Privacy Policy

1. Controller and Contact Details

The controller responsible for data processing on this website (Art. 4 (7) GDPR) is:

Sameric Bio FlexCo
Helmut Qualtinger Gasse 2, 1030 Vienna, Austria
Registered with the Commercial Court of Vienna under FN 673047a
Email: contact@sameric.bio

For all privacy-related questions or to exercise your data protection rights, please contact us at the email address above.

2. Scope

This privacy policy explains what personal data we collect when you visit sameric.bio, how we use it, and what rights you have under the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz, DSG). We process personal data only to the extent necessary to operate this website, respond to inquiries, and understand how visitors use our site.

3. Hosting (Webflow)

Our website is built and hosted using Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When you visit the site, Webflow's servers automatically process technical data (e.g., IP address, browser type, operating system, referrer URL, date and time of access, pages requested) to deliver the website and ensure its security and stability.

• Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in providing a secure and functional website).
• International transfer: Webflow may process data in the United States. Webflow participates in the EU-U.S. Data Privacy Framework and offers Standard Contractual Clauses as a transfer safeguard.
• Retention: Server log data is retained by Webflow only for a limited period for security and diagnostic purposes.

4. Web Analytics (Google Analytics)

We use Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to understand how visitors use our website (e.g., pages visited, time on page, approximate location, device and browser type).

• Legal basis: Google Analytics is not strictly necessary for the website to function. It is only activated after you give explicit, opt-in consent through our cookie consent banner (Art. 6 (1) (a) GDPR in conjunction with § 165 (3) TKG 2021). You may withdraw consent at any time via the cookie settings in the website footer.
• IP anonymization: IP addresses are shortened/anonymized before storage where technically possible.
• Retention: Analytics data is deleted after 14 months.
• Advertising features: Google Signals and cross-device advertising features are disabled.
• International transfer: Data may be processed by Google in the United States, based on Google's certification under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
• Opt-out: You can prevent data collection generally via the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout).

5. Cookies

Our website uses a cookie consent banner. Cookies strictly necessary for basic website functions are set on the basis of Art. 6 (1) (f) GDPR / § 165 (3) TKG 2021. All non-essential cookies, including Google Analytics cookies, are only set after you actively consent via the banner, and no such cookie is activated by default. You can withdraw your consent at any time with future effect.

6. Contact Form

If you use the contact/inquiry form on our website, we process the personal data you submit (e.g., name, email address, message content) solely to respond to your inquiry.

• Legal basis: Art. 6 (1) (b) GDPR (steps necessary prior to entering into a contract) or Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries), depending on the nature of your request.
• Retention: We retain this correspondence only as long as necessary to handle your request and any follow-up, unless statutory retention obligations require otherwise.

7. LinkedIn Links

Our website contains links to our LinkedIn page. These are simple hyperlinks; clicking them takes you to LinkedIn's platform, where LinkedIn's own privacy policy applies. No LinkedIn plugin, widget, or embedded content is integrated into our website, and no data is transmitted to LinkedIn merely by visiting sameric.bio.

8. Recipients of Personal Data

Personal data is shared only with the following processors, each bound by a data processing agreement under Art. 28 GDPR:

• Webflow, Inc. (website hosting)
• Google Ireland Limited / Google LLC (web analytics)

We do not sell or rent personal data to third parties.

9. International Data Transfers

Where personal data is transferred outside the European Economic Area (e.g., to the United States via Webflow or Google), such transfers are based on the EU-U.S. Data Privacy Framework and/or EU Standard Contractual Clauses, recognized by the European Commission as providing an adequate level of protection.

10. Your Rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you (Art. 15 GDPR)
• Request rectification of inaccurate data (Art. 16 GDPR)
• Request erasure of your data (Art. 17 GDPR)
• Request restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on legitimate interest (Art. 21 GDPR)
• Withdraw consent at any time with future effect, where processing is based on consent (Art. 7 (3) GDPR)

To exercise any of these rights, contact us at contact@sameric.bio.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Website: dsb.gv.at

12. Data Security

We use appropriate technical and organizational measures, including TLS/SSL encryption, to protect personal data against unauthorized access, loss, or misuse.

13. Changes to This Policy

We may update this privacy policy to reflect changes in our services, legal requirements, or the tools we use. The version published on sameric.bio at any given time is the applicable one