Categories of Data and Purposes (Examples)

Website usage and technical data (e.g., IP address, log files) to operate, secure, and optimise our website.
Contact data (e.g., name, email) to respond to enquiries.
Contractual and billing data to deliver agreed services.

Detailed information is provided where data is collected or used for specific features.

Processors and Recipients

We may engage carefully selected processors (service providers) who process data on our behalf and under our instructions. Where legally required, we have concluded data processing agreements (Art. 28 GDPR). We disclose data to recipients only where necessary for the purposes described or to fulfil legal obligations.

International Data Transfers

We may engage carefully selected processors (service providers) who process data on our behalf and under our instructions. Where legally required, we have concluded data processing agreements (If data is transferred to countries outside the EU/EEA, we ensure appropriate safeguards (e.g., adequacy decisions or Standard Contractual Clauses) and, where necessary, additional measures to protect the data.Art. 28 GDPR). We disclose data to recipients only where necessary for the purposes described or to fulfil legal obligations.

Retention

We store personal data only for as long as necessary for the respective purpose. We delete data when the purpose ceases to apply or upon your request, provided no statutory retention obligations prevent deletion.

Security of Processing

We implement appropriate technical and organisational measures (including encryption and access controls) to protect personal data and follow data-minimisation and privacy-by-design principles.

Cookies

We use cookies to operate and optimise our website and to remember user preferences. Non-essential cookies (e.g., analytics/marketing) are used only with your consent (Art. 6(1)(a) GDPR; §165(3) TKG 2021). You can withdraw consent at any time with effect for the future. You can also disable or delete cookies via your browser settings.

Your Rights (Arts. 15–22, 77 GDPR)

Access: obtain information about data we process about you.
Rectification: correct inaccurate data.
Erasure: request deletion (“right to be forgotten”).
Restriction: request restricted processing.
Portability: receive data in a commonly used format.
Objection: object to processing based on legitimate interests, including direct marketing and related profiling.
Automated decisions: rights concerning decisions based solely on automated processing, including profiling, where applicable.
Complaint: lodge a complaint with a supervisory authority. In Austria: Datenschutzbehörde (www.dsb.gv.at).

How to Exercise Your Rights?
Please contact us at office@cindr.la. We will respond within the statutory deadlines.

Updates to this Policy