Privacy Policy
Personal data (hereinafter referred to as “data”) is processed by us only to the extent necessary for the provision of a functional, secure and user-friendly website, including its contents and the services offered through it.
General Information
For the purposes of Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”), processing means any operation or set of operations performed on personal data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, restriction, erasure or destruction.
This Privacy Policy provides information about the type, scope, purpose and legal basis of the processing of personal data in connection with the use of this website.
Controller
The controller responsible for this website for the purposes of data protection law is:
Belorganic e.U.
Janneckgasse 21
1130 Vienna
Austria
Email:
Telephone: +43 1 22 90 500
Contact for Data Protection Matters
Natalia Schindler
Email:
Telephone: +43 1 22 90 500
Rights of Users and Data Subjects
With regard to the processing of personal data, users and data subjects have, subject to the applicable legal requirements, the right:
- to obtain confirmation as to whether personal data concerning them is being processed and to receive information about such processing in accordance with Art. 15 GDPR;
- to request the correction or completion of inaccurate or incomplete personal data in accordance with Art. 16 GDPR;
- to request the erasure of personal data in accordance with Art. 17 GDPR;
- to request restriction of processing in accordance with Art. 18 GDPR;
- to receive personal data provided by them in a structured, commonly used and machine-readable format where the requirements of Art. 20 GDPR are met;
- to object to processing based on Art. 6(1)(f) GDPR in accordance with Art. 21 GDPR;
- to lodge a complaint with a competent data protection supervisory authority in accordance with Art. 77 GDPR.
Where personal data has been disclosed to recipients, we will comply with applicable notification obligations concerning rectification, erasure or restriction of processing.
Information About Data Processing
Personal data processed when using this website will be deleted or restricted once the purpose for which it was collected no longer applies, unless statutory retention obligations, contractual requirements or legitimate security interests require longer storage.
Server Data
For technical and security reasons, information transmitted by the visitor's browser to our web server or hosting provider may be processed.
This may include:
- browser type and browser version;
- operating system;
- referrer URL;
- pages or resources accessed;
- date and time of access;
- IP address;
- other technical information necessary for secure delivery of the website.
This processing is carried out in order to provide a stable and secure website, detect technical problems and prevent misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security, stability and proper functioning of the website.
Server data is retained only for as long as necessary for these purposes and subject to applicable statutory or security-related retention requirements.
Cookies and Technically Necessary Storage
This website may use technically necessary cookies or comparable storage technologies required for the secure and proper operation of the website.
Cookies are small text files or similar information stored by the visitor's browser.
Technically necessary cookies may be used, for example, to maintain a session, provide requested functionality or protect website functions against misuse.
Where such storage is strictly necessary for providing the website or a service explicitly requested by the visitor, it may be used without separate consent to the extent permitted by applicable law.
Visitors can control or delete cookies through their browser settings. Restricting technically necessary cookies may affect the functionality of parts of the website.
If additional analytics, advertising or marketing technologies requiring consent are introduced in the future, they will be subject to the applicable consent requirements and this Privacy Policy will be updated accordingly.
Contact Enquiries and B2B Forms
If you contact us by email or submit information through a contact form, B2B Information Pack request or another business enquiry form on this website, the information you provide will be processed for the purpose of reviewing and responding to your request.
Depending on the form used, the processed information may include:
- name;
- email address;
- company name;
- country or market;
- business or distribution information;
- information about the requested products or cooperation;
- other information voluntarily provided in the enquiry.
We process this information in order to respond to enquiries, evaluate potential business cooperation and, where applicable, take steps prior to entering into a contractual relationship.
The legal basis may include Art. 6(1)(b) GDPR where processing is necessary for pre-contractual measures initiated at your request and Art. 6(1)(f) GDPR where processing is necessary for our legitimate interest in handling business enquiries.
Data submitted through an enquiry will be retained only for as long as necessary to process the enquiry and any resulting business relationship, subject to applicable statutory retention obligations.
Cloudflare Turnstile
This website uses Cloudflare Turnstile to protect forms and other website functions against automated submissions, bots, abuse and malicious activity.
Turnstile is provided by:
Cloudflare, Inc.
101 Townsend St.
San Francisco, CA 94107
USA
When Turnstile is used, technical signals relating to the visitor's browser and connection may be processed. According to Cloudflare, these signals may include the client IP address, TLS fingerprint, User-Agent header, Turnstile sitekey and the associated website origin.
The purpose of this processing is to distinguish legitimate human interaction from automated or malicious activity and to protect the security and availability of the website and its forms.
Cloudflare states that Turnstile does not access, store or transmit the content entered by visitors into website forms.
The legal basis for our use of Turnstile is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting the website, its forms and IT systems against automated misuse and malicious activity.
Further information about the processing of personal data by Cloudflare is available in Cloudflare's Privacy Policy and Turnstile Privacy Addendum.
Google Fonts
This website currently uses fonts provided through Google Fonts for the consistent presentation of website content.
Where fonts are retrieved directly from Google's servers, the visitor's browser establishes a connection to Google infrastructure in order to download the relevant font resources. In connection with this request, technical information such as the visitor's IP address and browser information may be transmitted to Google.
Google Fonts is a service provided by Google.
Further information concerning Google's processing of personal data is available in Google's Privacy Policy.
If the fonts used by this website are subsequently hosted locally on the Belorganic server and no connection to Google Fonts is established, this section will be removed or amended accordingly.
External Links
This website may contain links to external websites, social media profiles and other third-party services.
If a visitor follows such a link, the privacy and data-processing practices of the respective third-party provider apply.
A normal external link does not by itself mean that the external service is embedded in or actively tracking visitors on the Belorganic website.
Data Retention and Deletion
Personal data is retained only for as long as required for the purpose for which it was collected.
Longer retention may apply where required by statutory obligations, contractual requirements, establishment or defence of legal claims, or legitimate security interests.
Once the relevant purpose and any applicable retention requirements cease to apply, personal data will be deleted or otherwise handled in accordance with applicable data protection requirements.
Data Security
We take appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, unauthorised disclosure, unauthorised access or other unauthorised processing.
Website security measures include, where applicable, server-side protections, form validation and automated abuse-prevention and bot-detection mechanisms.
Changes to This Privacy Policy
We may update this Privacy Policy if the website, its functionality, service providers or data-processing practices change.
The version published on this website is the current version.
Last updated: August 2026