Translation for convenience. The German version is legally binding.
Privacy Policy
As of: 6 November 2026
1. Controller
RMC Röthelsteiner Mineral Consulting GmbH
Röthelstein 9, 8131 Mixnitz, Austria
Email: office@rmc.co.at · Phone: +43 3867 20534
We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). There is no obligation to appoint a data protection officer. Please send any questions to office@rmc.co.at.
2. Overview
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Visiting the website | IP address, browser, time, page visited (server logs) | Art. 6(1)(f) GDPR (secure operation) | 14 days |
| Inquiry via the inquiry assistant | Company, name, position, email, phone, country, VAT ID, details on product, quantity, delivery, message, attachments | Art. 6(1)(b) GDPR (pre-contractual measures) | 3 years after last contact; 7 years if an order is placed (§ 132 BAO) |
| AI-assisted pre-processing of inquiries and emails | Content of the inquiry or email | Art. 6(1)(b) and (f) GDPR (fast, complete processing) | same as the related inquiry or email |
| Email communication | Email address, name, content, attachments | Art. 6(1)(b) and (f) GDPR | 3 years after last contact; business correspondence 7 years |
| Customer and business contacts | Company, contact person, contact details, meeting notes | Art. 6(1)(b) and (f) GDPR | Duration of the business relationship plus 3 years |
| Order processing | Master data, order, delivery and invoice data | Art. 6(1)(b) and (c) GDPR | 7 years (§ 132 BAO, § 212 UGB) |
3. Inquiry assistant
When you send an inquiry via our inquiry assistant, we store your details and attachments in our inquiry database and receive a notification by email. You receive a confirmation with a reference number. We use the data exclusively to review your inquiry, prepare an offer and process an order.
Please do not submit health data or other special categories of personal data via the inquiry form.
4. AI-assisted processing
We use artificial intelligence to prepare inquiries and incoming emails: the AI summarises the content, assigns it to a category, identifies missing information and drafts a reply. Every reply and every decision is made by a human. No solely automated decision within the meaning of Art. 22 GDPR takes place.
AI processing is carried out via Lovable AI. In the process, content is transmitted to language models from Google or OpenAI. According to their terms, the providers do not use this data to train their models.
5. Emails to us
Emails to @rmc.co.at addresses are stored in our mailbox and transferred to our internal sales system for processing. There they are prepared with AI assistance as described in section 4 and, where applicable, assigned to an inquiry or a contact.
6. Internal systems
For order processing, invoicing and accounting we use the merchandise management system BüroWARE (SoftENGINE), which is operated within our company. For sales and inquiry processing we use our own web-based system ("RMC OS"), which is connected to a project management system ("Command OS").
7. Recipients and processors
We use carefully selected service providers as processors (Art. 28 GDPR):
| Service provider | Purpose | Location |
|---|---|---|
| Lovable (Lovable Labs Incorporated) | Hosting of the website and the sales system, AI services (Lovable AI) | EU / USA |
| Supabase Inc. (via Lovable Cloud) | Database and file storage for inquiries | EU / USA |
| Google or OpenAI (via Lovable AI) | Language models for AI-assisted processing | USA |
| Resend Inc. | Sending notifications and confirmation emails | USA |
| [E-Mail-Hoster, Name/Ort ergänzen] | Email mailboxes | [ ] |
| [Betreiber Command OS, Name/Ort ergänzen] | Project management, market monitoring | [ ] |
Data is only passed on to other third parties if this is necessary to perform the contract (e.g. to freight forwarders, suppliers, customs agents or inspection companies) or if we are legally obliged to do so (e.g. tax authorities).
Transfers to third countries: For service providers based in the USA, data is transferred on the basis of the adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR) where the provider is certified, otherwise on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
8. Cookies
This website only uses technically necessary storage (e.g. language setting, progress of the inquiry assistant in the browser). We currently do not use analytics or advertising cookies. Should we use such services in the future, we will obtain your consent beforehand.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). You may withdraw any consent given at any time with effect for the future. To do so, write to office@rmc.co.at.
You can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
10. Data security
All transmissions are TLS-encrypted. Only authorised employees of RMC GmbH have access to inquiries and emails.