Privacy Policy

1 Controller & contact

The controller responsible for the processing of personal data described in this Privacy Policy (Art. 4(7) GDPR) is:

For full corporate identification (register number, VAT ID, managing directors) see our Imprint. Any request regarding your personal data can be sent to the contact details above.

2 What data we collect

Data you provide to us

• Contact-form submissions: name, email, phone, company, subject and your message (see Contact).
• Job applications: name, contact details, CV, cover letter, and any attachments you choose to upload (see Careers).
• Any correspondence you send us directly by email or phone.

Data collected automatically

• Server log files: IP address, browser type/version, operating system, referring page, date and time of the request.
• Cookies and similar technologies used for essential site functionality and, where consented to, analytics (see §7).

3 Legal bases (Art. 6 GDPR)

We process personal data only where at least one of the following legal bases applies:

• Consent (Art. 6(1)(a)) — e.g. optional analytics cookies, newsletter sign-up.
• Contract (Art. 6(1)(b)) — e.g. processing a job application or a service inquiry you initiate.
• Legal obligation (Art. 6(1)(c)) — e.g. statutory retention of accounting or tax records.
• Legitimate interest (Art. 6(1)(f)) — e.g. server logs for IT security and abuse prevention, keeping our site and services operational and safe.

4 Purposes of processing

• Responding to inquiries submitted through our contact form.
• Evaluating job applications and speculative applications.
• Operating, securing and improving our website and virtual-employee/Brain-based services.
• Meeting statutory bookkeeping, tax and commercial-register obligations.
• Aggregated, privacy-respecting analytics to understand site usage (only where cookies are consented to).

5 Recipients & processors

We only share personal data where necessary, and always under a data-processing agreement (Art. 28 GDPR) where a third party processes data on our behalf. Categories of recipients include:

• IT hosting and infrastructure providers operating our servers and Brain/knowledge platform.
• Tools used to receive and route contact-form and application submissions.
• Tax advisors, auditors and authorities where legally required.
• Public authorities where we are legally obliged to disclose data (e.g. law-enforcement requests).

We do not sell personal data. Any transfer outside the EU/EEA is safeguarded by adequacy decisions or Standard Contractual Clauses (Art. 44 et seq. GDPR).

6 Retention periods

• Contact-form inquiries: deleted once the matter is resolved, unless a longer period is required for legal defence or statutory record-keeping.
• Job applications: retained for up to 6 months after the hiring decision to allow for follow-up, then deleted, unless you consent to longer retention for future openings.
• Server log files: typically retained for a short rolling period (e.g. up to 30 days) for security purposes.
• Accounting-relevant records: retained for the statutory period under Austrian commercial and tax law (generally 7 years).

7 Cookies & analytics

We use strictly necessary cookies to operate core site functionality (e.g. remembering your cookie choice, keeping the navigation menu working). These do not require consent under Austrian/EU e-privacy rules.

Where used, optional analytics cookies help us understand aggregate traffic and usage patterns. These are only set after you give consent via the cookie banner, and you may withdraw consent at any time with future effect. No cookie data is used to build advertising profiles without a separate, explicit consent.

8 Contact forms & job applications

When you submit our contact form (name, phone, email, company, subject, question) or apply via Careers, the data you provide is used solely to process and respond to your request, in line with the purposes and retention periods above. Providing the fields marked as required is necessary for us to handle your request; without them we cannot respond.

9 Your rights

Under the GDPR you have the following rights regarding your personal data. To exercise any of them, contact us at imprint@magora.com.

You also have the right to lodge a complaint with the competent supervisory authority. In Austria this is the Österreichische Datenschutzbehörde (DSB), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

10 Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements. The "last updated" date at the top of this page indicates the current version. We encourage you to review this page periodically. Continued use of our site after changes take effect constitutes acknowledgement of the updated policy.