Privacy policy

1. Controller

The controller responsible for data processing on olento.at is Ceraflex® GmbH, Grossendorf 113, 4551 Ried im Traunkreis, Austria (managing directors: Andreas Schreitel, Florian Bernsteiner). No data protection officer has been appointed. For questions about data protection, contact us at hey@olento.at.

2. Overview

You can use this website without telling us anything about yourself. We only process personal data

• technically when pages are requested (server logs, section 3),
• for anonymous visitor statistics without cookies and, only with your consent, for more detailed analytics (section 5),
• when you send us an enquiry or a question, sign up for the newsletter or write to us (sections 6 to 9).

We do not sell data and do not use advertising or marketing trackers. Fonts, images and videos are served from our own domain; no content is loaded from third parties when you visit the website.

3. Hosting and server logs

The website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA), which delivers it through a worldwide server network. Every request produces technically necessary log data: IP address, date and time, requested address, referrer, browser identifier (user agent) and status codes. We use this data only to keep the website secure and stable and to fix errors; Vercel deletes it automatically after one day.

The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

4. Cookies and local storage

Without your consent, we only store on your device what the website needs to work or what you have chosen as a setting:

• Cookie “olento-locale”: the language you explicitly chose in the language switcher, so that you land directly in that language on your next visit. It is only set when you switch the language and expires after one year.
• Local storage “olento-analytics-consent”: your choice in the privacy banner, so we don’t ask again on every visit.
• Local storage “olento-language-choice”: that you switched the language or closed the language notice, so the notice doesn’t appear again.

The local storage entries remain until you delete them in your browser. Legal basis: § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021; strictly necessary or explicitly requested by you) and Art. 6(1)(f) GDPR.

Only if you click “Accept” in the banner does PostHog also store a cookie (“ph_…_posthog”, valid for one year) and entries in local storage (see section 5).

5. Visitor statistics and analytics (PostHog)

To understand how the website is used and to improve it, we use PostHog (PostHog Inc., 2261 Market St. #4008, San Francisco, CA 94114, USA). The data is stored in PostHog’s EU cloud in Frankfurt am Main, Germany. All requests go through our own domain (olento.at/ingest) and are forwarded to PostHog from there. If your browser sends “Do Not Track”, we record nothing.

Without consent (default)

PostHog runs in cookieless mode: no cookies are set and nothing is stored on your device. We record pages viewed, time on page, general device and browser information and selected events, such as the fact that an enquiry was sent (without its content). To count visits, PostHog derives a value from your IP address and browser identifier that changes every day; the IP address itself is not stored. This means you cannot be recognised across several days. Legal basis: our legitimate interest in data-minimising visitor statistics (Art. 6(1)(f) GDPR).

With consent

If you click “Accept” in the banner, PostHog recognises your browser on later visits through a cookie and local storage and records how you use the website: clicks, scrolling (heatmaps) and session recordings, i.e. a replay of the page view with mouse movements and clicks. Anything typed into form fields is always hidden in recordings, and the enquiry form is excluded entirely. Legal basis: your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021).

You can withdraw your consent at any time via “Cookie settings” in the footer; PostHog then runs cookieless again. Processing carried out before the withdrawal remains lawful. Retention: usage data is deleted after one year, session recordings after 30 days.

6. Enquiries through the enquiry form

When you send a non-binding enquiry via “Get in Touch”, we process:

• your name, email address and country (required),
• your message and your choice of table and size (optional),
• the language in which you use the website.

We use this data to answer your enquiry. You receive a confirmation by email and our team receives a notification. The enquiry is stored in our database and in our customer management system (CRM) (see section 10).

Q-Olento is sold internationally through our exclusive distribution partner Qookingtable (Qookingtable BV, Koningin Astridlaan 14, 3290 Diest, Belgium, company number BE0653.974.493). With your consent in the form, we pass your enquiry on to Qookingtable. Qookingtable handles it under its own responsibility and may pass it on to the dealer or partner responsible for your region.

Legal bases: taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and, for passing your enquiry on to Qookingtable, your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by emailing hey@olento.at. We cannot handle your enquiry without the required details.

Retention: there is currently no fixed deletion period for enquiries. We keep them as long as we need them to handle your enquiry and look after you, and delete them at your request unless statutory retention obligations apply. This also applies to sections 7 and 9.

7. Questions through the FAQ form

Via “Write to us” on the FAQ page, we process your name, email address, your message and, if you provide it, your phone number. Processing is as described in section 6 (confirmation email, notification to our team, storage in database and CRM), but without passing anything on to Qookingtable. Legal basis: Art. 6(1)(b) GDPR or our legitimate interest in answering your question (Art. 6(1)(f) GDPR).

8. Newsletter

In the enquiry form and the FAQ form, you can choose to tick a box to hear about news, offers and events. We then store your email address, your name and, if provided, your country with the newsletter service MailerLite (UAB “MailerLite”, J. Basanavičiaus 15, 03108 Vilnius, Lithuania) and record your consent in our CRM. Your signup only takes effect once you confirm it via the link in our confirmation email (double opt-in); we store the time of signup and confirmation as proof of your consent.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 174 TKG 2021). You can unsubscribe at any time via the link in every newsletter or by emailing hey@olento.at. We keep your newsletter data until you unsubscribe.

9. Contact by email

If you write to us directly at hey@olento.at, we process your email address and the content of your message to reply to you. Our mailbox is hosted by SiteGround (SiteGround Spain S.L., Calle de Prim 19, 28004 Madrid, Spain). Legal basis: Art. 6(1)(b) or (f) GDPR.

10. Service providers and recipients

For the purposes described above, we use the following service providers as processors, each under a contract pursuant to Art. 28 GDPR:

• Vercel Inc., USA: hosting and delivery of the website, server logs
• Neon Inc., USA: database for enquiries, servers in Frankfurt am Main
• Mailgun Technologies, Inc., USA: sending confirmation and notification emails via servers in the EU
• SiteGround Spain S.L., Spain: email mailbox hey@olento.at
• Attio Ltd., London, United Kingdom: customer management (CRM) for enquiries
• UAB “MailerLite”, Lithuania: newsletter
• PostHog Inc., USA: visitor statistics and analytics, data stored in the EU (Frankfurt am Main)

Qookingtable BV (Diest, Belgium), as our distribution partner, is also an independent recipient of enquiries (section 6). Other parties only receive your data if we are legally required to disclose it.

11. Transfers to third countries

Some service providers are based in the USA or the United Kingdom. For the United Kingdom, there is an adequacy decision by the European Commission. Where data is transferred to the USA or US providers can access it, this is based on the EU-US Data Privacy Framework, under which all US providers named above are certified (Art. 45 GDPR), and additionally on EU standard contractual clauses (Art. 46 GDPR).

12. Your rights

You have the right to

• access the data we hold about you (Art. 15 GDPR),
• rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on our legitimate interest (Art. 21 GDPR),
• withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR).

To do so, write to us at hey@olento.at. You can also lodge a complaint with a data protection supervisory authority; in Austria, this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna (www.dsb.gv.at).

We do not use automated decision-making, including profiling (Art. 22 GDPR).

13. Data security

The website is only available over an encrypted connection (HTTPS). We and our service providers protect your data with technical and organisational measures in line with the state of the art.

14. Changes

We update this privacy policy when the website or the services we use change. The version published here applies.

Last updated: 25 September 2026