Privacy Policy — Arevente & Partner GmbH

Last updated: March 6, 2026

1. Controller / Data Controller

The controller responsible for data processing on this website is: Arevente & Partner GmbH, Franz-Josefs-Kai 41/8, 1010 Wien, Austria, UID-Nummer: ATU68260026, Firmenbuchnummer: FN 403580 a, info@areventepartner.at

2. What Data We Collect and Why

2.1 Registration for the Arevente Circle Member Portal

When you apply for membership, we collect the following data: Full name for membership identification, on the basis of GDPR Art. 6(1)(b) (contract performance).

Email address for account creation and communication, on the basis of GDPR Art. 6(1)(b).

Legal company name for membership verification, on the basis of GDPR Art. 6(1)(b).

Comments for application review, on the basis of GDPR Art. 6(1)(b).

Privacy policy consent (yes/no) as proof of informed consent, on the basis of GDPR Art. 6(1)(a).

Consent timestamp as a GDPR compliance record, on the basis of GDPR Art. 6(1)(c) (legal obligation).

Consent IP address as a GDPR compliance record, on the basis of GDPR Art. 6(1)(c).

2.2 Website Usage

When you visit our website, technical data is automatically logged by our hosting provider easyname GmbH (easyname.at), including your IP address, browser type, pages visited and timestamps. This serves legitimate interests in website security and performance (GDPR Art. 6(1)(f)).

2.3 Email Communication

When we send you transactional emails (registration confirmation, approval notification, password setup), your email address and name are processed solely for the purpose of delivering that communication.

2.4 Contact Forms

When you submit a contact form on our website, we collect your name, email address and the content of your message. This data is processed solely for the purpose of responding to your enquiry, on the basis of GDPR Art. 6(1)(b) (pre-contractual measures) or GDPR Art. 6(1)(f) (legitimate interest in responding to communications). Contact form submissions are retained for 12 months and deleted thereafter unless an ongoing business relationship requires longer retention. We do not use contact form data for marketing purposes or share it with third parties.

3. Member Portal — Private Pages

The Arevente Circle member portal provides each approved member with a private, individually managed personal page. Access is strictly restricted to the individual member. No member can view the personal page, data, documents or content of another member. Access control is technically enforced and monitored.

4.Exclusive Offers and Pricing

Special pricing and exclusive offers displayed within the member portal are visible only to the respective individual member. This information is confidential and intended solely for the named member. Members may not share, reproduce or distribute portal content to third parties.

5. Data Processors — Third Party Services

We use the following third-party services that process personal data on our behalf.

Brevo (Sendinblue) is used for transactional email delivery and is located within the EU. A Data Processing Agreement (DPA) is in place in accordance with GDPR Article 28.

easyname GmbH is used for website and database hosting and is located in Austria, EU. All processors store and process data within the European Union.

6. Data Retention

Member account data is retained for the duration of active membership plus 1 year after termination. GDPR consent records are retained for 7 years in accordance with legal obligations. Email logs are retained for 12 months. Website technical logs are retained for 30 days. After the applicable retention period expires, data is permanently deleted.

7. Your Rights

Under GDPR you have the following rights regarding your personal data. You have the right of access and may request a copy of all data we hold about you. You have the right to rectification and may request correction of inaccurate data. You have the right to erasure and may request deletion of your data (right to be forgotten). You have the right to restriction and may request we limit processing of your data. You have the right to data portability and may request your data in a structured, machine-readable format. You have the right to object to processing based on legitimate interests. You have the right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To exercise any of these rights, please contact us at info@areventepartner.at. We will respond within 30 days in accordance with GDPR Article 12.

8. Cookies

Our website uses cookies necessary for technical operation (session management, login functionality). Where non-essential cookies are used, your prior consent is obtained via our cookie consent banner. For a full breakdown of cookies used on this website, please refer to our Cookie Policy.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. These include encrypted data transmission (SSL/TLS), an access-restricted member portal with individual authentication, regular security reviews of our systems, and hosting within the European Union via easyname GmbH, Austria.

10. Supervisory Authority

You have the right to lodge a complaint with the Austrian data protection authority: Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, Austria, www.dsb.gv.at

11. Changes to This Policy

We reserve the right to update this Privacy Policy to reflect changes in our processing activities or legal requirements. The current version is always available on this page. Registered members will be notified of material changes by email.