Privacy Policy
Effective Date: June 2025
Version: 1.0
Operator: datasol FlexCo
Product: VITAMARIE
General Principles
As a technology and consulting partner focused on data-driven innovation, we are committed to protecting your personal data. All data processing is conducted in strict accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 – “GDPR”), the Austrian Data Protection Act (Datenschutzgesetz – “DSG”), and other applicable European and national legal provisions.
We process your data lawfully, fairly, and transparently, and we apply the principle of data minimization to every aspect of our work.
Controller Contact Details
If you have any questions about data protection or wish to exercise your data protection rights, please contact:
datasol FlexCo
Kramergasse 9/8, 1010 Wien
+43 1 412 00 21
FN 628922k | ATU80723503
Purposes and Legal Bases of Processing
We provide the following overview of the purposes for which we process personal data, as well as the respective legal bases under the GDPR.
Business Operations and Contract Fulfillment
When you contact us, request an offer, register for a subscription, or enter into a contractual relationship, we process the personal data required to fulfill that request or contractual obligation (e.g., name, contact details, billing information, service details).
Legal Basis: Art. 6(1)(b) GDPR – Performance of a contract or steps prior to entering into a contract
Storage Period:
No contract concluded: erased after 12 months
Contract concluded: retention for 7 years (statutory retention period under tax and commercial law)
Invoicing, Taxation, and Legal Obligations
We process accounting and transaction data, such as bank details and payment confirmations, to meet our obligations under Austrian commercial and tax law.
Legal Basis: Art. 6(1)(c) GDPR – Legal obligation
Storage Period: 7 years, pursuant to §132 BAO and §212 UGB
IT and System Security
To ensure the security and integrity of our systems, we log IP addresses, access timestamps, browser versions, and the pages accessed. These data are only reviewed in the event of suspicious or unlawful activity.
Legal Basis: Art. 6(1)(f) GDPR – Legitimate interest in maintaining system security
Storage Period: Maximum 3 months
Job Applications and Recruitment
If you apply for a job with us, we process the data you provide (e.g., CV, cover letter, references) to evaluate your application and carry out recruitment procedures.
Legal Basis: Art. 6(1)(b) GDPR – Pre-contractual obligations
Storage Period: 7 months after closure of the application process unless employment is offered
Contact
If you have any questions, concerns, or requests regarding your personal data, please contact:
datasol FlexCo
Kramergasse 9/8, 1010 Wien
+43 1 412 00 21
FN 628922k | ATU80723503
Use of AI Services (e.g., VITAMARIE, Spedi, AI-Concierge)
When using our AI-based web tools and platforms, we process session-related technical data (such as IP address, session ID, browser version) to ensure functional operation. Any free-text entries are not used to identify individuals and are not linked to other data sets.
Legal Basis: Art. 6(1)(a) GDPR – Consent by voluntary use of the tool
Storage Period:
Session data is anonymized upon closing the session
Free-text content is anonymized and used solely for internal quality assurance purposes
Important: Do not enter personal or sensitive information in free-text fields or chat interfaces.
Data Recipients and Processors
We do not sell or disclose your personal data to third parties except in the following circumstances:
Statutory obligation: We may disclose data to public authorities (e.g., tax authorities, courts) if required by law.
Service providers: We engage external service providers (e.g., IT, hosting, legal or tax consultants) who process data on our behalf under Article 28 GDPR. These providers are contractually obligated to maintain strict confidentiality and security standards.
No third-country transfers: We do not transfer personal data to countries outside the EEA without adequate data protection safeguards (e.g., adequacy decision or standard contractual clauses).
Data Subject Rights
As a data subject, you have the following rights under Articles 15–21 GDPR:
Right of access to your personal data (Art. 15)
Right to rectification of incorrect or incomplete data (Art. 16)
Right to erasure ("right to be forgotten") (Art. 17)
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to object to processing based on legitimate interest (Art. 21)
Right to withdraw consent at any time (Art. 7(3))
You may exercise these rights at any time by contacting office@datasol.ai. We will respond to your request within the statutory timeframe (usually one month).
Right to Lodge a Complaint
If you believe that your data is being processed unlawfully or that your rights under data protection law have been infringed, you have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
Web: https://www.dsb.gv.at
Cookies and Tracking
We follow the principle of data minimization.
We do not use third-party cookies.
We do not integrate social media plugins or external tracking pixels.
Only technically necessary cookies are used, and you will be informed accordingly.
No Automated Decision-Making
We do not perform any form of automated decision-making or profiling within the meaning of Article 22 GDPR.
Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time to reflect changes in legislation, technology, or our services. The current version will always be available at:
https://www.vitamarie.com/privacy-policy