Privacy Policy
Last updated 8 October 2026. This version replaces the version of 16 August 2026.
This Privacy Notice for Dpro GmbH (‚we‘, ‚us‘, or ‚our‘) describes how and why we access, collect, store, use, and share (‚process‘) your personal information when you use our services (‚Services‘), including when you:
- Visit our website at https://dpro.at, or any website of ours that links to this Privacy Notice
- Contact us by email, telephone or through a form on our website
- Engage with us as a client, project partner or supplier, including in sales, marketing or events
We are a software company specialising in AI software solutions, web development and consulting.
Questions or concerns? If you do not agree with our policies and practices, please do not use our Services. If you have any questions, contact us at privacy@dpro.at.
Controller
- Dpro GmbH, Wipplingerstraße 20/18, 1010 Wien, Austria
- Represented by: Mohamed Alarade, Managing Director
- Commercial register: FN 631492s, Commercial Court of Vienna. VAT: ATU81090445
- Data protection contact: privacy@dpro.at
- Full company details: Impressum
We have not appointed a Data Protection Officer, as the conditions of Article 37 GDPR do not apply to us.
Summary of key points
What personal information do we process? Only what you give us when you contact us, and the technical data your browser sends when you load the website.
Do we process sensitive personal information? No.
Do we collect information from third parties? No. We do not buy personal data and we do not obtain it from data brokers, public databases or marketing partners.
How do we process your information? To answer your enquiry, to operate and secure the website, and to comply with legal obligations. Each purpose has a stated legal basis in section 3.
With whom do we share it? With our hosting provider, and with professional advisers where required. We do not sell personal information and we do not share it with advertising networks.
What are your rights? Access, rectification, erasure, restriction, portability, objection, and the right to complain to the Austrian Data Protection Authority. See section 11.
How do you exercise your rights? Email privacy@dpro.at. We respond within one month.
1. What information do we collect?
In Short: information you give us, and technical data collected automatically when you visit.
Personal information you disclose to us
We collect the personal information you voluntarily provide when you enquire about us or our Services, or otherwise contact us: your name, email address, telephone number, company or organisation, and the content of your message. If you use the contact form, these details are sent by our own web server to our mailbox; no external form service is involved. All information you provide must be true, complete and accurate.
Sensitive information. We do not process special categories of personal data within the meaning of Article 9 GDPR.
Information collected automatically
When you load a page, our server records the following in log files: the address requested, date and time, the volume of data transferred, the HTTP status code, the referring address, your browser type and version, your operating system, your language setting, and your IP address.
This data is needed to operate the website, to keep it available and secure, and to investigate faults and attacks. We do not combine it with other sources and we do not use it to identify you.
Information collected from other sources
None. We do not obtain personal information from data brokers, data providers, public databases, affiliate programmes, joint marketing partners or social media platforms, and we do not build profiles for targeted advertising.
2. How do we process your information?
In Short: to answer enquiries, to run and secure the website, and to meet legal obligations.
- To respond to your enquiry and to carry out any resulting contractual or pre-contractual communication.
- To operate and secure the Services, including fault diagnosis and the prevention and investigation of misuse and attacks.
- To send you information about our services, only where you have asked for it or where the law permits it. You can opt out at any time.
- To comply with legal obligations, including retention duties under tax and commercial law and responses to lawful requests from authorities.
3. What legal bases do we rely on?
In Short: we process your information only when we have a valid legal basis under the GDPR.
| Processing | Legal basis |
|---|---|
| Answering your enquiry; pre-contractual and contractual communication | Article 6(1)(b) GDPR – performance of a contract or steps prior to it. Where no contractual relationship is intended, Article 6(1)(f) – our legitimate interest in responding |
| Server log files, security, fault diagnosis | Article 6(1)(f) GDPR – legitimate interest in a secure and functioning website |
| Direct marketing to an address you gave us | Article 6(1)(a) GDPR – your consent. Sending it is additionally governed by section 174 Austrian Telecommunications Act 2021 |
| Retention of records with tax or commercial relevance | Article 6(1)(c) GDPR – legal obligation, in particular section 132 Austrian Federal Fiscal Code (BAO) and section 212 UGB |
| Establishing, exercising or defending legal claims | Article 6(1)(f) GDPR – legitimate interest |
4. When and with whom do we share your personal information?
In Short: with the providers who run our website, and where the law requires it. We do not sell your data.
We share personal information only with processors who act on our instructions under a data processing agreement pursuant to Article 28 GDPR, and only to the extent needed for their task:
- Website hosting: Verpex – see section 13
- Email and office infrastructure used to receive and answer your message
- Professional advisers – tax adviser, auditor, legal counsel – where required for their mandate or by law
We do not share personal information with advertising networks, retargeting platforms, affiliate programmes, data brokers or social networks, and we do not sell it.
Business transfers. We may transfer your information in connection with a merger, sale of company assets, financing or acquisition of all or part of our business. Any recipient remains bound by this Notice.
Transfers outside the European Economic Area
Our website is hosted in Germany, within the European Union. Personal data collected through this website is not transferred to countries outside the European Economic Area.
5. What is our stance on third-party websites?
In Short: we are not responsible for data you give to websites we merely link to.
Our Services may link to third-party websites or services that are not affiliated with us. We make no guarantee regarding such third parties and are not liable for loss or damage caused by their use. A link does not imply endorsement. Data collected by third parties is not covered by this Notice; please review their own policies.
6. Do we use cookies and other tracking technologies?
In Short: no.
This website sets no cookies and uses no web analytics, tracking pixels, fingerprinting or similar technologies. Fonts, images and scripts are delivered from our own server; no third-party content is loaded when you view a page. A consent banner is therefore not required.
Links to external services – for example to our LinkedIn page or to a map – are ordinary links. Data is only transmitted to those providers if you follow the link, and their own privacy policies then apply.
7. Do we offer artificial intelligence-based products?
In Short: yes, for our clients – but we do not analyse website visitors with them.
As part of our Services we build and operate products, features and tools powered by artificial intelligence and machine learning (‚AI Products‘). Some of these are delivered through third-party AI service providers, including OpenAI and Flowxtra AI. Where a client uses such a product, the input and output necessary for that function are processed by those providers on the basis of the agreement with the client and a data processing agreement with the provider.
This does not apply to visitors of this website. Data collected through this website – your enquiry, your IP address, log data – is not sent to any AI service provider, is not used to train models, and is not subject to automated decision-making or profiling within the meaning of Article 22 GDPR.
Where Dpro GmbH participates in a funded project or acts as a processor for a client, the applicable roles, purposes and safeguards are set out in the respective contract or grant agreement rather than in this Notice.
Bias and fairness. Our commitments on examining training and reference data for bias, on evaluating model output across groups rather than only in aggregate, and on publishing known limitations of our systems are set out in our Diversity and Equal Opportunity Strategy. Those commitments concern the fairness of the systems we build; they do not create any additional processing of your personal data.
8. How long do we keep your information?
In Short: only as long as needed for the stated purpose, and as long as the law requires for records with tax relevance.
| Data | Retention |
|---|---|
| Server log files | Deleted after 30 days at the latest, unless a security incident requires longer retention |
| Enquiries with no further business relationship | Deleted once the enquiry is concluded, at the latest after 12 months |
| Correspondence and records with tax or commercial relevance | Seven years, as required by section 132 BAO. Longer where a legal dispute requires it |
| Consent records | For the duration of the consent and three years after its withdrawal, as evidence of lawfulness |
When we have no ongoing lawful purpose, we delete or anonymise the data. Where immediate deletion is not possible – for example because the data is held in backup archives – we isolate it from further processing until deletion is possible.
9. How do we keep your information safe?
In Short: appropriate technical and organisational measures – but no transmission over the internet can be guaranteed to be fully secure.
We apply appropriate technical and organisational security measures, including transport encryption (TLS) for this website, access control, and regular updates of the software we operate. Despite these efforts, no electronic transmission or storage technology can be guaranteed to be completely secure. You should access the Services only from a secure environment.
10. Do we collect information from minors?
In Short: our Services are not directed at children.
We do not knowingly collect data from or market to children, and we do not knowingly sell such information. Under section 4(4) of the Austrian Data Protection Act, consent given by a child under 14 in relation to information society services is not valid without the consent of the holder of parental authority. If we learn that we hold personal information from a child, we delete it promptly. If you become aware of any such data, contact privacy@dpro.at.
11. What are your privacy rights?
In Short: you can see, correct, delete and object – and you can complain to the Austrian authority.
You have the right to request access to your personal information and a copy of it (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), and to object to processing based on our legitimate interests (Article 21). You also have the right not to be subject to a decision based solely on automated processing (Article 22); as stated in section 7, we do not carry out such processing.
Withdrawing your consent. Where we rely on consent, you may withdraw it at any time by emailing privacy@dpro.at. Withdrawal does not affect the lawfulness of processing carried out before it, nor processing based on another legal basis.
Opting out of marketing. Use the unsubscribe link in any email we send, or email us. We may still send you service-related messages necessary to answer your request.
To exercise any right, email privacy@dpro.at. We respond within one month, as required by Article 12(3) GDPR. We may ask you to confirm your identity where this is necessary to protect your data.
Right to lodge a complaint. If you believe our processing infringes data protection law, you may lodge a complaint with the competent supervisory authority. Ours is:
- Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien, Austria – dsb.gv.at
If you are resident in another EEA state, you may also complain to your own national authority.
12. Controls for Do-Not-Track features
Most browsers include a Do-Not-Track (‚DNT‘) setting. No uniform technical standard for recognising DNT signals has been finalised, and we therefore do not currently respond to them. This has no practical effect on your privacy on this website: as described in section 6, we do not use any tracking. If a binding standard is adopted, we will update this Notice.
13. Using Verpex as a hosting provider
We use Verpex as our hosting provider to deliver this website securely and reliably. In doing so, data such as IP addresses and server log data is processed on their servers on our behalf, under a data processing agreement pursuant to Article 28 GDPR. The server location and, where applicable, the safeguards for transfers outside the EEA are stated in section 4. See verpex.com/privacy-policy.
14. Do we make updates to this Notice?
In Short: yes, when our processing or the law changes.
We update this Notice as necessary. The current version is identified by the date at the top of this page. Where changes are material, we will draw attention to them on this page. Previous versions are available on request.
15. How can you contact us about this Notice?
Email privacy@dpro.at, or write to:
Dpro GmbH
Wipplingerstraße 20/18
1010 Wien
Austria
16. How can you review, update or delete the data we collect from you?
You may request access to the personal information we hold about you, details of how we have processed it, correction of inaccuracies, or its deletion, and you may withdraw a consent you have given. These rights may be limited in specific circumstances by applicable law – for example where a statutory retention duty applies, as set out in section 8.
To make a request, email privacy@dpro.at.