PRIVACY POLICY (DATENSCHUTZERKLÄRUNG) Last Updated: 8 June 2026 Innovestik e.U. ("Innovestik", "we", "our", or "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, process, use, store, and protect personal data when you visit our website or communicate with us. 1. Data Controller Responsible for data processing within the meaning of the General Data Protection Regulation (GDPR): Innovestik e.U. At Heumarkt 4/3 1030 Vienna Austria Company Registration Number (Firmenbuchnummer): FN 379729a Registered Office: Vienna, Austria Email: info@innovestik.com Website: www.innovestik.com 2. Collection and Processing of Personal Data We process personal data only to the extent necessary to provide a functional website, respond to inquiries, maintain business relationships, and improve our services. Personal data may include: •Name •Company name •Email address •Telephone number •Country •IP address •Browser and device information •Website usage data •Information voluntarily provided through contact forms or email correspondence 3. Contact Forms and Business Inquiries When you contact us through our website, email, or other communication channels, the information you provide will be processed solely for the purpose of responding to your inquiry and maintaining related business communications. Legal Basis: Article 6(1)(b) GDPR (pre-contractual measures) and Article 6(1)(f) GDPR (legitimate interest in responding to inquiries). We retain correspondence only as long as necessary for business, legal, or administrative purposes. 4. Website Hosting Our website is hosted through Wix.com Ltd. Wix may process technical data necessary for the operation and security of the website, including: •IP address •Browser information •Device information •Log files •Security and performance data Further information can be found in Wix's privacy documentation. Legal Basis: Article 6(1)(f) GDPR (legitimate interest in secure website operation). 5. Google Analytics 4 Our website uses Google Analytics 4, a web analytics service provided by Google. Google Analytics helps us understand how visitors use our website and allows us to improve content and user experience. Information collected may include: •Visited pages •Session duration •Device information •Browser information •Approximate geographic location •Referral sources Google Analytics is activated only after your consent has been provided through our cookie consent banner. Legal Basis: Article 6(1)(a) GDPR (consent). You may withdraw your consent at any time through the cookie settings. 6. LinkedIn Insight Tag We use LinkedIn Insight Tag to measure the effectiveness of our business marketing activities and better understand interactions with our website. LinkedIn may process: •IP address •Browser information •Device information •Website activity •Referral information Legal Basis: Article 6(1)(a) GDPR (consent). LinkedIn cookies are activated only after consent is granted. 7. Meta Pixel (Facebook and Instagram) Our website uses Meta Pixel to measure advertising effectiveness and improve communication with potential customers and business partners. Meta may process: •IP address •Browser information •Device information •Website interactions •Advertising identifiers Legal Basis: Article 6(1)(a) GDPR (consent). Meta technologies are activated only after consent has been granted. 8. Cookies Our website uses cookies and similar technologies. Detailed information regarding the cookies used on our website can be found in our Cookie Policy. You may change or withdraw your cookie consent at any time through our cookie settings. 9. International Data Transfers Certain service providers used by Innovestik, including Google, LinkedIn, Meta, and Wix, may process data outside the European Economic Area (EEA), including in the United States. Where such transfers occur, appropriate safeguards are implemented, including: •Standard Contractual Clauses (SCCs) •Additional technical and organizational measures where applicable •Compliance mechanisms recognized under applicable data protection laws Despite these safeguards, data may be subject to access by foreign authorities under local legislation. 10. Data Retention We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law. Retention periods may vary depending on: •Legal obligations •Tax requirements •Contractual obligations •Legitimate business interests Once retention is no longer required, personal data is securely deleted or anonymized. 11. Data Security We implement appropriate technical and organizational measures to protect personal data against: •Unauthorized access •Accidental loss •Destruction •Alteration •Disclosure While we strive to protect your information, no internet-based transmission or storage system can be guaranteed to be completely secure. 12. Your Rights Under GDPR Under the General Data Protection Regulation (GDPR), you may have the following rights: •Right of access (Art. 15 GDPR) •Right to rectification (Art. 16 GDPR) •Right to erasure (Art. 17 GDPR) •Right to restriction of processing (Art. 18 GDPR) •Right to data portability (Art. 20 GDPR) •Right to object (Art. 21 GDPR) •Right to withdraw consent at any time (Art. 7 GDPR) To exercise any of these rights, please contact: info@innovestik.com 13. Right to Lodge a Complaint If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority. In Austria: Austrian Data Protection Authority (Datenschutzbehörde) Barichgasse 40–42 1030 Vienna Austria Website: www.dsb.gv.at 14. Changes to This Privacy Policy Innovestik e.U. reserves the right to update this Privacy Policy at any time to reflect legal, technical, or operational changes. The latest version will always be published on this website together with the corresponding revision date. We encourage visitors to review this Privacy Policy periodically.