Privacy Policy

This English text is a translation of the German original. In the event of any discrepancy between the two versions, the German version at drunomics.com/datenschutzerklaerung prevails.

We have prepared this privacy policy (as of September 2026) to explain to you, in accordance with the requirements of the General Data Protection Regulation (EU) 2016/679 and applicable national laws, which personal data we process.

drunomics GmbH
Donau-City-Straße 1/12.OG
1220 Vienna
Austria

Email: office@drunomics.com
Telephone: +43 (0) 1 - 364 93 19

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority is:

Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
https://www.dsb.gv.at/

Our website uses cookies. These are small text files stored on your device by your browser.

We distinguish between:

Necessary cookies. These cookies are required to operate the website and cannot be disabled. They store your cookie settings, for example.

Analytics cookies. These cookies help us understand how visitors use our website.

Advertising cookies. These cookies enable personalised advertising and conversion tracking.

Without your consent we set necessary cookies only. Every service described in the sections below is loaded only after you have agreed to it in the cookie banner. You can change your settings at any time via the cookie banner and withdraw consent with effect for the future.

Cookies used

When the HubSpot scripts load, their content delivery network additionally sets a cookie named __cf_bm on the HubSpot domains. It is used for bot detection and expires after 30 minutes.

We measure the reach of our website with Plausible Analytics, an open source web analytics application. We run Plausible on our own infrastructure at pl.mossbo.cloud. The data is therefore not transmitted to the vendor or to any other analytics provider.

Plausible sets no cookies and stores no personal data. Only aggregated, anonymous data is recorded:

• Page views
• Referral sources
• Browser and operating system
• Device type
• Approximate location (country or region)
• Clicks on outbound links

Your IP address is not stored. Instead, Plausible generates a hash that rotates daily and cannot be traced back to you.

Because no information is stored on or read from your device and no personal data is created, this measurement does not require consent and is listed as necessary in the cookie banner.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in privacy-preserving audience measurement)

We use Google Analytics 4 provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

Google Analytics collects data about your use of our website:

• IP address (truncated)
• Pages visited and time spent
• Browser and operating system
• Device type and screen resolution
• Referral source

The data is stored on Google servers, including in the USA. Event data is retained for at most 14 months.

Legal basis: Art. 6(1)(a) GDPR (consent)

Data is transferred to the USA on the basis of the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework (adequacy decision of 10 July 2023).

More information: https://policies.google.com/privacy

We use Google Tag Manager provided by Google Ireland Limited.

Google Tag Manager is a management tool for other services. The Tag Manager itself:

• sets no cookies
• stores no personal data
• performs no analysis of its own

It loads only those services you have consented to. How each of those services processes data is described in the corresponding section of this policy.

Legal basis: Art. 6(1)(a) GDPR (consent)

More information: https://marketingplatform.google.com/about/tag-manager/

We use Google Ads provided by Google Ireland Limited for advertising and conversion tracking.

If you click one of our Google ads, a cookie is set. If you then visit our website, we can measure whether the ad led to an action, for example a contact request.

Data processed:

• IP address (truncated)
• Browser information
• Time of the visit
• Actions performed (conversions)

We do not receive personal data from this, only aggregated statistics.

Legal basis: Art. 6(1)(a) GDPR (consent)

Data is transferred to the USA on the basis of the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework.

More information: https://policies.google.com/privacy

We use HubSpot, a marketing and customer relationship platform provided by HubSpot Ireland Limited (Ireland). Our instance runs on HubSpot's EU infrastructure.

HubSpot records how you use our website and links that use to contacts in our CRM once you provide us with your details, for example through a form:

• IP address
• Pages visited, time and sequence of page views
• Referral source
• Browser and device information
• Information you enter into forms

For this purpose HubSpot sets the cookies listed in the table above. A transfer to HubSpot, Inc. in the USA cannot be ruled out.

Legal basis: Art. 6(1)(a) GDPR (consent)

Data is transferred to the USA on the basis of the European Commission's Standard Contractual Clauses.

More information: https://legal.hubspot.com/privacy-policy

We use Leadinfo, a service provided by Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands.

Leadinfo matches the IP address of your visit against a database of company records and tells us which company has visited our website. The service targets companies rather than private individuals; according to Leadinfo, IP addresses assigned to residential connections are filtered out.

Data processed:

• IP address
• Pages visited and time spent
• Referral source
• Browser and device information

We do not receive any information about you as an individual from this, only a company profile drawn from publicly available sources.

Legal basis: Art. 6(1)(a) GDPR (consent)

More information: https://www.leadinfo.com/en/privacy-statement/

We use Google reCAPTCHA to protect our forms against automated submissions. Since 2 April 2026 Google Ireland Limited acts as our processor and handles the data solely for this purpose.

reCAPTCHA evaluates your behaviour to distinguish human input from automated input:

• IP address
• Mouse movements and keyboard input
• Time spent on the page
• Browser and device information

This data is transmitted to Google servers and may reach the USA in the process.

Legal basis: Art. 6(1)(a) GDPR (consent)

Data is transferred to the USA on the basis of the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework.

In some articles we embed videos from YouTube, a service provided by Google Ireland Limited.

These videos are not loaded automatically. You first see a placeholder only. The video is loaded from YouTube only after you explicitly agree at that placeholder. Until you do, no data is transmitted to YouTube and no cookies are set.

Once you agree and the video loads, the following data is transmitted to YouTube and Google:

• IP address
• The page containing the embedded video
• Browser and device information
• If you are signed in to a Google account: the association with your profile

Legal basis: Art. 6(1)(a) GDPR (consent)

Data is transferred to the USA on the basis of the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework.

More information: https://policies.google.com/privacy

If you contact us by form or email, we store the information you provide in order to handle your enquiry. We do not pass this data on without your consent.

Storage period: 5 years (statutory retention obligations)

Legal basis: Art. 6(1)(b) GDPR (performance of a contract), Art. 6(1)(f) GDPR (legitimate interest)

Our website is hosted by an external service provider in a data centre in Germany. In front of it we use the content delivery network of BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia. A content delivery network speeds up delivery by caching content in a data centre near you; it does not operate the website, it delivers it. Both companies act as our processors.

When you visit the website, the following data is automatically recorded in server log files:

• IP address
• Date and time of access
• Page requested
• Browser and operating system

This data is technically necessary for the secure and stable operation of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

This website uses SSL encryption, recognisable by the padlock symbol and by "https". Data is therefore transmitted in encrypted form between your browser and our server.

We reserve the right to amend this privacy policy in order to reflect changes in the law or changes to our services.

As of: September 2026