Legal

Privacy Policy

Last updated: June 2026. This policy explains how REFIN GmbH processes personal data in connection with this website, in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

1. Controller

The controller responsible for data processing on this website is:

REFIN GmbH
Seifertstraße 2a, 1130 Vienna, Austria
Email: hello@refingmbh.com
Phone: +43 664 301 4883
Company register: ATBRA.167924-000

2. Scope

This policy applies to this website and all of its sub-pages. It does not cover websites operated by third parties to which we may link.

3. Personal data we process

Server log files. When you visit the site, our server automatically records technical data: anonymised or shortened IP address, date and time of the request, the page requested, referrer URL, browser type and version, and operating system. This data is technically necessary to deliver the site and to keep it secure and stable.

Contact form. If you use the contact form, we process the name, email address and message you submit, together with the time of submission, in order to receive and respond to your enquiry. A hidden anti-spam field is used to block automated submissions and does not store personal data.

Direct contact. If you contact us by email or telephone, we process the information you provide solely to handle your request.

4. Legal bases

We process personal data on the following legal bases under Art. 6(1) GDPR: (b) to take steps at your request and to respond to enquiries; (f) our legitimate interest in operating a secure, stable and functional website and in communicating with interested parties; and (c) to comply with a legal obligation. Where we ask for your consent, the legal basis is (a) and you may withdraw it at any time with future effect.

5. Cookies and tracking

This website does not use advertising or tracking cookies and does not run third-party analytics or profiling tools. Any cookies that may be set are strictly necessary for the basic operation of the site. Your selected language is stored only for the duration of your visit.

6. Fonts and external resources

All fonts, scripts and other resources used on this website are hosted on our own server. Nothing is loaded from third-party content delivery networks or font services, so no personal data (such as your IP address) is transmitted to Google Fonts or any other external provider when you visit the site.

7. Hosting

This website is operated on our behalf by a hosting provider acting as our processor under Art. 28 GDPR. The provider processes the server log data described above strictly on our instructions and solely to operate the site.

8. Recipients

We do not sell personal data. We disclose personal data only to processors who support the operation of this website (for example hosting and email providers) under data processing agreements, or where we are legally required to do so. Personal data is not passed to third parties for their own purposes.

9. International transfers

Personal data is processed within the EU/EEA. We do not transfer personal data to third countries in the ordinary course of operating this website. Should this change, any such transfer would be protected by an adequacy decision, the EU-U.S. Data Privacy Framework, or standard contractual clauses.

10. Retention

Server log data is stored only for as long as necessary for security and operation and is then deleted or anonymised. Enquiry data is kept for as long as needed to handle your request and to meet statutory retention obligations (for example under commercial or tax law), after which it is deleted.

11. Your rights

Subject to the conditions of the GDPR, you have the right to:

  • access the personal data we hold about you (Art. 15);
  • have inaccurate data corrected (Art. 16);
  • have your data erased (Art. 17);
  • restrict processing (Art. 18);
  • receive your data in a portable format (Art. 20);
  • object to processing based on legitimate interest (Art. 21); and
  • withdraw any consent you have given, with effect for the future (Art. 7(3)).

To exercise any of these rights, contact us at hello@refingmbh.com.

12. Right to complain

If you believe our processing of your personal data infringes the GDPR, you may lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at) or with the supervisory authority of your habitual residence.

13. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

14. Data security

We apply appropriate technical and organisational measures, including TLS/SSL encryption of data transmitted through this site, to protect personal data against loss, misuse and unauthorised access.

15. Obligation to provide data

You are under no statutory or contractual obligation to provide personal data. However, without the information requested in the contact form we may be unable to respond to your enquiry.

16. Changes

We may update this policy to reflect changes in our processing or in the law. The version published here applies. Last updated: June 2026.