Privacy Policy for apexgsm.com

This privacy policy explains which personal data APEX Technology GmbH processes when you visit apexgsm.com, request a quotation, contact us through WhatsApp or correspond with our sales team, and which rights you have under the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). apexgsm.com is a product catalogue for trade customers; purchases are arranged through quotation and order confirmation with our sales team, and no payment data is collected on this website.

1. Controller

Privacy enquiries can be addressed to the e-mail address above with the subject line "Data protection".

2. What this policy covers

• visiting the website and the technical data your browser transmits;
• enquiries through the contact form, by e-mail, by telephone and through the WhatsApp links on the site;
• trade account applications and ongoing business correspondence;
• cookies, web fonts and the embedded video on the About Us page.

3. Server logs and hosting

When you open a page, the web server records the IP address of the requesting device, the date and time, the page requested, the referring URL, the browser type and operating system and the HTTP status code. These logs are needed to deliver the pages, keep the site stable and detect attacks or misuse.

• Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in secure and reliable operation.
• Retention: the hosting provider keeps server logs for a short period for security purposes and deletes them afterwards, unless a specific security incident requires longer storage for investigation.
• Hosting provider: Hostinger International Ltd., Larnaca, Cyprus. The website is hosted on servers located in the European Union. The provider processes this data on our behalf under a data processing agreement in accordance with Art. 28 GDPR.

4. Contact form, quotation requests, e-mail, telephone and WhatsApp

The contact form on apexgsm.com asks for your name, your e-mail address, a topic (accounting, order status, a new order or a delivery question) and your message. When you request a quotation you will usually also tell us your company name, delivery address, the part numbers you need and the quantities. The form is transmitted over an encrypted connection (TLS) and delivered to our sales mailbox. Enquiries that lead to an order are then also recorded in our order management.

• Purpose: answering your enquiry, preparing a quotation and managing the business relationship that follows.
• Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract and performance of the contract with the business you represent); Art. 6(1)(f) GDPR for general correspondence that is not linked to an order.
• Retention: general enquiries are kept for as long as necessary to deal with the matter and are then deleted, unless statutory retention applies. Correspondence that becomes part of a business transaction (quotations, order confirmations, invoices, delivery notes) is kept for seven years under § 212 UGB and § 132 BAO, counted from the end of the calendar year in which the transaction took place.

Notes taken during a telephone call to +43 660 2015298 are treated in the same way as e-mail correspondence.

apexgsm.com also contains WhatsApp links (wa.me and api.whatsapp.com) that open a conversation with our sales number +43 660 2015298 in the WhatsApp app or in WhatsApp Web. No chat widget is embedded on the site, and nothing is transmitted to WhatsApp until you click such a link. Once you write to us through WhatsApp, the content of your messages, your telephone number and the related metadata are processed by WhatsApp, a service of Meta Platforms Ireland Limited (Dublin, Ireland), under WhatsApp's own terms and privacy policy; Meta may transfer this data to Meta Platforms, Inc. in the United States, which is certified under the EU–US Data Privacy Framework. We have no influence over that processing. Messages we receive through WhatsApp are handled in the same way as e-mail: the purposes, legal bases and retention described above apply. Please do not send payment details, passwords or other confidential data through WhatsApp; you can reach us by e-mail or telephone instead at any time.

5. Trade accounts and customer master data

Repair businesses, distributors and resellers who work with us regularly may apply for a trade account. For this we process the company name and legal form, the business address, the VAT identification number, the name, e-mail address and telephone number of the contact person, and the documents required to confirm that you are a trader (for example a business register extract). Where intra-community supplies are involved we may verify the VAT identification number through the European Commission's VIES service.

• Legal basis: Art. 6(1)(b) GDPR (contract with the business you represent) and Art. 6(1)(c) GDPR for tax and accounting obligations.
• Retention: for the duration of the business relationship and thereafter for the statutory retention periods (seven years for accounting records).

6. Cookies

apexgsm.com sets only the cookies described below. We do not use web analytics, tracking or marketing tools, and no advertising cookies are set; for this reason the site does not display a cookie consent banner.

The session cookie and the language cookie are stored under § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), which permits storage that is required to provide a service you have requested; they do not need your consent. You can delete or block cookies in your browser settings at any time; blocking the session cookie may prevent the contact form from working, and deleting the language cookie returns the site to its default language. Cookies set by Google through the YouTube player are described in section 8.

7. Web fonts

The typefaces on apexgsm.com are loaded from Google Fonts (fonts.googleapis.com and fonts.gstatic.com), a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). When a page is opened, your browser requests the font files from Google's servers and transmits your IP address in the process. Google may transfer this data to Google LLC in the United States, which is certified under the EU–US Data Privacy Framework. Further information on Google's data processing is available in its privacy policy at policies.google.com/privacy. Legal basis: Art. 6(1)(f) GDPR, our interest in a uniform presentation of the catalogue.

8. Embedded YouTube video

The About Us page contains a video hosted on YouTube, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The video is embedded with YouTube's standard player, which is loaded as soon as the page opens. From that moment YouTube receives your IP address, the page you are viewing and technical browser data, may set its own cookies and, if you are signed in to a Google account, can link the visit to that account. Google may transfer this data to Google LLC in the United States, which is certified under the EU–US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR, our interest in presenting the company in a short video. The player is loaded only on the About Us page; if you do not wish to be connected to YouTube, do not open that page or block third-party content in your browser settings. We have no influence over Google's processing once the player is loaded; details are in Google's privacy policy at policies.google.com/privacy.

9. Recipients and transfers

Within APEX Technology GmbH, only staff who need the data for sales, logistics or accounting have access to it. Outside the company we pass personal data to:

• the hosting provider, Hostinger International Ltd., and our e-mail provider (processors under Art. 28 GDPR);
• courier companies, which receive the delivery address, the contact name and the telephone number in order to deliver and to send shipment notifications;
• our tax advisor and, where legally required, auditors or public authorities;
• Google Ireland Limited as provider of the web fonts (section 7) and of the YouTube player (section 8);
• Meta Platforms Ireland Limited (WhatsApp), if you choose to contact us through a WhatsApp link (section 4).

Apart from the services named above, we do not transfer personal data to countries outside the European Economic Area. Google and Meta may transfer data to their parent companies in the United States under the EU–US Data Privacy Framework, as described in sections 4, 7 and 8. Where a shipment to a customer outside the EEA requires the carrier to process delivery data there, the transfer is necessary for the performance of the contract (Art. 49(1)(b) GDPR).

10. Your rights

• Access to the personal data we hold about you (Art. 15 GDPR).
• Rectification of inaccurate data (Art. 16 GDPR).
• Erasure, where no statutory retention obligation applies (Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR).
• Data portability for data you provided under a contract (Art. 20 GDPR).
• Objection to processing based on legitimate interests (Art. 21 GDPR).
• Withdrawal of consent with future effect, where processing is based on consent (Art. 7(3) GDPR).

To exercise these rights, write to sales3@apexgmbh.com or by post to the address in section 1. We answer within one month. You also have the right to lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb@dsb.gv.at, www.dsb.gv.at.

11. Security

The website is served exclusively over HTTPS. Access to our mail and order systems is password-protected and limited to authorised staff.

12. Changes to this policy

We update this policy when our processing changes or when the law requires it. The current version applies from 1 October 2026.