Skip to main content
riteful
Back to home

Privacy Policy

Controller

machma.ai Software FlexCo

Odilienweg 11/28010 GrazAustria

Email: office@machma.aiPhone: +43 677 / 648 20 728

Marketing website hosting

This marketing website is delivered through AWS Amplify Hosting and Amazon CloudFront. The riteful application is operated separately.Purpose: website delivery, load distribution, protection against attacks, and error analysis.Data processed: in particular IP address, time and destination of the request, transferred data volume, referrer, and browser, device, and operating-system information.Legal basis: Article 6(1)(f) GDPR (legitimate interest in a secure, stable, and performant website). Where processing is carried out on our behalf, it is based on Article 28 GDPR.Storage period: log data is retained only for as long as required for delivery, security, and error analysis and is then deleted, unless a statutory obligation or a specific security incident requires longer retention. Any more specific period is determined by the approved AWS configuration.

riteful application and product data processing

The riteful application available at app.riteful.ai is technically and legally separate from this marketing website. The application uses Microsoft Azure services; depending on the feature used, product data is processed through Azure or stored in Neon Postgres.Purpose: provision of the contractually agreed riteful functions, including sign-in, organizational and conversation workflows, and the AI-assisted functions actively used.Data processed: depending on use and customer configuration, this may include account, organization, content, meeting, planning, file, communication, log, and, where applicable, audio, transcription, and AI-processing data.Legal basis: Article 6(1)(b) GDPR for direct contractual relationships; when processing for business customers, data is processed on their documented instructions under a data processing agreement pursuant to Article 28 GDPR.Storage period: according to the deletion and retention rules agreed with the relevant customer and statutory obligations. The data processing agreement and current subprocessor information also apply to product processing.

Server log files

When visiting the website, the following data is processed automatically:

  • IP address
  • Browser type and version
  • Operating system used
  • Page accessed
  • Date and time of access

This data is used for technical provision, security, and error analysis.Legal basis: Article 6(1)(f) GDPR (legitimate interest in a stable and secure website)Storage period: only for as long as the data is needed for the stated purpose; longer retention occurs solely for a specific security incident or to comply with statutory obligations.

Contacting us

If you contact us by email, we process the data you provide (e.g. name, email address, message content) in order to handle your request.Legal basis: Article 6(1)(b) GDPR (pre-contractual measures), Article 6(1)(f) GDPR (legitimate interest in communication)Storage period: until your request has been fully processed and beyond that in accordance with statutory retention obligations.

Consent management with Cookiebot

We use Cookiebot as a consent management platform to obtain, store, and demonstrate your choices regarding non-essential services. Statistics and marketing consent remain denied unless you make a choice.Data processed: consent status and categories, time of the choice, consent identifier, and technically required browser, device, and network information.Purpose: display of the consent interface, storage of your choices, control of consent-dependent services, and evidence of consent.Legal basis: Article 6(1)(c) GDPR (compliance with data-protection accountability obligations) and Article 6(1)(f) GDPR (legitimate interest in reliable consent management).Storage period: until the stored choice expires or is withdrawn and beyond that only where required for statutory accountability obligations. Current cookie lifetimes are shown in the Cookiebot declaration or cookie settings.

Google Tag Manager and Google Analytics 4

Google Tag Manager is the sole technical integration for Google Analytics 4 on this website. Google Analytics is not embedded directly in addition to it. The Tag Manager container and the statistics tags it contains are loaded only after you consent to the Statistics category.Purpose: audience measurement, analysis of website use, and measurement of started and successfully completed demo bookings.Data processed: pages viewed, interactions and events, time, referrer, approximate location information, and browser, device, and operating-system information. Google Analytics may process online identifiers and shortened IP addresses for these purposes.Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by affiliated companies or service providers in third countries cannot be ruled out; the applicable transfer mechanisms are used for such processing.Legal basis: Article 6(1)(a) GDPR (consent). You can change or withdraw your consent at any time with future effect through the cookie settings.Storage period: according to the approved retention setting in the Google Analytics account; event data is deleted no later than the end of that period unless it is deleted earlier or a statutory obligation applies.Further information: https://policies.google.com/technologies/partner-sites

Demo booking with Calendly

We embed the Calendly scheduling service on the “Book a demo” page. The Calendly script is not loaded globally; it is loaded only on this booking page and only after you consent to preference cookies.Purpose: display of available times, scheduling, calendar synchronization, sending the meeting confirmation, and preparing the demo.Data processed: in particular, name, email address, selected time, time zone, information entered in the currently configured form fields, and appointment, communication, usage, and technical log data.Provider: Calendly LLC, USA. Processing in the United States or other third countries cannot be ruled out. Calendly identifies the EU-U.S. Data Privacy Framework and Standard Contractual Clauses in particular as transfer mechanisms.Legal basis: Article 6(1)(b) GDPR (pre-contractual measures at your request). Where Calendly uses non-essential cookies or similar technologies, this takes place only on the basis of your consent under Article 6(1)(a) GDPR.Storage period: until the demo has been held and followed up; after that, only for as long as required for further business initiation, statutory retention duties, or the establishment, exercise, or defense of legal claims. Data that is no longer required is deleted.A successful booking is detected through the “calendly.event_scheduled” event provided by Calendly. The resulting “demo_booking_complete” event is transmitted to Google Analytics only under valid Statistics consent. Appointments recorded in Calendly remain the business source of truth for booking numbers.

Your rights

You have the right to:

  • access your processed personal data
  • rectify incorrect data
  • erase data
  • restrict processing
  • object to processing
  • data portability
  • withdraw consent granted
  • lodge a complaint with a data protection supervisory authority

To exercise your rights, please contact: office@machma.ai

Right to lodge a complaint

You have the right to lodge a complaint with a data protection authority.The competent authority in Austria is:Austrian Data Protection AuthorityBarichgasse 40-421030 Vienna