Privacy Policy
TriViva Pharm GmbH

Version 1.0 – Status: February 2026

1. General Information on Data Processing

The protection of your personal data is of particular concern to TriViva Pharm GmbH (hereinafter “TriViva Pharm”, “we”).
We process your personal data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
Controller within the meaning of the GDPR:
TriViva Pharm GmbH
Schwechater Straße 37
2322 Zwölfaxing
Telephone: +43 676 38 44 013
E-mail: marcell.krall@triviva-pharm.at

2. Legal Bases and Purposes of Processing

TriViva Pharm processes personal data that you provide to us or that we collect in the course of the business relationship on the following legal bases:
– Art. 6 para. 1 lit. b GDPR (performance of a contract and pre-contractual measures)
– Art. 6 para. 1 lit. c GDPR (legal obligations)
– Art. 6 para. 1 lit. f GDPR (legitimate interest)
– Art. 6 para. 1 lit. a GDPR (consent, if obtained)

Processing is carried out in particular for the following purposes:
– initiation, handling, and maintenance of business relationships
– communication with customers, suppliers, business partners, and interested parties
– contract performance, invoicing, and payment processing
– safeguarding legitimate business interests (e.g. organization, IT security)

3. Recipients of Personal Data

For the fulfillment of the above-mentioned purposes, we use processors where necessary.
Personal data may be transferred to the following categories of recipients within the European Union:
– banks and payment service providers
– tax advisors, auditors, and legal representatives
– courts and administrative authorities
– insurance companies
– IT service providers (e.g. hosting, e-mail, and cloud providers)
– business partners, insofar as this is necessary for contract performance
Data will not be disclosed to other third parties unless there is a legal obligation to do so or you have expressly consented.

4. Contact

If you contact us by e-mail or via a contact form, the data you provide will be processed for the purpose of handling your request.
These data will be stored for the duration of processing and for a period of up to six months thereafter and will then be deleted, unless a further business relationship arises or statutory retention obligations apply.

5. Website and Hosting

Our website serves exclusively for company presentation, information, and contact.
The website is hosted by an external hosting provider within the European Union.
In the course of operating the website, technically necessary access data are processed (e.g. IP address in truncated form, time of access, browser type) in order to ensure the secure operation of the website.
The legal basis for this is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.

6. Cookies

Our website uses technically necessary cookies to ensure basic functionality.
Cookies are small text files that are stored on your end device.
You can configure your browser so that you are informed about the setting of cookies or disable cookies entirely.
If cookies are disabled, the functionality of the website may be restricted.

7. Web Analytics

If a web analytics tool of the hosting provider is used on the website, processing is carried out exclusively in an anonymized or pseudonymized manner.
Processing serves to improve the website and is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
These data are not combined with other personal data.

8. Duration of Data Storage

We store personal data only for as long as necessary for the respective processing purposes, but in any case:
– for the duration of the business relationship
– until the expiry of statutory retention, limitation, and documentation obligations
– beyond that, for as long as legal claims may be asserted

9. Rights of Data Subjects

You are entitled to the following rights under the GDPR:
– right of access
– right to rectification
– right to erasure
– right to restriction of processing
– right to data portability
– right to object to processing
If processing is based on your consent, you may revoke it at any time.
To exercise your rights, please contact us using the contact details stated above.

10. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority.
In Austria, this is the Austrian Data Protection Authority.

11. Updates to the Privacy Policy

We reserve the right to amend this privacy policy as necessary in response to legal or technical developments.