procurement.club

Privacy Policy

Status: October 2026

1 Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

procurement.club GmbH
Grünangergasse 12, Top 29
1010 Vienna, Austria
Email: office@procurement.club
Website: https://www.procurement.club

2 Data protection contact

For all questions about data protection, please write to: office@procurement.club

3 Overview

This website is a static information website. It does not use cookies, analytics or tracking tools, advertising networks, social media plug-ins, embedded videos or maps, or fonts loaded from third-party servers. All fonts, images and scripts are delivered from our own web server.

We process personal data only in the following cases:

  • when you visit the website (technically necessary server log files, section 4),
  • when you subscribe to our newsletter (section 5),
  • when you contact us by email or phone (section 6).

4 Visiting the website (server log files)

When you visit the website, the web server automatically stores information that your browser transmits:

  • IP address of the requesting device
  • date and time of the request
  • requested page or file and HTTP status code
  • website from which the request was made (referrer)
  • browser type and version, operating system

This data is required to deliver the website and to ensure its stability and security, for example to detect attacks. It is not merged with other data sources and is deleted after 30 days at the latest, unless a security incident requires longer storage for clarification.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure operation of the website).

Hosting

The website is hosted by Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA. Namecheap processes the server log files on our behalf as a processor under its Data Processing Addendum pursuant to Art. 28 GDPR. The web server is located in the USA. The transfer of data to the USA is based on the EU Standard Contractual Clauses (Module 2, controller to processor) agreed in this Data Processing Addendum (Art. 46 para. 2 lit. c GDPR). Namecheap's representative in the EU under Art. 27 GDPR is the European Data Protection Office (EDPO), Avenue Huart Hamoir 71, 1030 Brussels, Belgium; Namecheap's data protection officer can be reached at dpo@namecheap.com.

5 Newsletter

You can subscribe to our newsletter on this website. We need your email address for this and your consent to this privacy policy. The sign-up is transmitted from our web server (Namecheap, see section 4) to our mailbox at Google Workspace (see section 6); we use the address exclusively to send the newsletter. You can unsubscribe at any time by replying to a newsletter or by writing to office@procurement.club. After you unsubscribe, we delete your address unless we have another legal basis for storing it.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent). You can withdraw your consent at any time with effect for the future.

6 Contact by email or phone

If you contact us, we process the data you provide (e.g. name, email address, phone number, content of your message) in order to answer your enquiry. Our emails are processed by Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) as a processor. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR). We delete the data when it is no longer required for processing your enquiry and no statutory retention obligations apply.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual or contractual measures) and Art. 6 para. 1 lit. f GDPR (legitimate interest in answering enquiries).

7 Business partners, customers and suppliers

We store the data that customers, suppliers and business partners provide to us themselves, for example as part of an enquiry or to conclude and perform a contract (name, address, email address, phone number, bank details, contract details). We only pass on personal data to third parties if this is necessary to perform a contract, required by law, or if you have consented. We delete the data when it is no longer required and statutory retention periods (e.g. under tax law) have expired.

Legal basis: Art. 6 para. 1 lit. b, c and f GDPR.

8 External links

This website contains links to external websites. A link only transfers data to the operator of the other website when you click it. We have no influence on data processing by those operators; their own privacy policies apply.

9 Your rights

You have the right to:

  • access to your personal data (Art. 15 GDPR),
  • rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing based on legitimate interests (Art. 21 GDPR),
  • withdraw consent at any time with effect for the future (Art. 7 para. 3 GDPR).

Please send your request to office@procurement.club.

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, phone +43 1 52 152-0, email dsb@dsb.gv.at.

10 Changes to this privacy policy

We adapt this privacy policy when the website or the legal situation changes. The version published on this page applies.