Privacy Policy
Which personal data we process, for what purpose and for how long.
Last updated: 26.10.2026
1. Controller
The controller within the meaning of Art. 4(7) GDPR is:
Viyana Ticaret Platformu, Favoritenstraße 102, 1100 Wien, Österreich · Email: office@viyana-ticaret.at · Phone: +43 1 512 80 90
2. Data we process
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Visiting the site | IP address, browser and device information, request time (server logs) | Security, debugging, reliable operation | Art. 6(1)(f) GDPR |
| Contact form | Name, email, phone, company, subject, message | Answering your request | Art. 6(1)(b) and (f) |
| Advertising enquiry | Name, company, email, phone, ad preference, notes | Preparing an offer, pre-contractual steps | Art. 6(1)(b) |
| Directory listing | Business name, address, contact details, VAT ID, register number | Publishing the listing | Art. 6(1)(b) and (f) |
| Cookies | Session, language and cookie choice | Operating the site | Section 165(3) TKG 2021, Art. 6(1)(f) |
The administration area is for authorised staff only; visitors have no registration or login.
3. Retention
- Server logs: at most 30 days.
- Contact messages: 3 years after the request is closed (possible legal claims).
- Advertising enquiries and contracts: 7 years under Austrian commercial and tax law.
- Directory listings: until the business asks for removal.
4. Recipients
We do not sell your data. Hosting and email providers receive data as processors under Art. 28 GDPR. Authorities may receive data where the law requires it. We do not knowingly transfer data outside the EU/EEA; if that ever happens, Art. 44 et seq. safeguards apply.
5. Your rights
You may request access, rectification, erasure, restriction, portability and object to processing by writing to office@viyana-ticaret.at. See Your GDPR rights for details. You may complain to the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, dsb.gv.at.
6. Security
Data in transit is encrypted with TLS, the administration area sits behind authentication and authorisation, and access is logged. No system is perfectly secure; if a breach occurs we meet the statutory notification deadlines.
7. Changes
We update this notice when needed; the version on this page is the current one.