Data Processing Agreement (DPA)
The legally binding version is the German one available at AVV.
This agreement governs the cooperation between Barmyviro GmbH (Processor) and our business clients (Controllers) whenever we process personal data as part of our professional laser services.
- We process data exclusively according to your documented written instructions.
- Security is our priority: we implement strict technical and organizational measures (TOM).
- We only engage essential sub-processors for hosting and form transmission.
- Upon order completion, data is returned or deleted according to our business rules.
1. Subject Matter and Roles
This DPA is concluded in accordance with Art. 28 of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). Barmyviro GmbH (Margaretenstraße 142, 1050 Wien, represented by Martin Steiner, share capital 35,000 €) acts as the Processor. The client, who provides data for processing (e.g., names for engravings on corporate gifts), acts as the Controller.
2. Nature and Purpose of Processing
Processing is carried out solely for the purpose of providing the services described in our Services section. Processed data categories include contact details, names, or specific texts for laser engravings and cuts. The data subjects are typically employees or customers of the Controller.
3. Obligations of the Processor
Barmyviro GmbH undertakes to process personal data only on the basis of documented instructions from the Controller. We ensure that all personnel authorized to access the data are bound by strict confidentiality obligations. Further details on general data usage can be found in our Privacy Policy.
4. Sub-processors
To fulfill the obligations of this contract, we employ the following sub-processors:
- World4You Internet Services GmbH (Wolfgang-Pauli-Straße 2, BT3, 4020 Linz) for the hosting of the digital infrastructure.
- FormSubmit (USA) for the technical transmission of contact requests.
We guarantee that these sub-processors maintain the same data protection standards as stipulated in this agreement.
5. Data Security and Notification
We implement appropriate technical and organizational measures to protect data against unauthorized access. In the event of a personal data breach, we will notify the Controller without undue delay. The competent supervisory authority is the Österreichische Datenschutzbehörde (DSB, Barichgasse 40-42, 1030 Wien). Please note that our Terms and Conditions contain supplementary provisions regarding liability.
6. Deletion and Return of Data
Upon termination of the service or expiration of the contract, all personal data will either be returned to the Controller or securely deleted, unless statutory retention obligations (e.g., tax law requirements) prevail. Deletion is carried out according to our internal quality guidelines.
7. Final Provisions
Amendments to this agreement must be made in writing. The laws of the Republic of Austria apply. The place of jurisdiction for all disputes arising from this contract is Wien. This agreement complements the provisions of our Privacy Policy.
Updated on: 12 October 2026