Privacy Policy

1. Who is responsible?

jora.tech FlexCo, Werk-VI-Straße 46, 8605 Kapfenberg, Austria, is the controller for the processing described in this notice. Contact us about privacy or your rights at office@jora.tech.

This notice covers our website, enquiries, appointment bookings and applications for employment. It does not replace the separate contractual arrangements for processing industrial customer data within jora.twin.

2. Website hosting and technical data

We use Webflow, Inc., United States, to host and deliver this website, including images, fonts and uploaded video files. When you visit, hosting and delivery systems process technical information such as your IP address, requested URL, date and time, browser and operating system, referrer and response information.

The purposes are delivering the website, maintaining availability, troubleshooting and protecting against misuse. The legal basis is our legitimate interest in operating a reliable and secure website under Article 6(1)(f) GDPR. Technical records are kept for the period needed for operational and security purposes; records relating to an incident may be retained until it is resolved and relevant claims are addressed.

Details: Webflow Privacy Policy and Webflow Data Processing Addendum.

3. Contact enquiries and pre-check discussions

When you use the contact form, we receive your name, company, work email, process type, main production challenge and message. You may also provide your role, product type and number of production lines. We also record your acknowledgement of the privacy notice. If you contact us by email or telephone, we process the information you provide in that conversation.

We use these details to respond, clarify your production requirements, arrange a data pre-check and prepare any requested offer. Article 6(1)(b) GDPR applies where we take steps towards a contract with you; for enquiries on behalf of a company and other business communications, Article 6(1)(f) GDPR applies to our interest in responding and managing business relationships. An acknowledgement of this notice is not consent to advertising.

The website form uses Webflow's submission infrastructure. Access to enquiries is limited to the people who need them to handle your request and the service providers supporting delivery and storage. Required fields are needed to handle the enquiry through this form; optional fields are voluntary. You can also contact us directly by email.

We retain enquiries while dealing with the request and any resulting business relationship. Once no longer needed, they are deleted unless a statutory retention duty or the establishment, exercise or defence of legal claims requires continued storage. Please do not submit sensitive personal data or confidential production datasets through the general contact form.

4. Appointment booking with Microsoft Bookings

Our FAKUMA booking page embeds Microsoft Bookings and also provides a link to open it directly. When the booking interface loads, your browser connects to Microsoft and sends technical connection information. If you make a booking, Microsoft processes the fields requested in that interface, such as your name, email address, selected appointment and any additional information you submit.

We use the booking details to schedule and prepare the discussion, allocate team availability and communicate appointment details. The legal bases are Article 6(1)(b) GDPR for requested pre-contractual steps and Article 6(1)(f) GDPR for organising business appointments. Any optional tracking requires a separate appropriate consent; accepting website analytics is not a condition of booking.

Microsoft Ireland Operations Limited and Microsoft group service providers support this service. Bookings stores appointment and customer information within the Microsoft 365/Exchange infrastructure used for the booking calendar. We retain appointment information while required for the meeting and related follow-up, subject to the retention criteria in this notice.

You can arrange an appointment by emailing us instead. Further information: Microsoft Privacy Statement.

5. Cookies and your choices

Cookies and similar browser storage can remember preferences and support website functions. Storage that is strictly necessary for a service you request, including remembering your privacy choices, is treated separately from optional analytics or marketing. Optional storage or access requires prior consent under the applicable Austrian rules, including Section 165(3) TKG 2021.

We use Consent Pro by Finsweet, Inc. to present your choices and manage consent. This involves your selected categories, a consent identifier and information needed to record when and under which notice version a choice was made. Loading its scripts also involves technical requests to the provider's infrastructure. The legal bases are Article 6(1)(c) GDPR where documentation is needed to meet our obligations, and Article 6(1)(f) GDPR for reliably applying your preferences.

You may accept or reject optional categories and revisit your choice through the consent preferences control. Withdrawing consent applies to future processing and does not affect processing that was lawful before withdrawal. Clearing your browser storage may cause the website to ask again. Consent records are retained for the period needed to apply and demonstrate your choice.

Details of the configured services, purposes and storage durations are available in the consent settings. Provider information: Finsweet Privacy Policy.

6. Google Tag Manager and Google Analytics

Google Tag Manager is included to manage website tags. Loading it connects your browser to Google's infrastructure and can transmit technical information such as your IP address. Tag Manager is a delivery mechanism; the purposes and legal bases of the individual tags must be considered separately.

With your consent, we use Google Analytics 4 to measure website use, such as visited pages, referrers, device/browser characteristics and interactions with calls to action. This processing is based on your consent under Article 6(1)(a) GDPR. We use Basic Consent Mode, with analytics tags blocked until consent.

The service provider for EEA users is Google Ireland Limited; processing may also involve Google LLC in the United States. Google states that GA4 does not log or store individual IP addresses. Analytics nevertheless processes other identifiers and usage information and should not be treated as anonymous solely for this reason.

Our measurement excludes enquiry text, names, email addresses, application documents and the production figures entered into the calculator. We do not use advertising personalisation or remarketing. Information about cookie lifetimes and analytics data retention is available in the consent settings.

Further information: Google Privacy Policy and Google Analytics data collection.

7. Office map and external resources

Our contact page displays Office Graz and Office Kapfenberg using Leaflet and map tiles from the OpenStreetMap Foundation, United Kingdom. Leaflet files are currently delivered through UNPKG, which uses Cloudflare's delivery network. Loading these resources sends technical request information, including your IP address and the requested resource, to the relevant providers.

The map is provided to help you locate our offices; it does not calculate a route between them or request your device's precise location. Our legitimate interest under Article 6(1)(f) GDPR is presenting our locations conveniently. Any processing that requires consent is handled through the consent settings. You can also use the written addresses without interacting with the map.

The separate directions links open Google Maps only when you follow them. Provider information: OpenStreetMap Foundation Privacy Policy and Cloudflare Privacy Policy.

8. Savings Calculator

The calculator uses the production and cost figures you enter to calculate estimates in your browser. Its current calculation code does not submit those figures to jora.tech or store them in a customer account. Normal hosting requests still occur when you load the page.

If you choose to send us your figures in an enquiry, they are processed as described in the contact section. Optional analytics may measure use of the calculator after consent, but excludes the entered figures.

9. Job applications by email

If you apply for a role advertised on this website or send an unsolicited application, we process your contact details, CV, qualifications, work history, attachments and correspondence, together with information generated during the selection process. Please use the email address stated in the vacancy and send only information relevant to the application.

We use this information to assess suitability, communicate with you and take steps towards an employment contract under Article 6(1)(b) GDPR. Statutory duties may require processing under Article 6(1)(c), and limited retention to establish, exercise or defend legal claims may rely on Article 6(1)(f). Access is limited to the people involved in recruitment and the service providers supporting communication and storage.

For unsuccessful applications, records are deleted once the selection process is complete and applicable periods for bringing and defending claims have expired, unless an actual dispute requires longer retention. If you are hired, relevant information is transferred to personnel records and covered by the employee privacy information.

Keeping your application for future vacancies requires a separate, voluntary agreement specifying its duration, normally based on consent under Article 6(1)(a) GDPR. You can withdraw that consent at any time. Sending an application does not subscribe you to marketing or require acceptance of website analytics.

10. Recipients and international transfers

Personal data is accessible to authorised team members and, where necessary, providers of hosting, communication, booking, consent management and other specifically described services. Professional advisers and authorities may receive data where necessary to meet a legal obligation or handle a legal claim.

Some providers or their subprocessors operate outside the European Economic Area, including in the United States and the United Kingdom. These transfers are based on an applicable safeguard under Chapter V GDPR, such as an adequacy decision covering the recipient or the European Commission's Standard Contractual Clauses, with supplementary measures where needed.

You may contact us for information about the safeguards applicable to your data and how to obtain a copy. Provider privacy notices explain any additional processing for which the respective provider acts as an independent controller.

11. Your rights

Subject to the conditions in the GDPR, you may request access to your personal data, correction of inaccurate data, erasure, restriction of processing and data portability. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. You may object to processing for direct marketing at any time.

To exercise these rights, email office@jora.tech. We may request information reasonably needed to confirm your identity. You can also lodge a complaint with a supervisory authority, in particular where you live, work or believe an infringement occurred. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).

12. Updates

We update this notice when our services, data processing or legal requirements change. The version date appears at the top of the page. If a change requires fresh consent, we will request it separately.