Legal

Privacy policy

Draft notice (remove before publication): This privacy policy is a draft (as of September 2026), newly drafted for an Austrian B2B company (GDPR and Austrian Data Protection Act, DSG), and must be legally reviewed before publication. In particular, the following must be checked or added: data processing agreement and log retention period at Hostinger, form backend (once set up), use of WhatsApp (private or WhatsApp Business).

Convenience translation: This English version is provided for information only. Only the German version is legally binding. Deutsche Fassung

As of: September 2026

1. General

The protection of your personal data is important to us. We process your data exclusively on the basis of the statutory provisions, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). In this privacy policy we inform you which data we process when you visit our website and contact us, for what purposes and on what legal basis.

2. Controller

Involtis CS Photovoltaics GmbH
Ragnitz 54/10
8413 Ragnitz, Austria
Phone: +43 670 60 52 919 / +43 664 46 111 80
Email: info@involtis.com

Represented by the managing directors Christoph Stöckl and Thomas Rauscher
Company register number: FN 491636w
Commercial register court: Landesgericht für ZRS Graz – Standort Leibnitz
VAT ID number (UID): ATU73292689

For data protection enquiries, you can reach us at info@involtis.com.

3. Hosting and server log files

This website is hosted by Hostinger (Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus). When you access our website, the web server automatically stores information transmitted by your browser in so-called server log files. This includes in particular:

IP address of the requesting device
date and time of access
page or file accessed and amount of data transferred
previously visited page (referrer URL)
browser and operating system used
HTTP status code

Processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in providing the website in a technically error-free, stable and secure manner (e.g. defending against attacks, error analysis). This data is not combined with other data sources. The log files are stored only for a limited period and then deleted, unless their further retention is necessary to investigate a specific security incident. A data processing agreement pursuant to Art. 28 GDPR exists or will be concluded with the hosting provider.

4. No cookies, no web analytics

This website does not use cookies or any analytics, tracking or advertising services. Fonts are loaded from our own server; no third-party content is embedded. Links to external services (e.g. app stores or manufacturer portals) are only accessed when clicked; the respective provider is responsible for data processing on those pages. The chat assistant on this website runs exclusively in your browser: it only stores the status of the greeting and the website tour locally (localStorage/sessionStorage), does not set cookies and does not transmit any data.

5. Contacting us

Contact form: If you write to us using the contact form, we process the data you provide (company, contact person, email address, optionally phone number, VAT ID number, subject, product and your message) in order to handle your enquiry. The form currently opens your email program with a prepared message; transmission therefore takes place by email.

Email and phone: If you contact us by email or phone, we process your contact details and the content of your enquiry in order to handle it and for any follow-up questions.

WhatsApp: You can also contact us via WhatsApp. In the European Economic Area, the WhatsApp service is operated by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a company of the Meta group. When you use it, WhatsApp processes your phone number, message content and metadata (e.g. time of the message, device information); data may be transferred to Meta companies in the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses. Further information can be found in WhatsApp’s privacy policy. Use of WhatsApp is voluntary; alternatively, you can reach us at any time by email, phone or via the contact form.

Legal bases: Processing is carried out to take pre-contractual steps or to perform a contract (Art. 6(1)(b) GDPR) and otherwise on the basis of our legitimate interest in handling business enquiries efficiently (Art. 6(1)(f) GDPR). Where you have given us your consent (Art. 6(1)(a) GDPR), you may withdraw it at any time with effect for the future.

6. Business relationships

As a purely B2B company, we process data of business contacts in the course of our business relationships, in particular company name, contact persons, contact details, company address, VAT ID number and quotation, order, delivery and invoice data. Processing is carried out for preparing quotations, processing orders, delivery, invoicing and accounting, as well as for technical support and handling statutory warranty and guarantee claims (Art. 6(1)(b) GDPR), and to comply with legal obligations, in particular under company and tax law (Art. 6(1)(c) GDPR).

7. Recipients of data

We only pass on your data where this is necessary to perform a contract, required by law or covered by our legitimate interest, for example to transport and logistics companies, IT and hosting service providers, tax advisers, banks and – in the case of warranty claims – the respective manufacturer. Data is transferred to countries outside the EEA only to the extent described above (WhatsApp) or in compliance with the requirements of Art. 44 et seq. GDPR.

8. Retention period

We store personal data only for as long as is necessary for the respective purposes. Enquiries that do not result in a contract are deleted as soon as they are no longer needed, unless statutory retention obligations prevent this. We retain business records such as books, vouchers and invoices for seven years in accordance with § 132 Federal Fiscal Code (BAO) and § 212 UGB; beyond that, we store data for as long as necessary to establish, exercise or defend legal claims (for instance for the duration of warranty and limitation periods or pending proceedings).

9. Your rights

In principle, you have the rights of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, please contact info@involtis.com.

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

10. Right to lodge a complaint

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at, website: www.dsb.gv.at.