[{"data":1,"prerenderedAt":627},["ShallowReactive",2],{"legal-routes:en":3,"content-page:legal:hDLvdmly9Y-gAP69tXB0bMzWB-XUTvRowKQnM5ja-Xk":8},{"privacy":4,"imprint":5,"terms":6,"customer-privacy":7},"\u002Fen\u002Fprivacy","\u002Fen\u002Fimprint","\u002Fen\u002Fterms","\u002Fen\u002Fcustomer-privacy",{"title":9,"description":10,"legalType":11,"updated":12,"body":13,"type":606,"id":607,"canonicalKey":608,"draft":609,"partial":609,"locale":610,"collection":611,"navigationFile":609,"file":612,"route":617,"resolution":624},"Privacy notice for prospects and clients","Information about how Lupinum OG processes personal data during proposals, client relationships and project delivery.","customer-privacy","2026-03-16",{"type":14,"children":15,"toc":585},"root",[16,25,31,44,50,75,108,114,119,149,155,160,193,198,204,209,214,220,225,251,256,286,292,303,308,328,334,345,350,380,386,397,402,421,427,432,437,456,477,483,488,494,499,504,510,515,521,526,536,542,547,574,580],{"type":17,"tag":18,"props":19,"children":21},"element","h2",{"id":20},"scope",[22],{"type":23,"value":24},"text","Scope",{"type":17,"tag":26,"props":27,"children":28},"p",{},[29],{"type":23,"value":30},"This notice applies to personal data processed during our proposal, client and project workflows. It particularly concerns prospects, client contacts, project participants and other people whose data is processed in connection with a business relationship with Lupinum OG.",{"type":17,"tag":26,"props":32,"children":33},{},[34,36,42],{"type":23,"value":35},"It supplements our ",{"type":17,"tag":37,"props":38,"children":39},"a",{"href":4},[40],{"type":23,"value":41},"website privacy policy",{"type":23,"value":43},".",{"type":17,"tag":18,"props":45,"children":47},{"id":46},"controller",[48],{"type":23,"value":49},"Controller",{"type":17,"tag":26,"props":51,"children":52},{},[53,59,63,65,68,70,73],{"type":17,"tag":54,"props":55,"children":56},"strong",{},[57],{"type":23,"value":58},"Lupinum OG",{"type":17,"tag":60,"props":61,"children":62},"br",{},[],{"type":23,"value":64},"Innerzaun 26\u002F1",{"type":17,"tag":60,"props":66,"children":67},{},[],{"type":23,"value":69},"3321 Kollmitzberg",{"type":17,"tag":60,"props":71,"children":72},{},[],{"type":23,"value":74},"Austria",{"type":17,"tag":26,"props":76,"children":77},{},[78,80,86,89,91,97,100,102],{"type":23,"value":79},"Phone: ",{"type":17,"tag":37,"props":81,"children":83},{"href":82},"tel:+4368120303240",[84],{"type":23,"value":85},"+43 681 20303240",{"type":17,"tag":60,"props":87,"children":88},{},[],{"type":23,"value":90},"Email: ",{"type":17,"tag":37,"props":92,"children":94},{"href":93},"mailto:info@lupinum.com",[95],{"type":23,"value":96},"info@lupinum.com",{"type":17,"tag":60,"props":98,"children":99},{},[],{"type":23,"value":101},"Website: ",{"type":17,"tag":37,"props":103,"children":105},{"href":104},"https:\u002F\u002Fwww.lupinum.com",[106],{"type":23,"value":107},"www.lupinum.com",{"type":17,"tag":18,"props":109,"children":111},{"id":110},"categories-of-data",[112],{"type":23,"value":113},"Categories of data",{"type":17,"tag":26,"props":115,"children":116},{},[117],{"type":23,"value":118},"Depending on the engagement, we may process:",{"type":17,"tag":120,"props":121,"children":122},"ul",{},[123,129,134,139,144],{"type":17,"tag":124,"props":125,"children":126},"li",{},[127],{"type":23,"value":128},"identity and contact data such as name, company, role, email address, telephone number and billing information",{"type":17,"tag":124,"props":130,"children":131},{},[132],{"type":23,"value":133},"communications from emails, calls, meetings, forms, questionnaires, chats and other coordination",{"type":17,"tag":124,"props":135,"children":136},{},[137],{"type":23,"value":138},"project and service data such as briefs, requirements, content, access details, approvals, tickets, schedules, documentation and technical information",{"type":17,"tag":124,"props":140,"children":141},{},[142],{"type":23,"value":143},"contractual and billing data such as proposals, orders, invoices, payment information and records",{"type":17,"tag":124,"props":145,"children":146},{},[147],{"type":23,"value":148},"usage and metadata generated by the tools used in the relevant workflow",{"type":17,"tag":18,"props":150,"children":152},{"id":151},"purposes-and-legal-bases",[153],{"type":23,"value":154},"Purposes and legal bases",{"type":17,"tag":26,"props":156,"children":157},{},[158],{"type":23,"value":159},"We process this data to:",{"type":17,"tag":120,"props":161,"children":162},{},[163,168,173,178,183,188],{"type":17,"tag":124,"props":164,"children":165},{},[166],{"type":23,"value":167},"respond to enquiries and conduct introductory conversations",{"type":17,"tag":124,"props":169,"children":170},{},[171],{"type":23,"value":172},"prepare and follow up proposals",{"type":17,"tag":124,"props":174,"children":175},{},[176],{"type":23,"value":177},"take pre-contractual steps, perform contracts and deliver projects",{"type":17,"tag":124,"props":179,"children":180},{},[181],{"type":23,"value":182},"document communications, decisions and work results",{"type":17,"tag":124,"props":184,"children":185},{},[186],{"type":23,"value":187},"develop, provide and maintain client projects",{"type":17,"tag":124,"props":189,"children":190},{},[191],{"type":23,"value":192},"comply with legal obligations, particularly company and tax law",{"type":17,"tag":26,"props":194,"children":195},{},[196],{"type":23,"value":197},"Depending on the context, processing is based on Article 6(1)(b) GDPR where necessary for pre-contractual steps or contract performance, and Article 6(1)(f) GDPR for the efficient, traceable and secure organisation of our business and project processes.",{"type":17,"tag":18,"props":199,"children":201},{"id":200},"proposals-and-communications",[202],{"type":23,"value":203},"Proposals and communications",{"type":17,"tag":26,"props":205,"children":206},{},[207],{"type":23,"value":208},"When you contact us, complete a proposal questionnaire or send project documents, we process the information to understand your project, communicate with you and prepare a potential engagement.",{"type":17,"tag":26,"props":210,"children":211},{},[212],{"type":23,"value":213},"Where necessary, information from enquiries, questionnaires, emails or conversations is transferred to our internal systems so that we can document and continue handling the matter.",{"type":17,"tag":18,"props":215,"children":217},{"id":216},"communication-channels",[218],{"type":23,"value":219},"Communication channels",{"type":17,"tag":26,"props":221,"children":222},{},[223],{"type":23,"value":224},"Depending on the context, we use email, telephone, video calls, messengers and project collaboration platforms. Contact details, communication content, metadata, appointment information, attachments and project documents may be processed through those channels.",{"type":17,"tag":26,"props":226,"children":227},{},[228,230,235,237,242,244,249],{"type":23,"value":229},"We use ",{"type":17,"tag":54,"props":231,"children":232},{},[233],{"type":23,"value":234},"ALL-INKL",{"type":23,"value":236}," for email infrastructure, ",{"type":17,"tag":54,"props":238,"children":239},{},[240],{"type":23,"value":241},"Slack",{"type":23,"value":243}," for internal and shared project communication and, in individual cases, ",{"type":17,"tag":54,"props":245,"children":246},{},[247],{"type":23,"value":248},"WhatsApp",{"type":23,"value":250}," for direct client communication. Processing is based on Article 6(1)(b) GDPR and our legitimate interest under Article 6(1)(f) GDPR in practical, traceable and efficient business communication.",{"type":17,"tag":26,"props":252,"children":253},{},[254],{"type":23,"value":255},"When you contact us through WhatsApp, personal data may also be processed by companies in the Meta group. This communication channel is voluntary. The provider's own privacy information also applies.",{"type":17,"tag":120,"props":257,"children":258},{},[259,268,277],{"type":17,"tag":124,"props":260,"children":261},{},[262],{"type":17,"tag":37,"props":263,"children":265},{"href":264},"https:\u002F\u002Fall-inkl.com\u002Fdatenschutzinformationen",[266],{"type":23,"value":267},"ALL-INKL privacy information",{"type":17,"tag":124,"props":269,"children":270},{},[271],{"type":17,"tag":37,"props":272,"children":274},{"href":273},"https:\u002F\u002Fslack.com\u002Fprivacy-policy",[275],{"type":23,"value":276},"Slack Privacy Policy",{"type":17,"tag":124,"props":278,"children":279},{},[280],{"type":17,"tag":37,"props":281,"children":283},{"href":282},"https:\u002F\u002Fwww.whatsapp.com\u002Flegal\u002Fprivacy-policy-eea",[284],{"type":23,"value":285},"WhatsApp Privacy Policy",{"type":17,"tag":18,"props":287,"children":289},{"id":288},"close-crm",[290],{"type":23,"value":291},"Close CRM",{"type":17,"tag":26,"props":293,"children":294},{},[295,296,301],{"type":23,"value":229},{"type":17,"tag":54,"props":297,"children":298},{},[299],{"type":23,"value":300},"Close",{"type":23,"value":302},", provided by Elastic Inc. d\u002Fb\u002Fa Close, to manage enquiries, prospects, proposals and existing client relationships. Contact data, communication content, project information, proposal status and internal notes may be stored and processed.",{"type":17,"tag":26,"props":304,"children":305},{},[306],{"type":23,"value":307},"This processing supports the structured management of our sales and communication processes and is based on Article 6(1)(b) and (f) GDPR.",{"type":17,"tag":26,"props":309,"children":310},{},[311,313,319,321,327],{"type":23,"value":312},"Further information is available in the ",{"type":17,"tag":37,"props":314,"children":316},{"href":315},"https:\u002F\u002Fwww.close.com\u002Fprivacy",[317],{"type":23,"value":318},"Close Privacy Policy",{"type":23,"value":320}," and its ",{"type":17,"tag":37,"props":322,"children":324},{"href":323},"https:\u002F\u002Fwww.close.com\u002Fde\u002Fgdpr",[325],{"type":23,"value":326},"GDPR information",{"type":23,"value":43},{"type":17,"tag":18,"props":329,"children":331},{"id":330},"github-for-project-development-and-collaboration",[332],{"type":23,"value":333},"GitHub for project development and collaboration",{"type":17,"tag":26,"props":335,"children":336},{},[337,338,343],{"type":23,"value":229},{"type":17,"tag":54,"props":339,"children":340},{},[341],{"type":23,"value":342},"GitHub",{"type":23,"value":344}," to develop, document and organise client projects. Personal data may be processed where it appears in private repositories, issues, pull requests, commit metadata, documentation or project discussions. This can include names, business contact details, communications, technical project information and content provided during the engagement.",{"type":17,"tag":26,"props":346,"children":347},{},[348],{"type":23,"value":349},"Processing is based on Article 6(1)(b) and (f) GDPR.",{"type":17,"tag":120,"props":351,"children":352},{},[353,362,371],{"type":17,"tag":124,"props":354,"children":355},{},[356],{"type":17,"tag":37,"props":357,"children":359},{"href":358},"https:\u002F\u002Fdocs.github.com\u002Fen\u002Fsite-policy\u002Fprivacy-policies\u002Fgithub-general-privacy-statement",[360],{"type":23,"value":361},"GitHub General Privacy Statement",{"type":17,"tag":124,"props":363,"children":364},{},[365],{"type":17,"tag":37,"props":366,"children":368},{"href":367},"https:\u002F\u002Fgithub.com\u002Fcustomer-terms\u002Fgithub-data-protection-agreement",[369],{"type":23,"value":370},"GitHub Data Protection Agreement",{"type":17,"tag":124,"props":372,"children":373},{},[374],{"type":17,"tag":37,"props":375,"children":377},{"href":376},"https:\u002F\u002Fdocs.github.com\u002Fen\u002Fsite-policy\u002Fprivacy-policies\u002Fgithub-subprocessors",[378],{"type":23,"value":379},"GitHub Subprocessors",{"type":17,"tag":18,"props":381,"children":383},{"id":382},"convex-for-internal-systems-and-project-backends",[384],{"type":23,"value":385},"Convex for internal systems and project backends",{"type":17,"tag":26,"props":387,"children":388},{},[389,390,395],{"type":23,"value":229},{"type":17,"tag":54,"props":391,"children":392},{},[393],{"type":23,"value":394},"Convex",{"type":23,"value":396}," for internal systems, particularly CMS and back-office workflows, and in individual cases for project-related backend functions. Content, user data, project information, technical metadata and other data needed for the relevant process may be processed.",{"type":17,"tag":26,"props":398,"children":399},{},[400],{"type":23,"value":401},"Processing is based on Article 6(1)(b) GDPR and our legitimate interest under Article 6(1)(f) GDPR in secure and efficient technical organisation.",{"type":17,"tag":26,"props":403,"children":404},{},[405,406,412,414,420],{"type":23,"value":312},{"type":17,"tag":37,"props":407,"children":409},{"href":408},"https:\u002F\u002Fwww.convex.dev\u002Flegal\u002Fprivacy",[410],{"type":23,"value":411},"Convex Privacy Policy",{"type":23,"value":413}," and ",{"type":17,"tag":37,"props":415,"children":417},{"href":416},"https:\u002F\u002Fwww.convex.dev\u002Flegal\u002Fdpa",[418],{"type":23,"value":419},"Convex DPA",{"type":23,"value":43},{"type":17,"tag":18,"props":422,"children":424},{"id":423},"ai-assisted-work-tools",[425],{"type":23,"value":426},"AI-assisted work tools",{"type":17,"tag":26,"props":428,"children":429},{},[430],{"type":23,"value":431},"We use AI-assisted tools in selected internal work and development processes, particularly to support programming, analysis, structuring, drafting and technical research. Depending on the context, project or client content may be processed where necessary for the relevant purpose.",{"type":17,"tag":26,"props":433,"children":434},{},[435],{"type":23,"value":436},"We aim to minimise data and avoid or reduce personal data wherever possible. Sensitive or unnecessary personal data should not be entered into these systems.",{"type":17,"tag":26,"props":438,"children":439},{},[440,442,447,449,454],{"type":23,"value":441},"Depending on the context, processing is based on Article 6(1)(b) or (f) GDPR. Providers such as ",{"type":17,"tag":54,"props":443,"children":444},{},[445],{"type":23,"value":446},"OpenAI",{"type":23,"value":448}," or ",{"type":17,"tag":54,"props":450,"children":451},{},[452],{"type":23,"value":453},"Anthropic",{"type":23,"value":455}," may be involved depending on the tool used.",{"type":17,"tag":120,"props":457,"children":458},{},[459,468],{"type":17,"tag":124,"props":460,"children":461},{},[462],{"type":17,"tag":37,"props":463,"children":465},{"href":464},"https:\u002F\u002Fopenai.com\u002Fpolicies\u002Fdata-processing-addendum\u002F",[466],{"type":23,"value":467},"OpenAI Data Processing Addendum",{"type":17,"tag":124,"props":469,"children":470},{},[471],{"type":17,"tag":37,"props":472,"children":474},{"href":473},"https:\u002F\u002Ftrust.anthropic.com\u002F",[475],{"type":23,"value":476},"Anthropic Trust Center",{"type":17,"tag":18,"props":478,"children":480},{"id":479},"contracts-invoices-and-statutory-records",[481],{"type":23,"value":482},"Contracts, invoices and statutory records",{"type":17,"tag":26,"props":484,"children":485},{},[486],{"type":23,"value":487},"We process personal data where required for contractual documents, invoicing, accounting, evidence, warranty matters and compliance with statutory retention and documentation duties. Processing is based on Article 6(1)(b) and (c) GDPR.",{"type":17,"tag":18,"props":489,"children":491},{"id":490},"recipients-and-international-transfers",[492],{"type":23,"value":493},"Recipients and international transfers",{"type":17,"tag":26,"props":495,"children":496},{},[497],{"type":23,"value":498},"Within our company, data is available only to people who need it for the relevant purpose. Data may also be shared with external service providers and platforms where required for communication, project delivery, technical provision or legal and tax obligations.",{"type":17,"tag":26,"props":500,"children":501},{},[502],{"type":23,"value":503},"Data may be transferred to countries outside the European Economic Area, particularly the United States. According to the relevant providers, transfers rely on appropriate safeguards such as an adequacy decision or standard contractual clauses.",{"type":17,"tag":18,"props":505,"children":507},{"id":506},"retention",[508],{"type":23,"value":509},"Retention",{"type":17,"tag":26,"props":511,"children":512},{},[513],{"type":23,"value":514},"We retain personal data only for as long as necessary to initiate, perform and document the business relationship or to meet statutory retention duties. Data is deleted or anonymised when no longer required and where no retention obligation applies.",{"type":17,"tag":18,"props":516,"children":518},{"id":517},"your-rights",[519],{"type":23,"value":520},"Your rights",{"type":17,"tag":26,"props":522,"children":523},{},[524],{"type":23,"value":525},"Subject to the GDPR, you may have rights to access, correction, deletion, restriction, data portability and objection to processing based on legitimate interests.",{"type":17,"tag":26,"props":527,"children":528},{},[529,531,535],{"type":23,"value":530},"To exercise your rights, email ",{"type":17,"tag":37,"props":532,"children":533},{"href":93},[534],{"type":23,"value":96},{"type":23,"value":43},{"type":17,"tag":18,"props":537,"children":539},{"id":538},"right-to-complain",[540],{"type":23,"value":541},"Right to complain",{"type":17,"tag":26,"props":543,"children":544},{},[545],{"type":23,"value":546},"If you believe that processing infringes data-protection law, you may complain to a supervisory authority. Our competent authority is:",{"type":17,"tag":26,"props":548,"children":549},{},[550,555,558,560,563,565,568],{"type":17,"tag":54,"props":551,"children":552},{},[553],{"type":23,"value":554},"Austrian Data Protection Authority",{"type":17,"tag":60,"props":556,"children":557},{},[],{"type":23,"value":559},"Barichgasse 40–42",{"type":17,"tag":60,"props":561,"children":562},{},[],{"type":23,"value":564},"1030 Vienna",{"type":17,"tag":60,"props":566,"children":567},{},[],{"type":17,"tag":37,"props":569,"children":571},{"href":570},"https:\u002F\u002Fwww.dsb.gv.at",[572],{"type":23,"value":573},"www.dsb.gv.at",{"type":17,"tag":18,"props":575,"children":577},{"id":576},"changes-to-this-notice",[578],{"type":23,"value":579},"Changes to this notice",{"type":17,"tag":26,"props":581,"children":582},{},[583],{"type":23,"value":584},"We update this notice when legal requirements, our processes or the services we use change. The version published here is the applicable version.",{"title":586,"searchDepth":587,"depth":587,"links":588},"",3,[589,591,592,593,594,595,596,597,598,599,600,601,602,603,604,605],{"id":20,"depth":590,"text":24},2,{"id":46,"depth":590,"text":49},{"id":110,"depth":590,"text":113},{"id":151,"depth":590,"text":154},{"id":200,"depth":590,"text":203},{"id":216,"depth":590,"text":219},{"id":288,"depth":590,"text":291},{"id":330,"depth":590,"text":333},{"id":382,"depth":590,"text":385},{"id":423,"depth":590,"text":426},{"id":479,"depth":590,"text":482},{"id":490,"depth":590,"text":493},{"id":506,"depth":590,"text":509},{"id":517,"depth":590,"text":520},{"id":538,"depth":590,"text":541},{"id":576,"depth":590,"text":579},"markdown","content:en:8.customer-privacy.md","8",false,"en","legal",{"source":613,"path":614,"stem":615,"dir":586,"extension":616},"content","en\u002F8.customer-privacy.md","en\u002F8.customer-privacy","md",{"requestedPath":7,"resolvedPath":7,"alternates":618},[619,621],{"locale":610,"path":7,"source":620},"variant",{"locale":622,"path":623,"source":620},"de","\u002Fdatenschutz-kunden",{"requested":625,"resolved":626,"usedFallback":609},{"locale":610},{"locale":610},1787661412759]