You should know what happens to the information before you send it.

Controller and contact

PREMIUM ORGANIC GmbH, Nußdorfer Straße 68/21, 1090 Vienna, Austria, is responsible for the processing described on this page. Privacy enquiries and rights requests can be sent to datenschutz@premium-organic.com.

Hosting access data

This website is delivered through OpenAI Sites. OpenAI Ireland Ltd. provides services for EEA business customers and may use documented subprocessors, including Cloudflare for content delivery and web hosting. Technical access and security data can include IP address, request time, requested path, referrer, device and browser information, response status and error or security events.

This processing is used to deliver, secure and troubleshoot the website. The legal basis is the legitimate interest in operating a reliable and secure professional website under Article 6(1)(f) GDPR.

OpenAI Data Processing Addendum · OpenAI subprocessor list

Project brief and secure submission

Form entries remain in the browser until the visitor actively chooses “Submit project brief securely”. The submitted contact, company, role, market, species, format, project-question and optional technical details are then stored in a protected PP+ project-intake database and assigned a unique reference. If internal notification is configured, the server also transmits the reference, business contact details, routing lane and relevant project context to PREMIUM ORGANIC’s contracted email or workflow service so that the responsible internal review is alerted. This notification is not used for advertising and the protected project-intake database remains the authoritative record. If present in the current URL, utm_source, utm_medium, utm_campaign, utm_content, utm_term, content_id and source can be added as routing context; these values are not written to localStorage, sessionStorage or a cookie. A separately offered email fallback opens the visitor’s configured email application and is not sent until the visitor confirms it there.

The purpose is to assess and answer the B2B enquiry, route it to the relevant technical, quality, regulatory or commercial review and take requested pre-contractual steps. The legal basis is Article 6(1)(b) GDPR where the request concerns a contract or pre-contractual action with the sender, and otherwise Article 6(1)(f) GDPR based on the legitimate interest in relevant B2B project communication.

Cookies and browser storage

The project-brief routing does not store campaign parameters in localStorage or sessionStorage. Optional analytics is described separately below.

Google Analytics 4 is optional. It helps Premium Organic understand how visitors use its corporate website, Alpin Heilmoor Extract and Peat Powder Plus. It loads only after you choose Allow analytics on this website. With consent, analytics uses pseudonymous cookie identifiers to measure visits, sources, pages, time in the foreground, scroll depth, navigation, downloads and steps towards an enquiry. Related-site journeys can be linked where consent is granted on the sites involved. URLs are stripped of personal enquiry parameters; form contents and receipt references are not sent to Analytics. No advertising profiles or session recordings are enabled. Analytics and your choice.

Direct email and resulting business communication

If a visitor uses the email fallback, contacts us directly or continues a submitted project enquiry, PREMIUM ORGANIC GmbH processes the supplied information to answer the request, provide controlled documents, discuss a sample or take pre-contractual steps. Statutory record keeping is based on Article 6(1)(c) GDPR where applicable.

Recipients and international transfers

Access is limited to authorised PREMIUM ORGANIC staff and, where necessary, hosting, email, IT, professional-advisory or other service providers. Data is not sold. If a provider processes data outside the European Economic Area, an applicable adequacy decision or appropriate safeguards such as Standard Contractual Clauses are used where required. The OpenAI documents linked above describe its current provider and transfer framework.

Retention

Hosting and security records are retained according to the relevant provider configuration, security needs and legal obligations. Project-intake and enquiry data is reviewed and kept only as long as needed to handle the request and any resulting business relationship, and thereafter only for applicable statutory retention periods or the establishment, exercise or defence of legal claims. A fixed period cannot be stated independently of the enquiry and resulting transaction.

Rights and complaints

Subject to applicable law, data subjects may request access, rectification, erasure, restriction or portability and may object to processing based on legitimate interests. Consent, if requested for a future optional service, may be withdrawn for the future. Complaints may be lodged with the Austrian Datenschutzbehörde or another competent supervisory authority.

No automated decision

The current PP+ website does not use the project brief for automated decision-making or profiling. Required fields and the routing lane make the intended B2B request understandable and assign it to the relevant human review.