LEGAL
Information about this website, contact enquiries and your rights.
Last updated: 20 October 2026
This notice covers the PEMA Holding website and communications initiated through it. The controller is PEMA Holding GmbH, Herzog-Friedrich-Straße 10, 6020 Innsbruck, Austria. For privacy enquiries, contact office@pema.at. The principal applicable laws are the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).
Wix provides the website and its forms. Visits involve processing technical connection data, including IP address, time, requested address and browser and device information. This enables content delivery, secure operation and investigation of errors or abuse. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in maintaining an available and secure website.
Wix.com Ltd., Israel, acts as a processor for visitor data used to provide these services. See the Wix Data Processing Addendum and sub-processor list for the contractual framework and service providers.
When you contact us by form or email, we process your name, email address and message. The form also transmits the selected enquiry topic and language. Submissions are stored in Wix Forms and a notification is sent to office@pema.at. We use these details to assign, answer and handle your enquiry.
Article 6(1)(b) GDPR applies to enquiries concerning your own contract or steps before entering into a contract. Other enquiries, including those on behalf of a business, are processed under Article 6(1)(f) GDPR for our legitimate interest in business communication. Form fields marked * are required to submit the form. Without sufficient contact and enquiry details, we may be unable to respond or may only provide a limited response. There is no legal obligation to use the form.
The “Careers” topic in the contact form is intended for initial professional enquiries. We process your details to respond and discuss a potential role, relying on Article 6(1)(b) GDPR when taking specific steps towards your own employment contract. Other initial professional enquiries rely on Article 6(1)(f) GDPR for our legitimate interest in responding. Please do not submit health data or other specially protected information through this general form. Any subsequent recruitment process is subject to the relevant employer’s additional privacy information.
The appointment link on the digital business card opens Calendly only when clicked; no booking calendar is embedded here. If you book, we process your contact details, appointment and any optional meeting information to organise and conduct the meeting. The legal basis is Article 6(1)(b) GDPR where this relates to a contract, otherwise Article 6(1)(f) GDPR for our legitimate interest in arranging meetings.
Calendly, LLC, USA, provides the booking service. Its data processing addendum governs processing on our behalf; its Privacy Notice applies to its own processing. You can alternatively arrange appointments directly with us by email.
The website language is determined by the page address. The digital business card stores the selected language for the session. Some navigation preferences are also stored for the browser session. The form connection may store a technical Wix visitor identifier and access tokens locally; these can be removed by clearing website data. This is separate from analysis by Plausible.
Storage strictly necessary to provide a function you expressly request is subject to the exemption in section 165(3) TKG 2021. Processing personal data for operation and security relies on Article 6(1)(f) GDPR. Storage of or access to information on your device that is not strictly necessary generally requires your prior consent. Accordingly, “Plausible uses no cookies” does not mean that all technical services on this website operate without browser storage.
We plan to use Plausible Analytics, provided by Plausible Insights OÜ, Estonia, in its standard cookieless configuration. Plausible is not yet enabled in this website version, so no analytics data is currently sent to Plausible.
The planned page and event statistics use no cookies, local storage or persistent visitor identifiers. According to the provider, raw IP addresses are not stored and visitor data is processed in the EU. Names, email addresses and form contents are not intended to be transmitted. This notice will be aligned with the actual configuration before activation. Further information: Plausible Data Policy.
Access is limited to the people handling your enquiry and the necessary IT, hosting, form and email service providers. Form enquiries on this website initially go to PEMA Holding. Any disclosure to another PEMA company must relate to your enquiry and have an appropriate legal basis; group membership alone does not permit unrestricted sharing.
Wix and, if used, Calendly may process data outside the European Economic Area. Wix relies on the European Commission’s adequacy decision for transfers to Israel; onward transfers are safeguarded under the relevant processing agreement, in particular through EU Standard Contractual Clauses. Contact office@pema.at for information about the safeguards applicable to a specific processing activity and how to obtain them.
The key deletion criterion for contact and form data is completion of your enquiry. If cooperation follows, necessary details are processed for its duration. Statutory retention obligations or the necessary protection of specific legal claims may justify retaining individual records longer; these exceptions do not apply indiscriminately to all messages. Both Wix form records and email correspondence must be covered.
Appointment details are retained for scheduling, conducting and necessary follow-up of meetings. The necessary retention of technical operation and security data depends on error analysis, abuse detection and, where relevant, investigation of a specific incident. There is no single fixed period for all data.
References to social networks, media and other websites are links. If you follow a link, the destination provider’s privacy information applies. Clicking a link is not blanket consent to further processing. You can independently use the listed email addresses to contact PEMA.
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. You may withdraw consent at any time for the future without affecting the lawfulness of processing before withdrawal. Please contact office@pema.at.
You may complain to the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, dsb.gv.at. The website’s contact forms do not make solely automated decisions producing legal or similarly significant effects.