Privacy Policy

Last updated: October 2026

This privacy policy applies to the website redxgrid.com.

Controller

The controller responsible for the processing of personal data on this website is Ismail Aboud, sole trader (Einzelunternehmer), operating under the name REDXGRID, Untere Donaulände 62, 4020 Linz, Austria, email [email protected]. Further details are given in the Legal Notice.

Visiting the website

When you visit this website, your browser transmits technical data such as your IP address, the date and time of access, the page requested and information about your browser and device. We process this data to deliver the website and to protect it against misuse and attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. Server log data is deleted after 14 days.

We count page views with a statistics tool that we operate ourselves on servers in the European Union. It does not use cookies and does not identify individual visitors. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is understanding how the website is used.

Optional technologies for analytics and marketing are only used if you consent in the cookie banner (Article 6(1)(a) GDPR and § 165(3) TKG 2021). You can change or withdraw your consent at any time via "Cookie settings" at the bottom of every page; withdrawal does not affect processing carried out before it. We store your choice in order to be able to demonstrate it (Article 7(1) GDPR). Details on the individual cookies, their purpose and their duration are given in the Cookie Policy.

Enquiries and pilot requests

If you contact us through a form or by email, we process the information you provide, such as name, email address, organisation, role, country and your message, in order to handle your request and, where applicable, to prepare a contract. The legal basis is Article 6(1)(b) GDPR and, for other business enquiries, Article 6(1)(f) GDPR; our legitimate interest is responding to enquiries. Providing this data is neither legally nor contractually required, but without it we cannot respond to your request.

To protect our forms against spam and misuse, we use Cloudflare Turnstile and short-lived technical checks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the protection of our forms.

If you ask to receive updates from us, we only send them after you have confirmed your email address (Article 6(1)(a) GDPR and § 174 TKG 2021).

If you subscribe to our newsletter, you will receive an email asking you to confirm your subscription. You are only subscribed once you have confirmed it (double opt-in). We record the time of your subscription and confirmation in order to demonstrate your consent. The legal basis is Article 6(1)(a) GDPR. You can unsubscribe at any time using the link in every newsletter.

Meeting bookings

The booking calendar of our service provider Brevo is only loaded after you click "Show available times". If you book a meeting, the data you enter, such as name, email address, organisation, job title, country, phone number if provided and your message, is used to arrange and hold the meeting. The legal basis is Article 6(1)(b) GDPR. You can also contact us by email instead.

Job applications

We process application data in order to assess applications (Article 6(1)(b) GDPR). Application data is deleted no later than seven months after the end of the application process, unless you consent to longer storage; this period serves the defence of legal claims (Article 6(1)(f) GDPR).

Recipients

We use service providers who process personal data on our behalf and under our instructions on the basis of data processing agreements (Article 28 GDPR): Hetzner Online GmbH (hosting), Cloudflare, Inc. (network delivery and security), Sendinblue SAS (Brevo) (emails and booking calendar), HubSpot Ireland Ltd (customer relationship management), Microsoft Ireland Operations Ltd (email), Backblaze, Inc. (encrypted backups) and, only with your consent, Google Ireland Ltd (analytics). We do not sell personal data. Beyond this, data is only disclosed where we are legally obliged to do so.

Transfers outside the EU

Some of these service providers are based in the United States or belong to companies based there, so personal data may be transferred to the United States. Such transfers are based on the adequacy decision for the EU-U.S. Data Privacy Framework (Article 45 GDPR) where the provider is certified under it, and otherwise on the standard contractual clauses of the European Commission (Article 46(2)(c) GDPR).

Storage period

We keep personal data only for as long as it is needed for the purposes described above or as required by law. Enquiries that do not lead to a contract are deleted three years after the last contact. Data relating to contracts is kept for the periods required by Austrian commercial and tax law. Records of consent are kept for three years after your last change.

Automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Articles 15 to 18 and 20 GDPR), and the right to withdraw your consent at any time with effect for the future (Article 7(3) GDPR). You may also lodge a complaint with a data protection supervisory authority. To exercise these rights, please contact [email protected]. Please feel free to reach out to us if you have any questions.

Right to object: Where we process data on the basis of legitimate interests (Article 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Article 21(1) GDPR). You may object to the processing of your data for direct marketing at any time (Article 21(2) GDPR).

Changes

We may update this privacy policy when our processing changes. The version published on this page applies.