Privacy Policy
Information on the protection of your personal data
1. Controller
The controller responsible for the processing of personal data on this website is:
Audit-Compass.AI FlexCo
Liechtensteinstraße 20/22
1090 Wien
Österreich
Email: info@audit-compass.ai
2. General information on data protection
The protection of your personal data is important to us. We process personal data exclusively within the framework of the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
This privacy policy informs you about which personal data is processed when you use our website and blog, for what purposes this happens and what rights you have.
3. Hosting and website operation
Our website is operated using the Lovable development and hosting platform.
Provider: Lovable Labs Incorporated, USA
According to our hosting settings, website data is stored and processed on servers within Europe.
When you visit our website, technically required information may be processed. This includes in particular:
- IP address
- Date and time of access
- Pages and files accessed
- Browser type and operating system
- Technical connection and error data
This processing serves the technical provision, security, stability and error analysis of our website.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website operation).
Lovable may use additional technical service providers and subcontractors. Despite European server locations, data processing or access may take place outside the European Economic Area. The requirements of Art. 44 et seq. GDPR apply to such data transfers.
4. Contact and contact form
When you contact us via the contact form or by email, we process the personal data you transmit.
This may include in particular your name, your email address, your company and the content of your message.
The data is used exclusively to process and answer your inquiry and, where applicable, to initiate a business relationship.
The legal bases are Art. 6(1)(b) GDPR for pre-contractual measures and Art. 6(1)(f) GDPR for other inquiries.
We store your details only for as long as necessary to process your inquiry or as required by statutory retention obligations.
Data is passed on only to the extent necessary to process your inquiry or where a corresponding legal obligation exists.
5. Online appointment booking with Google Calendar
To arrange meetings, we use Google Calendar and its appointment booking features.
The provider in the European region is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When booking an appointment, the following data in particular may be processed:
- Name and email address
- Selected date and time
- Voluntarily provided information about the topic of the meeting
- Technical usage data of the booking service
This data is processed to organise, confirm and conduct the requested appointment.
The legal basis is Art. 6(1)(b) GDPR where the booking serves the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR.
When using Google services, personal data may be processed outside the European Economic Area.
6. Cookies and consent
Our website may use technically necessary cookies and comparable storage technologies to provide basic functions.
In addition, with your consent we use technologies for the statistical analysis of website usage.
Tracking technologies that are not technically necessary are only activated after you have expressly consented.
The legal basis in these cases is Art. 6(1)(a) GDPR in conjunction with § 165(3) TKG 2021.
You can withdraw or change your consent at any time with effect for the future via the privacy settings of our website.
7. Google Tag Manager
We use Google Tag Manager for the technical management and integration of website tags.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager enables the central management of various website services. It serves in particular to control the integration of Google Analytics according to the consent settings.
When Google Tag Manager loads, technical connection data, in particular the IP address, may be transmitted to Google.
Services requiring consent that are integrated via the Tag Manager are only activated after the corresponding consent has been given.
8. Google Analytics 4
For the statistical analysis of our website we use Google Analytics 4, a web analytics service from Google Ireland Limited.
Google Analytics helps us understand how visitors use our website and which content is particularly relevant.
The following information may be processed, among others:
- Pages accessed and interactions
- Visit duration and page views
- Device and browser information
- Approximate geographic origin
- Technical identifiers and cookies
According to Google, IP addresses of users from the EU are not permanently logged or stored in Google Analytics.
Google Analytics is used exclusively on the basis of your prior consent pursuant to Art. 6(1)(a) GDPR and § 165(3) TKG 2021.
Integration and control take place via Google Tag Manager. Without your consent, Google Analytics is not activated.
You can withdraw consent at any time via the privacy settings of our website.
9. Google Fonts
Our website uses fonts from Google Fonts for a consistent and appealing presentation of content.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The fonts are stored locally and provided via our website, without any connection to Google servers being required.
10. Recipients and international data transfer
To provide our website and to communicate with prospective customers, we use technical service providers, in particular Lovable and Google.
Processing of personal data outside the European Economic Area cannot be ruled out in all cases.
Where personal data is transferred to third countries, the requirements of Art. 44 et seq. GDPR must be met. These include, for example, adequacy decisions of the European Commission or appropriate contractual safeguards.
11. Storage duration
We store personal data only for as long as necessary for the respective processing purposes or as required by statutory retention obligations.
Contact inquiries are deleted once their processing is complete and no further retention is required.
For technical log data and analytics data, the retention periods defined for the systems used apply.
12. Your rights
Under the GDPR, you have in particular the following rights:
- Access to your personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of personal data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to certain processing (Art. 21 GDPR)
- Withdrawal of consent given with effect for the future (Art. 7(3) GDPR)
To exercise your rights, please contact us at:
You also have the right to lodge a complaint with a data protection supervisory authority.
For our company, the Austrian Data Protection Authority is generally competent:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
13. Changes to this privacy policy
We reserve the right to adapt this privacy policy if legal requirements, the technologies used or the processing of personal data on our website change.
The version published on this website applies in each case.
Last updated: November 2026