Legal
Privacy Notice
This notice explains how we process personal data when you visit this website and when you use our software products. This website itself is deliberately lean: it sets no cookies, uses no tracking or analytics, and loads no third-party content.
1. Controller and contact
The controller under the EU General Data Protection Regulation (GDPR) is:
Ventura Foundry GmbH (in formation)
Kaiserstraße 80/23
1070 Vienna, Austria
Email: office@ventura.at
For all privacy questions and requests, please contact us at office@ventura.at.
2. Visiting this website
When you open this website, your browser automatically transmits technical data that we process to deliver the site securely:
- IP address
- date and time of the request
- requested page or file
- browser type, operating system and referrer URL
Purpose and legal basis: secure and stable operation of the website (Art. 6(1)(f) GDPR, legitimate interest). Retention: server logs are kept only as long as needed for operation and security, generally no longer than 30 days.
3. Contacting us
If you email us, we process the information you provide (such as name, email address and the content of your message) to handle your request. Legal basis: Art. 6(1)(b) GDPR where the request relates to a contract, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Retention: until your request has been resolved, and beyond that only where statutory retention obligations apply.
4. Using our products
When you create an account for or use one of our software products, we process:
- Account data – name, email address, company name, login credentials (stored in hashed form)
- Usage and log data – IP address, device and browser information, timestamps, actions taken in the product
- Content data – data, files and prompts you enter or upload, and the results the product generates for you
- Support data – your communication with us
- Purchase data – plan, billing details, invoices and transaction status
Purposes and legal bases: providing the product and performing our contract with you (Art. 6(1)(b) GDPR); security, fraud prevention, troubleshooting and improving our products (Art. 6(1)(f) GDPR); compliance with legal obligations such as tax and accounting rules (Art. 6(1)(c) GDPR); and, where we ask for it, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future.
Where a product processes personal data on behalf of a business customer, we act as processor for that data and offer a data processing agreement (Art. 28 GDPR) on request. Individual products may provide additional, product-specific privacy information.
5. Recipients
We only share personal data where necessary, with:
- Service providers (processors) who host and operate our infrastructure, including our hosting provider Railway Corporation (USA), with servers in the European Union, payment service providers, and providers of email and support tools – all bound by data processing agreements;
- professional advisers such as tax advisers, accountants and lawyers, who are bound to confidentiality;
- authorities and courts where we are legally required to do so.
We do not sell personal data and do not use it for advertising.
6. International transfers
Some service providers are based outside the EEA or may access data from there. In those cases we ensure an adequate level of protection, through an adequacy decision of the European Commission (for example for the United Kingdom, or for US companies certified under the EU–US Data Privacy Framework) or through the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
7. Retention
We keep personal data only as long as necessary for the purposes above. Account and content data are deleted after your account is closed, generally within 30 days, unless you export them earlier or statutory retention duties apply. Accounting records are kept for seven years as required by Austrian tax law (§ 132 BAO).
8. Security
We protect personal data with appropriate technical and organisational measures, including encrypted transmission (TLS), access controls based on the least-privilege principle, hashed passwords, regular updates and data minimisation by design.
9. Cookies
This website sets no cookies. Our products may use strictly necessary cookies, for example to keep you signed in, which do not require consent. Any other cookies are only set with your consent.
10. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15)
- rectification (Art. 16)
- erasure (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interests (Art. 21)
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))
To exercise your rights, email office@ventura.at. We respond within one month. You also have the right to lodge a complaint with a supervisory authority – in Austria, the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
11. Changes
We update this notice when our processing changes. The current version is always available on this page.
Last updated: October 2026