Data Processing Agreement (DPA)

1. Subject and Parties

This agreement is entered into between the customer (hereinafter referred to as the "Controller") and Barmiestqira GmbH, Landstraße 142, 4020 Linz, represented by Managing Director Christoph Gruber, share capital 10,000 € (hereinafter referred to as the "Processor"). The subject of this agreement is the processing of personal data required to provide laser engraving and cutting services.

2. Nature and Purpose of Processing

Processing includes categories of data necessary for the creation of layouts and physical production (e.g., names, logos, and addresses for office signage). All processing is carried out exclusively to fulfill the customer's order and in accordance with our Terms and Conditions.

3. Obligations of the Processor

The Processor undertakes to process personal data only on the documented instructions of the Controller. We ensure that all persons authorized to process the data are bound by confidentiality. We strictly adhere to the General Data Protection Regulation (GDPR/DSGVO) and the Austrian Data Protection Act (DSG).

4. Sub-processors

To provide its services, Barmiestqira GmbH utilizes the following sub-processors:

• World4You Internet Services GmbH (Wolfgang-Pauli-Straße 2, BT3, 4020 Linz) for website hosting and email communication.
• FormSubmit (USA) for the technical transmission of contact requests.

The Controller will be notified of any changes regarding the appointment or replacement of sub-processors.

5. Data Security and Incident Reporting

We employ appropriate technical and organizational measures to protect data against loss or unauthorized access. In the event of a personal data breach, we will inform the Controller without undue delay. Reporting follows the guidelines of the Austrian Data Protection Authority (Österreichische Datenschutzbehörde - DSB), Barichgasse 40-42, 1030 Wien.

6. Deletion and Return of Data

Upon termination of services or at the request of the Controller, all data will be deleted or returned, provided that no statutory retention obligations (e.g., under Austrian commercial law) conflict with this. Deletion is carried out within the timeframes specified in our internal policies.

7. Audit and Final Provisions

The Controller has the right to verify compliance with this agreement through audits. This agreement is governed by Austrian law. The place of jurisdiction for all disputes is Linz. Supplementary provisions can be found in our Privacy Policy.