Privacy for VioMio

Intake is active.

Damm Good Tech GmbH, Hutterstraße 28, 5412 Puch bei Hallein, Austria, is the controller. For privacy and data rights, contact office@dammgood.tech. VioMio is a product brand of Damm Good Tech GmbH.

Enquiries and files. We process your email address, selected smart-home system and optional description. You can also provide indoor scans, exterior photographs and technical documents. We record filenames, sizes, types, checksums, an enquiry reference, receipt time, language and form route. Processing adds status and decision records. We use these data to assess your request, ask questions, prepare a quote and deliver an agreed project.

Provide only necessary information that you have the right to share. You can make an initial enquiry without files. Remove identifiable people, private papers, credentials, keys, security codes and unrelated private details. Do not send health information or other specially protected data. If files concern other people, we need an appropriate legal basis and the required information for those people before use. We may ask for a redacted replacement.

Legal bases. Article 6(1)(b) GDPR applies where processing is necessary for your requested quote or contract with you. Article 6(1)(f) may apply to business contact people and necessary security controls. Our interests are handling business requests and operating a secure service. Legally required business records are processed under Article 6(1)(c). We do not use uploads for advertising, public examples or AI training.

Recipients and location. Wolfgang Damm handles enquiries. Additional people receive access only where needed and with documented approval. Authorised administrators and service providers can have technical access. Cloudflare provides hosting, upload processing, private R2 storage, access protection and notification delivery. Upload objects are stored in an EU-jurisdiction R2 bucket. This does not mean all connection data, email or support processing stays within the EU.

Internal alerts contain only the enquiry reference, route and protected admin link. Files stay in private storage. We use Google Workspace for email correspondence. Necessary working copies can be held on protected work devices, subject to the same deletion rules.

Cloudflare and Google can process data outside the EEA.

Retention. We delete undecided enquiries 30 days after receipt. We delete declined enquiries 30 days after decline and no later than 60 days after receipt. For accepted projects, we use necessary working files during delivery. Source scans, photographs, technical exports and internal model/working copies are deleted 30 days after handover or cancellation, and no later than 1,096 days after first acceptance. A separately agreed continuing service will have its own retention terms disclosed in advance. We delete unnecessary data earlier.

Required business records are kept separately. Austrian accounting records generally have a seven-year period; specific legal duties or proceedings can require longer retention. This is not a blanket requirement to retain home scans. Necessary evidence for a specific legal dispute is restricted to that purpose. Technical deletion jobs can run after the due time; deleted content is no longer available for ordinary use. We make no additional company backup of uploads. Provider redundancy and recovery periods are assessed separately.

Technical data. Hosting processes necessary connection data, such as IP address, request time and requested address. The IP address helps limit abusive requests and is not stored in the enquiry manifest. Admin access processes authorised users' login data. Necessary security processing relies on Article 6(1)(f).

Your rights. Subject to GDPR conditions, you can request access, correction, erasure, restriction and portability. You can object to processing based on legitimate interests. Email office@dammgood.tech and include your enquiry reference if possible. We verify your authority using proportionate means and normally respond within one month. If a legal exception prevents erasure, we explain the reason and remaining retention. You can complain to a competent authority, including the Austrian Data Protection Authority.

Marked fields are necessary for a form enquiry. Without them, the form cannot be submitted; you can contact us by email. Uploads and the additional description are optional. We do not make solely automated decisions with legal or similarly significant effects. The standard/custom route classification supports human handling.

Minimal deletion control records hold the enquiry reference, deletion time and object counts for 30 days. They contain no enquiry content or filenames.