Privacy notice

Controller

The controller for data processing on this website is:
Magnetelio
Puchstrasse 145
8055 Graz
Austria
UID: ATU79764514
office@magnetelio.at
+43 660 4736784
Privacy requests: office@magnetelio.at

Visiting the website (server log files)

When you visit the site, our hosting provider processes technically necessary data (including IP address, date and time, page requested, browser details) in order to deliver the page and ensure security. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). The data is stored only as long as required for operation and security.
For personal links in our postal mailings, we count visits to each link and store the time of the most recent visit. This helps us assess the response to a mailing. We do not store an IP address, device identifier or visitor cookie for this count, and a visit alone does not tell us which person opened the link. The figures are visible only internally. The legal basis is our legitimate interest in evaluating our own postal mailings (Art. 6(1)(f) GDPR).

Project enquiry via the form

When you send us an enquiry, we process company, contact person, email address, phone number, your message and the time you confirmed this privacy notice in order to handle your enquiry and contact you. To prevent abuse we also store a hash of your IP address (not the IP address itself). The legal bases are taking steps prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in handling business enquiries and preventing abuse (point (f)). We keep your enquiry for as long as it remains relevant to processing it, and assess erasure requests under the applicable law (see “Your rights” below); if a business relationship results, the periods in the next section apply. You may optionally attach up to 5 files (JPG, PNG or PDF, max. 10 MB each), e.g. your logo or a photo as a template; they are stored privately, visible only to us, and kept and deleted together with the enquiry. Please do not send sensitive data.

Customer area and business relationship

For existing business customers we process company and contact data, addresses, orders, invoices, payment and shipping data and login data (email address, password only as a hash) in order to perform contracts and handle orders (Art. 6(1)(b) GDPR). We keep accounting records for 7 years because of statutory obligations (e.g. § 132 BAO, § 212 UGB, Austria) (Art. 6(1)(c) GDPR). Files you upload with a change request (JPG, PNG or PDF) are stored privately together with your feedback.

Recipients

We use service providers for hosting, databases, email, shipping, payment processing where agreed, and accounting. With your consent, Google also receives data for optional ad measurement on magnetelio.at, as explained below. Other disclosures take place where required by law.

Cookies, analytics and tracking

On public pages of magnetelio.at, we use the Google tag for Google Ads conversion measurement only with your voluntary consent. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We measure which advertisements lead to successfully submitted enquiries. Google may receive IP addresses, browser and device information, timestamps, public pages visited, ad-click identifiers and a random event identifier. We do not send names, email addresses, telephone numbers or form contents to Google. Enhanced conversions, Google Analytics and personalised advertising are not enabled. The tag is not loaded in the customer area or on password pages.
The legal bases are your consent under Article 6(1)(a) GDPR and section 165(3) Austrian TKG 2021. Until consent is given, and if declined, no Google tag is loaded and our integration sends no cookieless measurement signals (Basic Consent Mode). You can use the website and enquiry form without consenting.
Google may process data through Google LLC in the USA. The EU-US Data Privacy Framework provides an adequacy decision for certified US recipients; Google uses standard contractual clauses where required. See the Google links below for processing, transfer safeguards and retention. Ad-attribution cookies (_gcl_*) generally last up to 90 days. We store your consent choice, timestamp and version in your browser for 180 days.
You can change your choice or withdraw consent using “Cookie settings” at the bottom of the page and choosing “Necessary only”. Withdrawal applies to future processing and does not undo previously lawful processing. We remove accessible Google Ads cookies set on our website. Data already received by Google remains subject to its retention rules and your data protection rights.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Please send requests to office@magnetelio.at. You can also lodge a complaint with a data protection authority – in Austria the Datenschutzbehörde (www.dsb.gv.at), in Slovenia the Informacijski pooblaščenec (www.ip-rs.si).

Changes

Updated on 7 November 2026. We update this information when our processing changes. The version published here applies.

Contact via WhatsApp

WhatsApp is an optional way to contact us. We use the chat only when you contact us on WhatsApp first and only to handle and respond to your enquiry. We do not use your WhatsApp contact details for advertising. You can also contact us by email or through the enquiry form.

We process your phone number, the profile name visible to us, the contents and timestamps of your messages, and any files you send. Where the processing is necessary for a contract or to take steps at your request before entering into a contract, Article 6(1)(b) GDPR applies. For other enquiries and communications with business contacts, we rely on our legitimate interest in handling enquiries under Article 6(1)(f) GDPR. We keep correspondence for as long as it is needed to handle the enquiry or business transaction. Any statutory retention periods apply to records that must be kept.

The provider in the European Economic Area is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp processes data to provide its service and may process it outside the EEA. Its privacy policy explains recipients and safeguards, including adequacy decisions and EU standard contractual clauses. Please do not send sensitive data via WhatsApp.

WhatsApp privacy policy

Email log

We keep an internal log of outgoing email with its time, recipient, subject and text to handle enquiries and orders and document correspondence. One-time account access links are not retained in the logged text. Only authorised staff can access the log. Retention follows the relevant business purpose and legal obligations.

Facebook and Instagram

After activating the connection, we synchronise messages to our Facebook page and Instagram profile with our internal Magnetelio administration. We store the platform-specific contact identifier, message contents, direction and timestamp as one customer enquiry, to handle your request and reply from the administration app. Only authorised staff have access. Attachments appear as references to the original Meta inbox and are not automatically downloaded. The legal bases are handling your enquiry or performing a contract (Article 6(1)(b) GDPR) and otherwise our legitimate interest in organised customer communication (point (f)). Retention follows the relevant purpose and legal obligations; send erasure requests to the privacy contact above.

We operate a Facebook page and the Instagram profile @magnetelio for product information and communication. The provider for EEA users is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. As the controller identified above, we are responsible for our own posts and handling your messages. We process visible profile information, messages, comments and reactions to respond and maintain our presence. The legal bases are Article 6(1)(b) GDPR for contract-related enquiries and otherwise our legitimate interest in business information and communication under Article 6(1)(f) GDPR. Public comments are visible to others. Please do not send sensitive data; you can also reach us by email or through our enquiry form.

Meta processes device and usage data when you visit or interact, for its own purposes including security, audience measurement and advertising, according to its settings and legal bases. We receive aggregate reach and interaction statistics (Insights). Where Meta and we jointly determine processing for Page Insights, we are joint controllers under Article 26 GDPR. The Facebook Page Insights Addendum linked below applies to Facebook: Meta assumes primary responsibility for the processing and data-subject rights described there. You may exercise your rights with Meta or us.

Meta may process data outside the EEA, particularly in the USA. Its linked privacy information explains recipients, legal bases, transfer safeguards (where applicable an adequacy decision or standard contractual clauses), retention and settings. We have limited influence over Meta’s own processing and retention. We retain our own message copies to handle the matter and keep necessary evidence; the retention obligations above apply to resulting business transactions. Your right to object under Article 21 GDPR applies in particular to our processing based on legitimate interests.

Our website includes Facebook and Instagram solely as ordinary external links. The icons are served locally. Merely visiting our website therefore establishes no connection to Meta and sets no Meta cookies through these links. Opening a link takes you to the relevant platform, where its privacy and cookie rules apply.

Facebook privacy policy
Instagram privacy policy
Facebook Page Insights agreement

Admin app and push notifications

Magnetelio Verwaltung is for authorised staff. We process name, email address, session and sign-in information for access control. Actions in the app are logged for security and business traceability. If you enable push notifications, we store a device token and send it to Apple Push Notification service to deliver alerts about enquiries, orders and customer responses. Signing out unregisters the device from our notifications; you can also revoke permission in iPhone settings at any time. Contact Magnetelio to revoke account access or send a data-deletion request to the privacy address above. Business records are retained where legally required. The app does not use advertising tracking.