Privacy policy

Preamble: This privacy policy applies to all websites and social-media channels of Eklavya Minds. The German Datenschutzerklärung is the legally binding version.

1. General

1.1 What are personal data

Personal data are details that reveal or may reveal the identity of the user. We follow the principle of data minimization and collect personal data only where necessary.

1.2 Handling of personal data

Personal data are used solely for the establishment, design, performance, or processing of the contractual relationship (Art. 6(1)(b) GDPR).

Beyond that, personal data are processed only if you have given your consent (Art. 6(1)(a) GDPR) or where their processing is necessary for our legitimate interests and the weighing of interests shows no overriding interests, fundamental rights, or fundamental freedoms on your side (Art. 6(1)(f) GDPR).

We may use processors for handling your personal data with whom we have concluded a data processing agreement. Beyond that we generally do not pass personal data on to third parties.

Processing of your personal data takes place in the EU as well as in countries classified by the EU as safe or adequate.

1.3 Retention period

We store your personal data after the purpose for which they were collected has ended only for as long as is required under statutory provisions (in particular, tax law).

2. Your rights

2.1 Right of access

You can request information from us as to whether we process personal data concerning you, and, if so, you have a right of access to that personal data and to the further information listed in Art. 15 GDPR.

2.2 Right to rectification

You have the right to have inaccurate personal data concerning you rectified, and you may request the completion of incomplete personal data in accordance with Art. 16 GDPR.

2.3 Right to erasure

You have the right to request that we erase your personal data without undue delay. We are obliged to do so without undue delay, particularly where one of the following grounds applies:

  • Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  • You withdraw the consent on which the processing was based, and there is no other legal basis for processing.
  • Your data have been unlawfully processed.

The right to erasure does not apply if your personal data are necessary for the establishment, exercise, or defense of our legal claims.

2.4 Right to restriction of processing

You have the right to restriction of processing of your personal data, in particular where:

  • You contest the accuracy of the data and we therefore verify its accuracy,
  • processing is unlawful and you oppose erasure and instead request restriction,
  • we no longer need the data, but you need them to establish, exercise, or defend legal claims,
  • you have objected to processing of your data, and it has not yet been determined whether our legitimate grounds override yours.

2.5 Right to data portability

You have the right to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format, and to transmit those data to another controller without hindrance, provided processing is based on consent or a contract and is carried out by automated means.

2.6 Right to withdraw and to object

Where processing of your personal data is based on consent (Art. 6(1)(a) GDPR), you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.

Where processing of your personal data is based on Art. 6(1)(e) or (f) GDPR, you have the right under Art. 21 GDPR to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

2.7 General and right to lodge a complaint

Exercising the above rights is generally free of charge for you. You have the right to address complaints directly to the supervisory authority responsible for us. In Austria, this is the Datenschutzbehörde: www.dsb.gv.at

2.8 Automated decision-making

No automated decision-making, including profiling, takes place.

3. Data security and cookies

3.1 Data security

All data on our website are secured against loss, destruction, access, alteration, and dissemination by technical and organizational measures.

3.2 Sessions and cookies

To operate our website we use cookies or server-side sessions in which data may be stored. Cookies are small files placed on your hard drive by a website to recognize you automatically on your next visit.

The integration of cookies and other technologies that require consent pursuant to § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) is carried out via a cookie consent manager (see section 5.2). This tool allows you to grant, manage, and at any time withdraw your consent to the use of cookies and other technologies.

The legal basis for processing data collected by the cookie consent manager is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 165(3) TKG 2021, and our legitimate interest in compliance with data-protection obligations pursuant to Art. 6(1)(f) GDPR.

Beyond that, this website uses no third-party analytics or advertising services.

4. Contact

When you contact us by email or phone, your information is stored for processing the request and possible follow-up questions. We do not pass this data on without your consent. Processing is based on Art. 6(1)(b) GDPR if your inquiry relates to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries directed to us (Art. 6(1)(f) GDPR).

5. Third-party services

5.1 External hosting

Our website is hosted by an external service provider. The (personal) data collected on this website are transferred to and stored on the host's servers. These may include, among other things, IP addresses, contact data, contract data, time-zone difference to Greenwich Mean Time, content of the request, HTTP status code, transferred data volume, website from which the request comes, and information about browser and operating system.

The host is used for the purpose of contract performance towards our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of the secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). The host will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions regarding such data.

Host: IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany
Privacy policy: https://www.ionos.de/terms-gtc/terms-privacy

5.2 Cookiebot (cookie consent manager)

We use the Cookiebot tool on our website, operated by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to provide information about the cookies used and to obtain consent. The data entered via the tool (consent, refusal, preference, date, time), an anonymized IP address, and technical browser data are transmitted to Cookiebot. Cookies are stored for up to 12 months.

The legal basis for processing your data is Art. 6(1)(c) GDPR (compliance with a legal obligation), Art. 6(1)(a) GDPR (consent), and Art. 6(1)(f) GDPR (legitimate interest).

You can find more information in Cookiebot's privacy policy: https://www.cookiebot.com/en/privacy-policy/

Note: This website does not load external fonts (e.g. Google Fonts), third-party videos (e.g. YouTube), analytics tools (e.g. Google Analytics), or social-media plugins. The only external script loaded is Cookiebot for consent management (see section 5.2). All fonts are served directly from our server.

6. Contact for privacy questions

For questions about data protection, please contact us using the details below. Controller within the meaning of the GDPR:

Sweta Srivastava
Alte Poststraße 281/2/16
8053 Graz
Email: contact@eklavyaminds.at
Phone: +43 677 63176054