Data protection (EU)

1. Controller

The controller responsible for the processing of personal data in connection with this website is:

Creonia Cells GmbH
Münzbacher Straße 22
4320 Perg
Austria

Email: office@creonia-cells.com
Phone: +43 676 69 29 337
Website: www.creocell.at

2. General Information

The protection of your personal data is important to us.

We process personal data only where necessary for the operation and security of this website, for communication with interested parties, customers and business partners, for the performance of contractual or pre-contractual measures, or where processing is required by law.

Personal data means any information relating to an identified or identifiable natural person.

Processing is carried out in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Austrian Data Protection Act (Datenschutzgesetz – DSG) and, where applicable, the Austrian Telecommunications Act 2021 (Telekommunikationsgesetz 2021 – TKG 2021).

3. Access to Our Website and Server Log Files

When you access our website, technical data is automatically transmitted by your browser to the server on which our website is hosted.

Such data may include:

  • IP address
  • date and time of access
  • requested page or file
  • amount of data transferred
  • referrer URL
  • browser type and browser version
  • operating system
  • hostname of the accessing device

This information is processed to ensure the reliable and secure operation of the website, to detect technical problems and to prevent misuse and attacks.

The processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in maintaining a secure, stable and functional website.

Log data is retained only for as long as necessary for these purposes unless longer storage is required to investigate security incidents or to comply with legal obligations.

4. Contacting Us

If you contact us by email, telephone, post or another communication channel, we process the information you provide in order to handle and respond to your enquiry.

Depending on your enquiry, this may include:

  • your name
  • email address
  • telephone number
  • company or organisation
  • the content of your message
  • other information voluntarily provided by you

Where your enquiry concerns the initiation or performance of a contract, processing is based on Art. 6(1)(b) GDPR.

For other business communications, processing may be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in communicating with customers, suppliers, business partners and interested parties.

Where processing is expressly based on consent, the legal basis is Art. 6(1)(a) GDPR.

Correspondence is retained for as long as necessary to process the respective enquiry and thereafter only for as long as required by statutory retention obligations or for the establishment, exercise or defence of legal claims.

5. Cookies and Similar Technologies

Our website uses cookies and similar browser technologies.

Cookies are small data files or browser storage entries which can be stored on your device when you visit a website.

Under Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), information may generally only be stored on or accessed from a user’s device with prior consent, unless the respective technology is strictly necessary to provide a service expressly requested by the user.

Accordingly, strictly necessary technologies may be used without prior consent. Non-essential technologies are activated only after the required consent has been obtained.

Where personal data is processed on the basis of consent, the legal basis is Art. 6(1)(a) GDPR.

You may change or withdraw your consent at any time using the cookie settings provided on this website. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Consent Management with Complianz

We use Complianz – The Privacy Suite for WordPress to manage visitors’ privacy and cookie preferences.

Complianz may store technically necessary information in your browser in order to:

  • remember whether the cookie banner has been displayed
  • store your consent choices
  • remember which services you have consented to
  • record the applicable cookie policy
  • remember your selected privacy region or consent status

The following consent-related browser entries may be used:

  • cmplz_banner-status
  • cmplz_policy_id
  • cmplz_functional
  • cmplz_preferences
  • cmplz_statistics
  • cmplz_marketing
  • cmplz_consented_services
  • cmplz_selected_region

These technologies are used to implement and document your privacy choices and, where applicable, to comply with legal obligations.

The applicable legal bases are Art. 6(1)(c) GDPR and our legitimate interest under Art. 6(1)(f) GDPR in operating a reliable consent-management system.

7. WordPress and Elementor

This website is based on WordPress and uses Elementor for website design and functionality.

WordPress and Elementor may use local browser storage or technically necessary cookies for functions including:

  • administration of the website
  • login sessions
  • user and editor preferences
  • technical compatibility
  • website presentation and functionality

Certain WordPress and Elementor cookies or browser-storage entries are relevant only to authorised users who are logged into the website’s administration area and are not normally placed for ordinary public visitors.

These may include, among others:

  • wordpress_logged_in_*
  • wp-settings-*
  • wp-settings-time-*
  • WP_PREFERENCES_USER_*
  • wp_lang
  • wordpress_test_cookie
  • Elementor-related editor storage entries

Where such technologies are strictly necessary for administration, security or provision of a requested function, their use is based on the applicable exemption under Section 165(3) TKG 2021 and, where personal data is processed, on Art. 6(1)(f) GDPR or, where appropriate, Art. 6(1)(b) GDPR.

8. Local Web Fonts

This website uses web fonts for consistent and visually appealing presentation.

The fonts used on this website are hosted locally on our own web server. When the website is accessed, no connection to external font providers such as Google Fonts is established for the purpose of loading these fonts.

Accordingly, no personal data is transmitted to Google or another external font provider in connection with the delivery of these fonts.

9. External Links

Our website may contain links to third-party websites, including external websites relating to employment opportunities and other external resources.

When you follow such a link, you leave our website. The operator of the external website is responsible for the subsequent processing of personal data.

The privacy policy of the respective third-party provider applies from that point onward.

A mere link to an external website does not cause us to control or take responsibility for that website’s data-processing activities.

10. Recipients and Processors

Where necessary, personal data may be processed by service providers that support us in operating our website and IT infrastructure.

These may include:

  • hosting providers
  • IT and website service providers
  • email service providers
  • technical support providers
  • other processors engaged for specific services

Where a service provider processes personal data on our behalf, we enter into a data-processing agreement pursuant to Art. 28 GDPR where legally required.

Personal data is otherwise disclosed only where disclosure is necessary for the performance of a contract, required by law, based on consent or permitted under another legal basis.

11. International Data Transfers

If personal data is transferred to recipients outside the European Economic Area (“EEA”), the transfer will take place only in accordance with the requirements of Chapter V GDPR.

Depending on the recipient and destination country, the transfer may be based on:

  • an adequacy decision of the European Commission
  • Standard Contractual Clauses
  • another legally recognised safeguard
  • or another permissible transfer mechanism under the GDPR

Where a third-party service requiring consent results in an international transfer, the service is activated only after the necessary consent has been obtained.

12. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected.

Personal data may be retained for a longer period where required by statutory accounting, tax, commercial or other retention obligations or where necessary for the establishment, exercise or defence of legal claims.

Once the relevant purpose and any applicable retention period have expired, the data will be deleted or anonymised unless further processing is permitted by law.

13. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.

Our security measures are reviewed and adapted where appropriate, taking into account the state of the art, implementation costs and the risks associated with the respective processing activities.

14. Your Rights

Subject to the conditions provided by the GDPR, you have the following rights:

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to object pursuant to Art. 21 GDPR
  • Right to withdraw consent pursuant to Art. 7(3) GDPR

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

Where personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing in accordance with Art. 21 GDPR.

To exercise your rights, please contact:

Creonia Cells GmbH
Email: office@creonia-cells.com

15. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with a competent supervisory authority.

In Austria, the competent supervisory authority is:

Österreichische Datenschutzbehörde
Austrian Data Protection Authority

Barichgasse 40–42
1030 Vienna
Austria

16. Changes to This Privacy Policy

We may amend this Privacy Policy where necessary, for example due to changes in legal requirements, technical changes to our website or the introduction or removal of services.

The version currently published on this website applies.

Last updated: 7 October 2026