Privacy Policy

Last updated: August 2026

1. Controller

Velaron Capital Advisors is a brand of Velaron Holding GmbH. The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Velaron Holding GmbH Siezenheimerstraße 35 5020 Salzburg, Austria

Commercial register number: FN 514465t Register court: Landesgericht Salzburg VAT ID: ATU74757168 Managing Director: Michael Holböck

Email: info@velaron.group Phone: +49 160 5300055

If you have any questions about data protection, you can contact us at any time using the details above.

2. General information and legal bases

We process your personal data exclusively in accordance with the GDPR, the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act (TKG 2021). This privacy policy explains what data we process, for what purpose, on what legal basis and what rights you have.

Depending on the specific processing operation, we rely on the following legal bases:

  • Art. 6(1)(a) GDPR – Consent: you have given us permission to process your data for a specific purpose (e.g. analytics and marketing cookies).
  • Art. 6(1)(b) GDPR – Contract: we need your data to perform a contract or pre-contractual measures at your request.
  • Art. 6(1)(c) GDPR – Legal obligation: we are required by law to process the data (e.g. retention obligations under commercial and tax law).
  • Art. 6(1)(f) GDPR – Legitimate interests: we have a legitimate interest in the processing, such as the secure, stable and efficient operation of our website, and your rights and freedoms do not override that interest.

Providing personal data is generally voluntary. However, without certain data (for example when contacting us) we may not be able to respond to your enquiry.

3. Your rights

You have the following rights in relation to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on legitimate interests (Art. 21 GDPR)
  • Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR). Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

To exercise these rights, please contact us at info@velaron.group.

If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with the competent supervisory authority:

Österreichische Datenschutzbehörde (Austrian Data Protection Authority) Barichgasse 40–42, 1030 Vienna, Austria Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at Website: www.dsb.gv.at

4. Data security

We use technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. This website uses TLS/SSL encryption (recognisable by “https://” and the lock icon in your browser) to protect data transmitted between your browser and our server.

Please note that data transmission over the internet can never be completely secure. Absolute protection of data against access by third parties is not possible.

5. Hosting and server log files

This website is hosted by:

dieBeiden Internetagentur GmbH Ischlerbahnstraße 23 5301 Eugendorf, Austria Phone: +43 6225 28668 Email: wir@diebeiden.at

Our hosting provider processes personal data on our behalf as a processor on the basis of a data processing agreement pursuant to Art. 28 GDPR.

When you access this website, the web server automatically records information in so-called server log files, which your browser transmits automatically:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the file accessed
  • Referrer URL (the website from which you accessed our site)
  • Browser type and version, operating system
  • Amount of data transferred and access status (HTTP status code)

This data is processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free provision of the website, security against attacks and misuse, and troubleshooting. This data is not merged with other data sources. Log files are deleted after 30 days at the latest, unless retention is required for evidentiary purposes in the case of a security incident.

6. Cookies and consent management

Cookies are small text files stored on your device by your browser. They allow us to recognise your browser, remember your settings and analyse the use of our website. In addition to cookies, comparable technologies such as local storage and pixels may be used.

We distinguish between:

  • Technically necessary cookies, which are required for the website to function (e.g. storing your cookie preferences, spam protection). These are used on the basis of Art. 6(1)(f) GDPR and § 165(3) TKG 2021.
  • Optional cookies and technologies for statistics, analysis and marketing purposes. These are only used with your consent pursuant to Art. 6(1)(a) GDPR and § 165(3) TKG 2021.

Consent management with Complianz

For the management of your consent we use Complianz Privacy Suite (GDPR/CCPA) Premium, a consent management solution provided by Really Simple Plugins B.V., Nieuwe Kerkstraat 15, 8011 XK Zwolle, Netherlands.

Complianz runs on our own web server. When you visit our website for the first time, a consent banner allows you to accept, reject or individually select cookie categories. Your selection is stored in a cookie and in the local storage of your browser, together with a pseudonymous consent ID, the time of consent and the categories selected, so that the banner does not have to be displayed again on every visit and so that we can demonstrate consent as required by Art. 7(1) GDPR. No personal data is transferred to the plugin provider.

Until you give your consent, scripts requiring consent are blocked and no cookies requiring consent are set.

Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (documentation of consent) and Art. 6(1)(f) GDPR (legitimate interest in legally compliant website operation).

You can change or withdraw your settings at any time via the cookie settings link in the footer of this website.

You can also configure your browser to block cookies, to inform you when cookies are set, or to delete cookies automatically when you close the browser. Disabling cookies may limit the functionality of this website.

7. Contacting us

7.1 Contact by email or phone

If you contact us by email or telephone, the data you provide (e.g. name, email address, telephone number, content of your message) will be stored and processed by us in order to handle your enquiry.

Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures; otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries addressed to us.

Retention: we delete this data once it is no longer required, unless statutory retention obligations under commercial or tax law apply (generally 7 years in Austria).

7.2 Contact form

Our contact form is provided by Elementor Pro Forms (Elementor Ltd., 21 Yakov Street, Ramat Gan, Israel). The form runs on our own web server; no form data is transmitted to Elementor for the purpose of processing your enquiry. For Israel, the European Commission has issued an adequacy decision confirming an adequate level of data protection.

The following details are mandatory in order to submit the form:

  • Name
  • Email address

Any further information you provide (such as your company, telephone number or the content of your message) is voluntary. When you submit the form, the data entered is stored in the database of our website and additionally sent to us by email. Your IP address and the time of submission may also be logged for security reasons and to prevent misuse.

Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures; otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.

Retention: form submissions are deleted once your enquiry has been dealt with in full and no statutory retention obligations prevent deletion.

7.3 Spam protection with Google reCAPTCHA

To protect our forms against automated submissions and spam, we use Google reCAPTCHA, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics in order to determine whether the input is being made by a human or by an automated program. This may include the IP address, the time spent on the website, mouse movements, browser and device information, and cookies already set by Google. This data is transmitted to Google and may also be processed on servers of Google LLC in the USA. Google LLC is certified under the EU–US Data Privacy Framework.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website and forms from spam and automated abuse.

Further information: https://policies.google.com/privacy and https://policies.google.com/terms

8. Web analytics and marketing

The following services are only used after you have given your consent via our consent banner (Art. 6(1)(a) GDPR and § 165(3) TKG 2021). Until then, the corresponding scripts are blocked by Complianz. You can withdraw your consent at any time with effect for the future via the cookie settings in the footer.

8.1 Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to manage website tags via a single interface. Google Tag Manager itself does not create user profiles, does not store cookies and does not carry out any independent analysis. It only triggers other tags, which may in turn collect data. Google Tag Manager does not access this data.

Legal basis: Art. 6(1)(a) GDPR (consent), insofar as tags requiring consent are triggered.

Further information: https://policies.google.com/privacy

8.2 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies and similar technologies to analyse how you use this website. Information generated about your use of the website is generally transmitted to a Google server and stored there. Processing may also take place on servers of Google LLC in the USA.

The following data may be processed, among others:

  • Truncated IP address (IP anonymisation is active in Google Analytics 4 by default; the IP address is shortened within the EU/EEA before any transfer)
  • Pages viewed, time spent, scroll depth, clicks, downloads
  • Approximate location (country, region, city)
  • Device, browser, operating system and screen resolution
  • Referrer source (how you reached our website)
  • Pseudonymous user and session identifiers

We also use Google Consent Mode, which adjusts the behaviour of Google tags according to the consent choices you make in our consent banner.

Purpose: to analyse and continuously improve our website, to understand user behaviour and to optimise our online offering.

Legal basis: Art. 6(1)(a) GDPR (consent).

Data transfers to third countries: Google LLC is certified under the EU–US Data Privacy Framework, which the European Commission has recognised by adequacy decision as providing an adequate level of protection. In addition, we have concluded EU Standard Contractual Clauses with Google.

Retention: user and event data is retained for 14 months and then deleted automatically.

You can also prevent the collection of your data by Google Analytics by installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout

Further information: https://policies.google.com/privacy and https://support.google.com/analytics/answer/6004245

8.3 Hotjar

This website uses Hotjar, a web analytics and feedback service provided by Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta.

Hotjar uses cookies and other technologies to record how users interact with our website. This includes:

  • Mouse movements, clicks and scroll behaviour
  • Pages visited, time spent and navigation paths
  • Anonymised IP address
  • Device type, screen size, browser, operating system and country
  • Responses to any surveys or feedback widgets

Hotjar aggregates this information into so-called heatmaps and session recordings. Hotjar uses a pseudonymous user ID stored in a cookie so that returning visits can be recognised; this data is not merged with other data. Hotjar suppresses the recording of sensitive form input (such as passwords or payment data) by default.

Purpose: to understand user behaviour, identify usability problems and improve our website.

Legal basis: Art. 6(1)(a) GDPR (consent).

You can prevent Hotjar from collecting your data at any time using the opt-out available at: https://www.hotjar.com/policies/do-not-track/

Further information: https://www.hotjar.com/legal/policies/privacy/

8.4 Google Ads (conversion tracking and remarketing)

We use Google Ads, an online advertising service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in order to draw attention to our services on external websites and in Google search results.

If you reach our website via a Google advertisement, a cookie is stored on your device. This allows us to measure whether an advertisement led to a specific action on our website (conversion tracking), for example the submission of a contact form. We only receive aggregated statistics from Google; we cannot identify you personally from this data.

We may also use remarketing, which allows visitors to our website to be shown interest-based advertising on other websites within the Google advertising network. For this purpose, a pseudonymous identifier is stored in your browser and your visit to our website is recorded.

Data may also be processed on servers of Google LLC in the USA. Google LLC is certified under the EU–US Data Privacy Framework.

Legal basis: Art. 6(1)(a) GDPR (consent).

You can adjust your advertising settings at any time at: https://adssettings.google.com

Further information: https://policies.google.com/privacy and https://policies.google.com/technologies/ads

8.5 LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag, a conversion tracking and analytics technology provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

The LinkedIn Insight Tag enables us to measure the performance of our LinkedIn advertising campaigns, to obtain aggregated statistics about the visitors to our website (such as job function, company, industry and region), and to display interest-based advertising to visitors on LinkedIn. For this purpose, a cookie is set and data such as your IP address, device and browser information, page URL and referrer URL, as well as the time of your visit, is transmitted to LinkedIn.

LinkedIn shortens or removes the IP address and replaces direct identifiers of members with a pseudonymous identifier within seven days in order to enable cross-device reporting. This pseudonymised data is deleted by LinkedIn after 180 days. We only receive reports in aggregated form and cannot identify individual website visitors.

Data may also be transferred to LinkedIn Corporation in the USA, which is certified under the EU–US Data Privacy Framework. In addition, EU Standard Contractual Clauses have been concluded.

Legal basis: Art. 6(1)(a) GDPR (consent).

LinkedIn members can object to the use of their data for advertising purposes in their account settings: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Further information: https://www.linkedin.com/legal/privacy-policy

9. Fonts

This website uses the custom font “Overused Grotesk”, which is hosted locally on our own server. No connection to third-party servers (such as Google Fonts) is established when the fonts are loaded, and no data is transmitted to third parties for this purpose.

10. Social media

We maintain a company presence on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland).

If you interact with our profile on this platform, the provider processes your personal data under its own responsibility and in accordance with its own privacy policy. We have no influence on the scope of the data processed by the platform. Where we and the platform operator are joint controllers within the meaning of Art. 26 GDPR (in particular in relation to page insights and statistics), the corresponding agreements provided by the platform apply.

Links on our website to social media profiles are simple hyperlinks. No data is transmitted to the provider until you actively click on such a link.

LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policy

11. Recipients of data and transfers to third countries

We only pass on your personal data if this is necessary for the purposes described above, if you have consented, or if we are legally obliged to do so. Recipients may include:

  • IT service providers and hosting providers
  • Providers of the analytics and marketing tools listed above
  • Tax advisers, auditors and legal advisers
  • Public authorities and courts, where legally required

Where processing takes place outside the European Economic Area, we ensure an adequate level of protection through an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework), EU Standard Contractual Clauses, or appropriate additional safeguards.

12. Retention periods

We store personal data only for as long as is necessary for the respective purpose, or as long as statutory retention obligations require. In Austria, business records are generally subject to a retention period of seven years under § 132 BAO and § 212 UGB. Data that is no longer required is deleted or irreversibly anonymised.

13. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

14. Data protection officer

We are not legally required to appoint a data protection officer. For all data protection matters, please contact us at info@velaron.group.

15. Changes to this privacy policy

We reserve the right to amend this privacy policy in order to reflect changes in legal requirements or changes to our services and data processing. The version published on this website at the time of your visit applies.