Privacy Policy
How we handle your data at EDDI Solutions.
1. Introduction
EDDI Solutions ("we", "us", "our"), operated by LABS.AI, Ing. Gregor Jarisch, is committed to protecting your privacy. This privacy policy explains, in line with Articles 12 to 14 of the EU General Data Protection Regulation (GDPR), what personal data we collect when you visit our website (eddi.solutions) or contact us, why we process it, on what legal basis, how long we keep it, and what rights you have. We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR for processing at this scale.
2. Data Controller
The controller responsible for the processing of your personal data on this website is:
LABS.AI, Ing. Gregor Jarisch
Lindengasse 58/6, 1070 Vienna, Austria
Email:
3. Data We Collect
Depending on how you interact with us, we may collect:
- Contact information: name, work email address, company name, and the content of your message when you submit the demo request or contact form.
- Usage data: privacy-friendly analytics such as pages visited, time on page, and referral source, collected only after you opt in to analytics.
- Technical data: server log data such as browser type, operating system, and IP address, processed by our hosting provider for the secure and stable operation of the site.
- Newsletter sign-up: if you subscribe via our newsletter form, your name and email are processed by HubSpot, Inc. (USA). The form only loads after you click to reveal it, and no third-party cookies are set before then.
4. Purposes and Legal Basis
We only process your personal data where we have a legal basis under Article 6 GDPR. The purposes and their legal bases are:
- Handling contact and demo enquiries: to receive your enquiry, respond to it, and take steps at your request before entering into a contract. Legal basis: Article 6(1)(b) GDPR (pre-contractual steps) and Article 6(1)(f) GDPR (our legitimate interest in replying to enquiries addressed to us).
- Sending the newsletter: to send you product updates and news you have subscribed to. Legal basis: Article 6(1)(a) GDPR (your consent), which you can withdraw at any time.
- Website analytics: to understand how visitors use the site and to improve it. Legal basis: Article 6(1)(a) GDPR (your consent), given via the cookie banner and withdrawable at any time.
- Hosting and server logs: to operate the website securely and reliably and to defend against attacks. Legal basis: Article 6(1)(f) GDPR (our legitimate interest in the secure operation of the site).
5. How We Use Your Data
In summary, we use your data to:
- Respond to your enquiries and demo requests
- Send the newsletter where you have subscribed
- Understand and improve how the website is used, where you have consented
- Operate the website securely and comply with legal obligations
We do not sell your personal data, and we do not use it for advertising.
6. Recipients and Processors
We use carefully selected service providers who process personal data on our behalf as processors under Article 28 GDPR. A data processing agreement is in place with each of them. Our processors are:
- HubSpot, Inc., United States: provides our contact and newsletter forms and customer relationship management.
- Umami (cloud.umami.is): provides privacy-friendly website analytics, loaded only after you opt in.
- Vercel Inc., United States: hosts this website and processes server log data.
We do not otherwise disclose your personal data to third parties unless we are legally required to do so.
7. International Data Transfers
Some of our processors are located in the United States. Where personal data is transferred there, the transfer relies on the European Commission adequacy decision for the EU-US Data Privacy Framework where the recipient is certified under it, and on the EU Standard Contractual Clauses as a fallback safeguard. A copy of the relevant safeguards is available from us on request.
8. How Long We Keep Your Data
We keep personal data only for as long as necessary for the purpose it was collected:
- Contact and demo enquiry data: kept only for as long as needed to handle your request and for a reasonable follow-up period, then deleted.
- Newsletter data: kept until you unsubscribe, after which it is removed from the mailing list.
- Analytics data: kept in line with the provider retention settings and only in aggregated, privacy-friendly form.
- Server logs: kept only briefly for security and troubleshooting, then deleted or anonymized.
9. Cookies and Tracking
We keep tracking to a minimum. In accordance with § 165 of the Austrian Telecommunications Act (TKG 2021):
- Strictly necessary local storage (your theme choice and your cookie-consent choice) is required for the site to work and to remember your preferences. It needs no consent.
- Analytics (Umami) and the embedded HubSpot form load only after you actively opt in through the cookie banner.
- You can change or withdraw your consent at any time using the Cookie Settings link in the footer.
10. Your Rights
Under the GDPR, you have the right to:
- Access your personal data (Article 15)
- Rectify inaccurate or incomplete data (Article 16)
- Request erasure of your data (Article 17)
- Restrict processing in certain cases (Article 18)
- Object to processing based on legitimate interest (Article 21)
- Data portability (Article 20)
- Withdraw consent at any time (Article 7(3)), without affecting the lawfulness of processing carried out before the withdrawal
To exercise any of these rights, please contact us at .
11. Right to Lodge a Complaint
If you believe our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, Austria, dsb.gv.at.
12. Is Providing Data Required?
Providing your personal data is voluntary. It is not required by law or contract, but it is necessary for us to answer your enquiry or to send you the newsletter. If you choose not to provide it, the only consequence is that we cannot respond to you or add you to the mailing list.
13. Automated Decision-Making
We do not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
14. Contact
For any questions regarding this privacy policy or your personal data, please contact us at .