Privacy Statement

Information on Data Processing in Accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR)

Protecting your personal data is a key concern for us. Therefore, we process your personal data (hereinafter “data”) exclusively based on legal regulations. This privacy policy aims to comprehensively inform you about the processing of your data within our company and about your data protection rights and claims.

1. Who is Responsible for Data Processing and Whom Can You Contact?

Controller: Agro Innovation Lab GmbH
Address: Raiffeisenstraße 1, 2100 Korneuburg
Phone: +43 (2262) 755 50-2401
Email: office@agroinnolab.com

2. What Data is Processed and Where Does It Originate From?

We process the data that we receive from you as part of initiating and maintaining a business relationship. Additionally, we process data that we lawfully obtain from credit agencies, creditor protection associations, publicly available sources (e.g., commercial register, association register, land register, media), and other companies or warehouse cooperatives with whom we have ongoing business relationships.

Personal data includes:

Your core/contact details:

  • Private customers: First and last name, address, contact details (email, phone, fax), date of birth, identification document data (copy of ID), banking details.
  • Business customers: Company name, commercial register number, VAT number, business number, address, contact person details (email, phone, fax), banking details.

Additional personal data processed:

  • Information on the type and content of our business relationship (e.g., contract data, order data, transaction data, customer and supplier history, advisory documents).
  • Financial status information (e.g., creditworthiness data).
  • Marketing and sales data.
  • Documentation data (e.g., consultation logs), image data.
  • Information from your electronic interactions with us (e.g., IP address, login data).
  • Other data obtained within the scope of our business relationship (e.g., in customer meetings).
  • Data we generate from core/contact details and other data, e.g., through customer demand and potential analyses.

3. For What Purposes and on What Legal Basis is Data Processed?

We process your data in accordance with the provisions of the GDPR and applicable Austrian data protection laws:

  • To fulfill (pre-)contractual obligations (Art. 6(1)(b) GDPR): Processing is carried out for the sale and distribution of our products and services, procurement, logistics, and customer management. Data is processed primarily when initiating or executing contracts with you.
  • To fulfill legal obligations (Art. 6(1)(c) GDPR): Processing is required to meet various legal obligations, e.g., from the Austrian Commercial Code (UGB), the Federal Fiscal Code (BAO), anti-money laundering regulations, and product-specific regulations.
  • To protect legitimate interests (Art. 6(1)(f) GDPR): Processing beyond contract fulfillment occurs for legitimate interests, such as:
    • Credit checks through credit agencies and creditor protection associations.
    • Direct marketing (postal mail or online marketing).
    • Business management and service/product development.
    • Protection against contractual or legal violations (e.g., access controls, video surveillance).
    • Operation and administration of warehouse systems and a central master data system for better customer service and organizational efficiency.
    • Legal enforcement.
  • Based on your consent (Art. 6(1)(a) GDPR): If you have given consent (e.g., to receive our newsletter), processing is carried out only for the specified purposes and within the agreed scope. You can withdraw your consent at any time with future effect.

Contact via Website

If you contact us via our website, we process your personal data (name, email, phone number, inquiry details) to respond to your request. The legal basis is the performance of (pre-)contractual obligations (Art. 6(1)(b) GDPR) and our legitimate interest in handling inquiries efficiently (Art. 6(1)(f) GDPR).

Newsletter Subscription

If you subscribe to our newsletter, we process your name and email address based on your explicit and voluntary consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time, and your data will be deleted from our mailing list immediately.

4. Who Receives Your Data?

We may share your data with:

  • Service providers (data processors): IT service providers, marketing agencies, and security services contractually obligated to process your data only within the agreed scope.
  • Affiliated companies and warehouse cooperatives: With your consent, data may be shared for personalized direct marketing and customer service.
  • Legal authorities and external auditors: If required by law or legitimate interests (e.g., legal proceedings, audits).
  • Credit insurers, credit agencies, and financial institutions: For creditworthiness checks and financial transactions.

5. Is Data Transferred to Third Countries?

We do not transfer your data to third countries unless:

  • There is an adequacy decision by the EU Commission.
  • Standard contractual clauses or other appropriate safeguards are in place.
  • You have given explicit consent.

6. How Long is Your Data Stored?

We process your data until the business relationship ends or statutory retention periods expire (e.g., UGB, BAO). In case of legal disputes, data may be retained as evidence.

7. What Are Your Data Protection Rights?

You have the right to:

  • Access: Request information about the processing of your data.
  • Rectification: Have incorrect or incomplete data corrected.
  • Erasure: Request deletion of unlawfully processed data, subject to statutory obligations.
  • Restriction of processing: Limit the processing of your data under specific conditions.
  • Data portability: Obtain and transfer your data to another controller.
  • Objection: Object to processing based on legitimate interests, including direct marketing.
  • Lodge a complaint: File a complaint with the Austrian Data Protection Authority (Barichgasse 40-42, 1030 Vienna; dsb@dsb.gv.at) or another EU supervisory authority.

8. Final Provisions

We continuously update this privacy policy to reflect changes in our services. The latest version will always be available on our website, and we encourage you to review it periodically.