Privacy Policy
Last updated: 15th January 2026
1. Introduction
prismvecto GmbH ("we", "our", or "us") is committed to protecting your privacy and ensuring that your personal data is handled in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services or visit our website.
2. Data Controller Information
The data controller responsible for your personal data is:
- Company: prismvecto GmbH
- Address: Ottakringer Straße 70, 8068 Graz, Styria, Austria
- Registration Number: FN593421x
- VAT Number: ATU78124593
- Email: privacy@prismvector.world
- Phone: +43 3168268215
3. Data We Collect
We collect and process the following types of personal data:
3.1 Information You Provide Directly
When you interact with our services, we collect data that you voluntarily provide, including:
- Contact information (name, email address, phone number)
- Professional information (company, job title, professional interests)
- Course enrollment and training preferences
- Communication preferences and feedback
- Payment and billing information for course fees
- Any information you provide when contacting us or participating in surveys
3.2 Information We Collect Automatically
When you visit our website, we automatically collect certain technical information:
- IP address and location data
- Browser type and version
- Operating system information
- Website usage patterns and navigation behaviour
- Pages visited and time spent on our website
- Referral sources and search terms used to find our website
4. How We Use Your Information
We process your personal data for the following purposes and under the following legal bases:
4.1 Service Provision (Legal Basis: Contract Performance)
- Delivering digital skills training programmes and educational services
- Processing course enrollments and managing training schedules
- Providing customer support and responding to enquiries
- Processing payments and maintaining billing records
- Issuing certificates and credentials upon course completion
4.2 Communication (Legal Basis: Legitimate Interest/Consent)
- Sending course updates, schedules, and important announcements
- Providing technical support and customer service
- Responding to your questions and feedback
- Sending marketing communications about our services (with your consent)
4.3 Website Improvement (Legal Basis: Legitimate Interest)
- Analysing website usage to improve user experience
- Monitoring website performance and security
- Conducting research to enhance our training programmes
4.4 Legal Compliance (Legal Basis: Legal Obligation)
- Maintaining records as required by Austrian and EU law
- Complying with tax and accounting obligations
- Responding to legal requests from authorities
5. Cookies and Tracking Technologies
We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.
For detailed information about our use of cookies, please refer to our Cookie Policy.
6. Data Sharing and Third Parties
We do not sell your personal data to third parties. We may share your information in the following limited circumstances:
6.1 Service Providers
We work with trusted service providers who assist us in delivering our services:
- Payment processing companies for secure transaction handling
- Cloud hosting providers for data storage and website hosting
- Email service providers for communication delivery
- Analytics providers (such as Google Analytics) for website performance monitoring
6.2 Legal Requirements
We may disclose your personal data if required by law or in response to valid legal processes, including:
- Compliance with court orders or legal proceedings
- Response to government or regulatory requests
- Protection of our rights, property, or safety
7. International Data Transfers
As we are based in Austria (EU), your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for countries with equivalent data protection standards
- Other legally recognised transfer mechanisms under GDPR
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:
- Course participants: 7 years after course completion for certification and legal compliance purposes
- Marketing communications: Until you withdraw consent or request deletion
- Website analytics: 26 months for Google Analytics data
- Financial records: 7 years as required by Austrian tax law
- General enquiries: 3 years from last contact
9. Your Rights
Under GDPR, you have the following rights regarding your personal data:
9.1 Access and Portability
- Right to access your personal data and receive a copy
- Right to data portability in a structured, machine-readable format
9.2 Correction and Deletion
- Right to rectify inaccurate or incomplete personal data
- Right to erasure ("right to be forgotten") under certain circumstances
9.3 Processing Limitations
- Right to restrict processing in certain situations
- Right to object to processing based on legitimate interests
- Right to withdraw consent where processing is based on consent
9.4 Exercising Your Rights
To exercise any of these rights, please contact us at privacy@prismvector.world or +43 3168268215. We will respond to your request within 30 days.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Staff training on data protection practices
- Incident response procedures for data breaches
11. Children's Privacy
Our services are designed for adults and professionals. We do not knowingly collect personal data from children under 16 years of age. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete such information promptly.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending email notifications to registered users
- Displaying prominent notices on our website
13. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:
- Email: privacy@prismvector.world
- Phone: +43 3168268215
- Address: prismvecto GmbH, Ottakringer Straße 70, 8068 Graz, Styria, Austria
- Business Hours: Monday - Friday: 9:00 - 18:00
14. Supervisory Authority
You have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe we have not handled your personal data in accordance with applicable law:
- Austrian Data Protection Authority
- Wickenburggasse 8, 1080 Vienna, Austria
- Website: www.dsb.gv.at
- Email: dsb@dsb.gv.at
Effective Date: This Privacy Policy is effective as of 15th January 2026 and applies to all personal data processed by prismvecto GmbH.
Document Version: 1.0 | Last Review: January 2026