Privacy Policy

Last updated: January 28, 2026

1. Introduction

ValuSpect ("we," "us," "our," or "Company") is committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Austrian Data Protection Act (Datenschutzgesetz - DSG), and other applicable EU and Austrian data protection laws. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. We are based in Vienna, Austria and act as a data controller for the personal data we process.

2. Legal Basis for Processing

We process data only on legal bases permitted by the GDPR and Austrian DSG, including:

  • Contractual necessity: Processing necessary to perform our services agreement with you
  • Legal obligations: Compliance with applicable laws and regulations
  • Legitimate interests: Our business interests in maintaining and improving services, with your rights protected
  • Consent: Where you have explicitly consented to specific processing activities

3. Information We Collect

We may collect information about you in the following categories:

  • Personal Data: Name, email address, phone number, company information, job title, and other details you provide directly to us.
  • Business Data: Savings measures, forecasts, actuals, and other business information you input into the platform.
  • Usage Data: Log files, IP addresses, browser type, pages visited, and access times.
  • Cookies and Tracking: Information stored via cookies and similar tracking technologies, subject to your consent.

4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process and fulfill your requests and transactions
  • Send service-related announcements and updates
  • Respond to your inquiries and provide customer support
  • Conduct analytics to understand usage patterns and improve our platform
  • Send marketing communications (only with your prior consent, which can be withdrawn at any time)
  • Comply with legal obligations, court orders, and regulatory requirements
  • Prevent fraud, abuse, and security threats
  • Protect and enforce our legal rights and those of our users

5. Data Retention

We retain personal data only for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy, or as required by Austrian or EU law. Retention periods vary depending on the type of data and the purpose of processing:

  • Account and contact information: For the duration of your account and 3 years after account closure
  • Transaction records: As required by Austrian tax law (7 years)
  • Marketing communications: Until you withdraw consent or object
  • Usage logs and analytics data: Typically 12 months

You may request deletion of your personal data at any time by contacting us, subject to legal retention requirements and our legitimate business interests. We will respond to deletion requests within 30 days in accordance with GDPR Article 17.

6. Security and Data Protection

We implement appropriate technical and organizational measures to protect your personal data against unauthorized processing, loss, destruction, and accidental damage, in accordance with GDPR Article 32 and Austrian DSG requirements. These measures include:

  • End-to-end encryption for data in transit (TLS 1.2+)
  • Encryption of data at rest using industry-standard algorithms
  • Regular security audits and penetration testing
  • Access controls and role-based permissions
  • Comprehensive audit logging and monitoring
  • Employee training on data protection obligations
  • Incident response procedures

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security and recommend that you use strong passwords and keep your login credentials confidential.

7. Third-Party Links and Processors

Our website may contain links to third-party websites. We are not responsible for the privacy practices of other sites and encourage you to review their privacy policies. When we use third-party service providers for data processing (e.g., hosting, analytics, payment processing), we ensure they enter into Data Processing Agreements (DPAs) in accordance with GDPR Article 28, obligating them to process data only on our instructions and maintain appropriate security measures.

8. Your Rights Under GDPR and Austrian Law

Under the GDPR and Austrian Data Protection Act, you have the following rights:

  • Right of Access (Article 15): You have the right to request access to your personal data and receive a copy of what we hold about you.
  • Right to Rectification (Article 16): You can request correction of inaccurate or incomplete personal data.
  • Right to Erasure (Article 17): You can request deletion of your personal data, subject to certain legal constraints.
  • Right to Restrict Processing (Article 18): You can request that we limit how we process your data.
  • Right to Data Portability (Article 20): You can request a copy of your data in a structured, commonly used format for transfer to another provider.
  • Right to Object (Article 21): You can object to processing for direct marketing and certain other purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde) if you believe we have violated your rights.

To exercise any of these rights, please contact us at the details provided below. We will respond to requests within 30 days or provide notice if we need additional time.

9. Contact and Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise any of your rights, or have concerns about our data processing practices, please contact us at:

ValuSpect
Vienna, Austria
Email: [email protected]
Data Protection Inquiry Email: [email protected]

For complaints regarding our data processing, you may also contact the Austrian Data Protection Authority (Österreichische Datenschutzbehörde) at www.dsb.gv.at.

10. International Data Transfers

As a company based in Austria (EU), we primarily process personal data within the EU/EEA, which provides adequate data protection under GDPR. If we transfer data outside the EU/EEA, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) in accordance with GDPR Chapter 5.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the revised policy on our website and updating the "Last updated" date. Your continued use of our services after such changes constitutes your acceptance of the updated Privacy Policy.