Privacy notice

What this website loads

Almost everything this site needs (fonts, images, scripts, the place directory behind the dealer finder) is served from this domain. There is no content delivery network for fonts, no embedded video, no social media widget and no advertising.

Two things come from elsewhere. The chat window in the bottom corner is ours, but it runs on rented infrastructure, so its script is loaded from there. And the page count described below is loaded from Google, but only once you have agreed to it. Nothing else on this site contacts anyone but us.

The chat window

CertoChat is our own assistant. It answers questions about our devices, and you can leave a message for a person through it. The service belongs to CertoClav; it runs on infrastructure rented from Heroku (Salesforce), which is why the script comes from a different address than the rest of the page.

What you type in the chat, and the e-mail address you give if you ask to be contacted, reaches that service and from there us. It is used to answer you, on the same legal basis as any other enquiry.

The chat also stores a few entries in your browser so that a conversation survives a page change: a session identifier, whether the window is open, and (if you entered them) your name and e-mail address. These stay on your device. They are not cookies in the narrow sense, but they are storage on your device, so we name them here.

Statistics

We count page views with Google Analytics, so that we can see which pages are read and which are not. It starts only after you have agreed in the banner at the bottom of the page. If you decline, nothing is loaded from Google, nothing is stored and nothing is sent.

If you agree, Google Analytics sets cookies in your browser and Google Ireland Limited processes your visit on our behalf: which pages you open, roughly where you are (country and region, derived from a shortened IP address), and which browser and device you use. None of it is used for advertising, no advertising account is linked to it, and we cannot identify you from it.

Google deletes the visit data after 14 months. That is the longest period Analytics offers, and we have chosen it so that one year can be compared with the previous one; the aggregate reports (how many people read a page in a given month) are not affected by the deletion and remain available.

The legal basis is your consent, Article 6(1)(a) GDPR and § 165(3) of the Austrian Telecommunications Act 2021. You can change your mind at any time: “Cookie settings” at the bottom of every page asks again, and declining costs you nothing. Every part of this site works either way.

Cookies

Unless you agree to the page count, this site sets no cookies. There is no tracking pixel, no fingerprinting and no comparable technique to recognise you.

Four things can end up on your device, and three of them are there because you asked for them. The chat window keeps a few entries while your conversation lasts. If you switch the language, that choice is remembered, so that you are not sent back to English on your next visit. Your decision about the page count is kept too, so that the question is not put to you again on every page: one entry, containing yes or no and the date. None of these three leave your browser. The fourth is Google Analytics, which sets its own cookies, but only if you agreed to it.

Server log files

Our hosting provider records the usual access data when a page is requested: the IP address, the time of the request, the file requested, the referring page and the browser identification. This is needed to deliver the site and to defend it against attack.

The legal basis is our legitimate interest in a working and secure website, Article 6(1)(f) GDPR. The data is not combined with other sources and is not used to identify anyone.

Enquiries

If you write to us (through the form, by e-mail or by telephone), we process what you tell us in order to answer you: your name, your organisation, your contact details, your country and the content of your enquiry.

The form does not go through a form service. Your entries are sent to a small program of ours running on the same address as this website, which turns them into an e-mail to support@certoclav.com from our own Microsoft 365 mailbox. The program keeps nothing: it passes the enquiry on and forgets it. Your IP address is briefly counted there to keep automated mass submissions out.

You then receive a short confirmation that your enquiry has arrived. It deliberately does not repeat what you wrote. The address in the form is unverified, and we do not want our form to become a way of sending text to somebody else in our name.

CertoClav sells through specialist dealers. To get you a quotation and local service we pass your enquiry to the dealer responsible for your region. If you do not want that, say so in your message and we will answer you ourselves.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or its preparation, and otherwise Article 6(1)(f) GDPR, our legitimate interest and yours in an answer.

Storage period

We keep an enquiry for as long as we are dealing with it and afterwards for as long as commercial and tax law requires us to keep business correspondence. After that it is deleted.

The dealer finder

If you use the button that asks for your current position, your browser asks you for permission first and the coordinates stay in your browser. They are used to sort the dealer list and are not sent to us or to anyone else.

Typing a postcode or a town works the same way: the place directory is part of this site, the comparison happens in your browser, and what you type never reaches a server.

Your rights

You may request access, rectification, erasure, restriction and data portability, and you may object to processing based on our legitimate interests. Write to us at the address above; we do not make it complicated.

You also have the right to complain to a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at.

Processors and transfers outside the EU

Four companies are involved in running this site, and none of them uses your data for their own purposes: Cloudflare delivers the pages and runs the small program behind the form, Microsoft carries the e-mail, Heroku hosts the chat service, and Google counts page views, the last one only if you agreed to it. All of them are American companies, or the European subsidiary of one, with European data centres, and contracts under Article 28 GDPR apply.

If you ask for a dealer, your enquiry goes to the partner responsible for your region. Some of our partners are outside the European Economic Area. Where that applies to you, it follows from where you are, and you can object in your message at any time.