For the person deciding whether to share an AHE project brief
You should know what happens to the information before you send it.
Unclear data handling makes a useful technical enquiry harder to trust. This page explains website access data, secure project-brief receipt, session-only routing context and the human contact responsible for privacy questions.
For the visitor who needs an accountable privacy contact
Premium Organic GmbH is the named controller for this website.
A direct contact is provided so access, correction and other applicable requests reach a responsible person.
PREMIUM ORGANIC GmbH
Nußdorfer Straße 68/21, 1090 Vienna, Austria
Email: datenschutz@premium-organic.com
For privacy questions or to exercise applicable data-protection rights, contact the address above.
For the visitor asking what happens before any enquiry is sent
Technical delivery can create access data even when no form is submitted.
We explain the minimum website and hosting context so that the connection path is visible.
This website is delivered through OpenAI Sites. OpenAI Ireland Ltd. acts as service provider for EEA business customers and may use documented subprocessors, including Cloudflare for content delivery and web hosting. Technical connection and log data required to deliver, secure and troubleshoot the service may include IP address, timestamp, requested resource, browser information and response status. It is retained only in accordance with the provider configuration and applicable obligations.
OpenAI Data Processing Addendum · OpenAI subprocessor list
The public pages do not use analytics or advertising cookies. When a visitor deliberately opens a sample, dossier, contact or application route, or copies, downloads or shares a lab brief, the website stores a first-party interaction count in the protected site database. The event record is limited to event name, page path, source and optional formulation or campaign context. The analytics table does not store a persistent visitor or session identifier, name, email address, full referrer URL, IP address or browser fingerprint and is not used for advertising profiles.
The source film is displayed as a local preview; only after the visitor chooses to play it is a YouTube-nocookie player loaded. From that point, Google/YouTube may process connection, device and usage data under its own terms, including possible international transfers.
For the professional who sends a qualified project brief
The brief is stored only after a confirmed submission.
We use the information you choose to send to answer the enquiry and route it to the appropriate human reviewer.
The form collects request type, name, company, business email, role, country, target market, application or business context and the decision or problem described by the user. Optional technical fields may include product format, development stage, timing, indicative volume and additional project context. After consent and submission, the website stores the brief in a protected Cloudflare D1 database and returns a receipt reference. A successful receipt is not project acceptance, an NDA, a claim approval or confirmation of commercial terms.
If present in the incoming URL, utm_source, utm_medium, utm_campaign, utm_content, utm_term, content_id and source are retained in sessionStorage for the current browser session and attached to the brief as routing context. They help identify the relevant content journey; they are not used here for advertising profiles. If secure storage cannot be confirmed, nothing is counted as a received lead and the website offers a local email draft instead.
If you carry a formulation brief to the contact page, a temporary draft is stored in sessionStorage in the current browser tab. The site stops using it after 30 minutes; closing the tab clears session storage. The detailed brief is not included in share links and is not submitted as a lead until you review and send the form.
Premium Organic uses the submitted information to answer the enquiry, provide requested information and take requested pre-contractual or business steps. Access to the receipt register requires ChatGPT sign-in and an explicit Premium Organic administrator allowlist. Website and database providers process the information only as required to deliver, secure and maintain the service.
Information is retained only as long as required for the enquiry, the business relationship, legal obligations or the establishment, exercise or defence of legal claims. Contract-related records may be retained for statutory periods. Access is limited to authorised staff and necessary service providers.
For the data subject who wants a record corrected or reviewed
A privacy question needs a direct human route.
Applicable access, correction, deletion, restriction, objection, portability and complaint rights remain subject to law and relevant exceptions.
Subject to applicable law, individuals may request access, correction, deletion, restriction or data portability and may object to processing based on legitimate interests. A complaint may be lodged with the competent supervisory authority, in Austria the Datenschutzbehörde.
This notice describes the current public website configuration. It must be reviewed before advertising, newsletter tracking, automated CRM transfer, persistent visitor measurement or other material processing is added.
See also the central Cookie Policy.