Privacy policy
Information on the processing of personal data pursuant to Art. 13 of the General Data Protection Regulation (GDPR).
Last updated: 23 August 2026
Controller
The controller for the data processing on this website within the meaning of Art. 4(7) GDPR is:
Nanomag GmbHFrikusweg 1
8141 Premstätten
Austria
Email: wpe@nanomag.at
Telephone: +43 650 66 27 617
Managing Director: Dr. Werner Pessenhofer
For questions about data protection and to exercise your rights, please use the address above. A data protection officer is not required under Art. 37 GDPR; your requests are handled directly by the management.
Principles and scope
We process personal data only insofar as this is necessary to operate this website and to handle your enquiries. This policy applies to the website www.nanomag.at including its German and English versions.
This website is deliberately built for data minimisation: it contains no analytics, advertising or tracking technologies and loads no content from third-party servers.
Hosting and server log files
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Zypern (company register HE 301365). The provider processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR (provider’s agreement).
The server is located in Frankfurt am Main, Germany. The content of this website and the log data arising from it are therefore stored within the European Union.
Each time a page is accessed, the web server automatically stores access data in a log file:
- shortened or full IP address of the requesting device
- date and time of access
- name and URL of the requested file
- volume of data transferred and HTTP status code
- browser and operating system used (user agent)
- where applicable, the previously visited page (referrer)
Legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically sound and secure operation of the website and in detecting and tracing attacks and misuse. These data are not combined with other data sources and are not analysed for marketing purposes.
Encrypted transmission
Transmission between your browser and our server is encrypted via HTTPS (TLS). You can recognise the encrypted connection in your browser's address bar.
No cookies, no tracking, no external services
This website sets no cookies. Nor does it use any comparable techniques that store or read information on your device — no local storage, no session storage, no tracking pixels and no fingerprinting. A cookie banner is therefore not required.
We also entirely refrain from using:
- analytics and audience measurement services (e.g. Google Analytics, Matomo)
- advertising networks, retargeting and conversion tracking
- external web fonts (such as Google Fonts) — only the system fonts present on your device are used
- embedded map services, videos, social media plug-ins and like buttons
- content delivery networks — all graphics, stylesheets and scripts are served from our own server
- third-party captcha services; we prevent misuse using a server-side method with no data transfer to third parties
Contact by email and telephone
If you contact us by email or telephone, we process the data you provide — name, company, contact details and the content of your message — in order to handle your request.
Legal basis is Art. 6(1)(b) GDPR where your enquiry serves the preparation or performance of a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Enquiry form
You can send us an enquiry using the form on the contact page. Mandatory fields are name, company, email address and message; providing a telephone number is optional.
Legal basis is your consent under Art. 6(1)(a) GDPR, given by ticking the checkbox, together with Art. 6(1)(b) GDPR for pre-contractual purposes. You may withdraw your consent at any time without formality by email to wpe@nanomag.at; the lawfulness of processing carried out before withdrawal remains unaffected.
Note on the current status: No submission endpoint is currently configured for the form. No form data is therefore transmitted or stored at present. As soon as a submission route is active, this section will be supplemented with the specific processor and retention period.
Links to external services
This website links to external services, in particular to our Managing Director's LinkedIn profile, to OpenStreetMap for showing our location, and to the Austrian Federal Legal Information System. These are plain hyperlinks: no content is embedded, and data is transferred to the respective provider only when you actively click the link. From that point onward the privacy policy of the respective provider applies.
Recipients and processors
Your data is not sold and is not passed on to third parties for advertising purposes. Data is disclosed only to:
- Hostinger International Ltd. as hosting provider and processor (see section 3)
- our tax adviser and, in the event of an order, to order-processing service providers — in each case only where necessary
- authorities and courts where we are legally obliged to do so
Transfers to third countries
We ourselves do not transfer personal data to countries outside the European Economic Area. This website loads no content from third-party servers (see section 5), so no data is transferred to third parties when the site is accessed.
Our hosting provider, however, engages its own sub-processors, some of which are established outside the European Economic Area — under its data processing agreement these include Amazon Web Services EMEA, Google Cloud EMEA, Cloudflare, MailChannels and Proofpoint. Where data reaches a third country in this context, this takes place on the basis of the European Commission’s Standard Contractual Clauses under Art. 46(2)(c) GDPR. The current list of sub-processors and the safeguards applied are set out in the data processing agreement of Hostinger International Ltd..
Retention periods
- Server log files
- Deleted after 30 days at the latest, unless a security-relevant incident requires longer retention.
- Enquiries without a contract
- Deleted once the matter is closed and no retention obligation applies, at the latest after two years.
- Business correspondence and records
- Retained in accordance with commercial and tax law periods, in Austria generally seven years (§ 132 BAO, § 212 UGB).
Your rights
Under the GDPR you have the following rights:
- Access to the data processed about you (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing based on legitimate interests (Art. 21)
- Withdrawal of consent, at any time and with effect for the future (Art. 7(3))
A message to wpe@nanomag.at is sufficient to exercise these rights. You also have the right to lodge a complaint with a supervisory authority. In Austria the competent authority is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb@dsb.gv.at, www.dsb.gv.at.
No automated decision-making
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
Obligation to provide data
You are under no obligation to provide us with personal data. Without the details marked as mandatory, however, we cannot process your enquiry. The website itself can be used without providing any data.
Changes to this policy
We will update this policy if our processing changes — for example when form submission is activated — or if legal requirements make it necessary. The version published here is the applicable one. Its date is stated at the top of this page.