Privacy Policy
Last updated: 16 September 2026
This Privacy Policy explains how ExtruWerk e.U. processes personal data when you visit this website or contact us about our business-to-business additive manufacturing, print-on-demand and fulfilment services. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the applicable Austrian Telecommunications Act (TKG 2021).
1. Controller
2. Data We Process and Why
Website access and server logs
When you access this website, our hosting and security systems may automatically process your IP address, date and time of access, requested URL, referrer URL, browser and operating-system information, transferred data volume and technical status information. This is necessary to deliver the website, maintain stability, detect misuse and protect our systems. The legal basis is our legitimate interest under Article 6(1)(f) GDPR in providing a secure and reliable website.
Business enquiries and project communication
If you contact us by email or through our enquiry form, we process the information you provide, such as your name, company, contact details, project files, CAD data, specifications and correspondence. We use this information to respond to your enquiry, assess technical feasibility, prepare quotations, take pre-contractual steps and manage an existing business relationship. The legal bases are Article 6(1)(b) GDPR and, for general business communication and documentation, our legitimate interests under Article 6(1)(f) GDPR.
Our enquiry form requires your name, email address and message. We use Brevo to deliver these enquiries to our business mailbox. Brevo processes the message content and email delivery data for this purpose. Submitting an enquiry does not subscribe you to marketing emails. Our website email delivery logs are configured for automatic deletion after 14 days; correspondence in our mailbox follows the retention periods described below. See Brevo’s privacy information.
Security and anti-spam
We use technical security and anti-spam measures to protect the website and administrative access. These systems may process IP addresses, request metadata and indicators of malicious activity. The legal basis is Article 6(1)(f) GDPR. Security logs are accessed only where required for protection, troubleshooting or incident investigation.
The enquiry form uses Cloudflare Turnstile to distinguish human visitors from automated abuse. This connects your browser to Cloudflare, which processes technical browser and network information for verification. You can also contact us directly by email. See Cloudflare’s privacy policy and Turnstile privacy addendum.
3. Cookies and Consent
This website may use technically necessary cookies or similar storage required for core functions, security and your consent preferences. Where non-essential services are used, they are activated only with your consent under Article 6(1)(a) GDPR and Section 165(3) TKG 2021. You can change or withdraw your consent at any time through Cookie Settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
4. External Links
Our website may link to external services, including YouTube. No data is sent by us to those services merely because a link is displayed. If you follow an external link, the destination provider processes data under its own privacy information. We are not responsible for the content or privacy practices of third-party websites.
5. Recipients and Processors
Where necessary, personal data may be disclosed to service providers acting on our behalf, particularly hosting, website administration, IT security, email and communications providers, as well as professional advisers. Data may also be disclosed to public authorities or courts where required by law. Processors are engaged under Article 28 GDPR and receive only the data required for their tasks.
6. International Transfers
If a service provider processes personal data outside the European Economic Area, we use an appropriate transfer mechanism where required, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards where appropriate.
7. Retention
We retain personal data only for as long as necessary for the relevant purpose. Server and security logs are normally deleted or anonymised when they are no longer required for operation or security, unless an incident requires longer retention. Enquiry and project correspondence is retained for the duration of the relationship and, where applicable, for statutory limitation, accounting and record-retention periods. Data processed on the basis of consent is retained until consent is withdrawn or the purpose has been fulfilled, unless a longer retention period is required by law.
8. Your Rights
Subject to the legal conditions, you have the right to access, rectify, erase or restrict processing of your personal data, to data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time. To exercise your rights, contact hello@extruwerk.com. We may request appropriate proof of identity. You also have the right to lodge a complaint with the Austrian supervisory authority:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
Barichgasse 40-42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
9. Automated Decision-Making
We do not use personal data collected through this website for automated decision-making or profiling that produces legal or similarly significant effects.
10. Changes to This Policy
We may update this Privacy Policy when our services, website technology or legal requirements change. The current version and update date are published on this page.