DATA PROTECTION

Privacy Policy

Version: 15 October 2026

1. Controller

Rock Investments GmbH
Rudolfinergasse 22/1
1190 Wien, Austria
Email: Adam.nada@rockinvestments.eu

2. Information we process

When you visit this website, technical information such as your IP address, browser, device information, access time and requested pages may be processed by the hosting provider to deliver the website and protect its security. When you contact us by email, we process the details you provide and the correspondence needed to handle your enquiry.

3. Purposes and legal bases

Technical processing required for website delivery and security is based on our legitimate interests (Article 6(1)(f) GDPR). Processing an enquiry is based on legitimate interests (Article 6(1)(f) GDPR), or Article 6(1)(b) GDPR where your enquiry concerns pre-contractual steps.

4. Hosting and third-party resources

The website is hosted using Wix services. The site also requests web fonts from Google Fonts; when those fonts are loaded, your browser may connect to Google servers and transmit technical connection information, including your IP address. The providers' processing and any international transfers depend on their applicable arrangements and policies. We will review these integrations before the main-domain launch.

5. Cookies

We do not intentionally operate advertising or analytics cookies on these static pages. Hosting or platform services may use technically necessary cookies or similar technologies. Any additional tracking or optional cookies would require a corresponding update to this notice and, where legally required, prior consent.

6. Retention

We retain email enquiries only for as long as necessary to respond, manage a business relationship and meet applicable legal obligations. Technical logs are retained according to the hosting provider's operational and security policies. Specific retention periods are subject to confirmation.

7. Recipients and transfers

Service providers supporting hosting and communication may process personal data on our behalf. Where personal data is transferred outside the EEA, applicable GDPR safeguards must be used.

8. Your rights

Subject to applicable law, you may request access, rectification, erasure, restriction of processing, data portability and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time. Contact us using the email above. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), www.dsb.gv.at.

9. Changes

We may update this notice when our services, technologies or legal obligations change.

This notice should be reviewed against the website's actual hosting, cookies, third-party services and retention settings before launch on the primary domain.