Skip to content
Visibl – home

Legal

Privacy policy

This website processes as little personal data as is technically possible: no tracking cookies, no analytics services, no third-party scripts and no user database.

Legal basis:
GDPR / Austrian DSG
Cookies:
None
Last updated:
18 October 2026

This English version is provided for convenience only. The German version of this privacy policy is the legally binding one.

  1. 01

    Controller

    The controller for data processing within the meaning of Art. 4(7) GDPR is BELETIER OG. BELETIER Technology is a division of that company and not a separate legal entity.

    Controller
    BELETIER OG
    Division
    BELETIER Technology division
    Address
    Alpbach 705b, 6236 Alpbach, Tyrol, Austria
    Privacy enquiries
    privacy@beletier.com
    General enquiries
    business@beletier.com
    Customer matters
    customer@beletier.com
    Telephone
    +43 660 1888302 / +43 660 4917335
    Commercial register number
    FN 664949t
    Authorised representatives
    Noah Moser, Tim Voglsperger

    No data protection officer has been appointed. There is no obligation to appoint one under Art. 37 GDPR: our core activity involves neither regular and systematic monitoring of data subjects on a large scale nor large-scale processing of special categories of data. Please address privacy requests directly to the contact above.

    Scope: this policy applies to the website https://visibl.beletier.technology. The processing of store data within the Visibl Shopify app is additionally governed by the app’s privacy notice. The online shop at beletier.com is governed by its own privacy policy published there.

  2. 02

    Principle of data minimisation

    This website is built so that as little personal data as possible arises in the first place. Specifically:

    • All pages are statically pre-rendered; there is no application database.
    • There is no login area, there are no user accounts and no social media sign-in.
    • No cookies are set for analytics, marketing or recognition purposes. A cookie banner is therefore not required.
    • No scripts, fonts, maps or videos are loaded from third parties. Fonts are embedded locally, so no connection to external servers is established.
    • No analytics or audience measurement services are integrated, in particular no Google Analytics.
    • No profiling and no automated decision-making within the meaning of Art. 22 GDPR take place.
    • No payment data and no special categories of data under Art. 9 GDPR are processed.
    • No personal data is collected from or purchased from third parties.
  3. 03

    Server log files

    When you access the website, your browser transmits technically necessary data which the hosting provider records in log files. This data is required to deliver the page and to defend against attacks.

    • IP address of the requesting device
    • Date and time of access
    • Resource requested and volume of data transferred
    • HTTP status code, browser type and operating system
    • Referring page, where applicable

    Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and uninterrupted operation of the website. This data is not combined with other data sources and is not evaluated for marketing or analytics purposes.

    Retention period: server log files are deleted after 14 days at the latest. Data is kept longer only in individual cases where a specific security incident has to be investigated, and then only until that investigation is complete.

  4. 04

    Hosting & data processing agreement

    The website is operated by an external service provider acting as a processor pursuant to Art. 28 GDPR and exclusively on our instructions. A corresponding data processing agreement is in place with that provider.

    Hosting provider
    Contabo GmbH
    Address
    Aschauer Straße 32a, 81549 Munich, Germany
    Server location
    Germany (EU/EEA)
    Legal basis
    Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR
    Third-country transfer
    Does not take place

    Since processing and storage take place exclusively within the EEA, no transfer to a third country under Chapter V GDPR is required; standard contractual clauses therefore do not apply.

  5. 05

    Getting in touch

    This website does not contain a contact form. If you contact us by email or telephone, we process the details your message contains — typically name, email address, company and telephone number where given, and your description — in order to handle your enquiry.

    Legal basis: Art. 6(1)(b) GDPR (steps preparatory to or performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to business enquiries). Providing this data is neither required by law nor by contract; without it, however, we cannot answer your enquiry.

    Retention period: enquiries are deleted once they have been dealt with conclusively and no statutory retention obligations apply. Business correspondence is subject to commercial and tax retention periods of up to seven years (§212 UGB, §132 BAO).

    Marketing use: your contact details are not used for newsletters, direct marketing or profiling. They are never sold or made available to advertisers.

  6. 06

    Recipients of data

    Your data is passed on only where this is necessary for the purposes stated:

    • to the hosting provider (Contabo GmbH) as part of technical delivery,
    • to the email service provider through which our business correspondence runs,
    • within BELETIER OG and the BELETIER Group, where handling your enquiry requires the involvement of another division,
    • to tax advisors, legal counsel or public authorities, where required by law or where we need to establish or defend legal claims.

    Data is never sold or made available for advertising purposes. No personal data has been sold to third parties or shared for targeted advertising purposes in the past twelve months.

  7. 07

    Data relating to minors

    This website is addressed to businesses. We do not knowingly collect personal data from persons under 18 years of age, nor do we market our services to them. Should we learn that data of a minor has been transmitted to us, we will delete it from our records without delay.

    If you become aware of such data, please contact us at privacy@beletier.com.

  8. 08

    Your rights

    Under the GDPR you have the right at any time to:

    • access the data processed about you (Art. 15)
    • rectification of inaccurate or incomplete data (Art. 16)
    • erasure, provided no retention obligation applies (Art. 17)
    • restriction of processing (Art. 18)
    • data portability in a structured, commonly used and machine-readable format (Art. 20)
    • object to processing based on legitimate interests (Art. 21)
    • withdraw consent with effect for the future; the lawfulness of processing carried out beforehand remains unaffected (Art. 7(3))

    To exercise these rights, an informal message to privacy@beletier.com is sufficient. We answer requests free of charge within the statutory period of one month. To guard against abusive requests we may ask for additional information to confirm your identity; we use such information for that purpose only.

  9. 09

    Right to lodge a complaint

    If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the competent supervisory authority, without prejudice to any other remedy. In Austria this is the Data Protection Authority:

    Authority
    Austrian Data Protection Authority (Datenschutzbehörde)
    Address
    Barichgasse 40–42, 1030 Vienna, Austria
    Telephone
    +43 1 52 152-0

    Data subjects habitually resident in another EEA member state may equally turn to the supervisory authority competent there.

  10. 10

    Technical safeguards

    We protect the transmission and operation of this website with technical and organisational measures reflecting the current state of the art, pursuant to Art. 32 GDPR:

    • Encrypted transmission via TLS (HTTPS) with enforced upgrade
    • A strict Content Security Policy that prevents loading of external resources
    • Security headers against clickjacking, MIME sniffing and referrer leakage
    • No server-side processing of user input
    • A minimal dependency base, updated regularly
    • Access to the enquiry mailbox restricted to the people handling enquiries

    Despite these measures, no transmission over the internet can be guaranteed to be completely secure. Absolute protection against unauthorised access is not technically achievable.

  11. 11

    Changes to this policy

    We adapt this privacy policy when changes to the website or to the legal situation require it. The version published here is the one that applies. In the event of material changes we will point this out prominently at this place.

Last updated: 18 October 2026