Privacy Policy

1. Controller

The controller responsible for data processing through this website is:

2. General principles

Personal data is processed only where there is a lawful basis and only for the purposes described in this policy. The principal legal bases are steps taken at your request before entering into a contract, the performance of a contract, compliance with legal obligations, and legitimate interests in operating a secure and useful website and responding to enquiries.

You are not generally required to provide personal data to browse this website. Certain technical data is processed automatically so that the website can be delivered securely. If you contact Jubili, the information needed to understand and answer your enquiry must be provided; otherwise, the enquiry may not be processed.

3. Website hosting and server logs

When you access this website, technical request data may be processed automatically. This can include your IP address, the requested page or file, the date and time of access, the referring page, browser and device information, user agent, and response or error information.

This processing is necessary to deliver the website, maintain its stability and security, diagnose errors, prevent misuse, and protect the website and its visitors. The legal basis is the legitimate interest in the secure and reliable operation of the website under Article 6(1)(f) GDPR.

The website is hosted by Vercel, Inc. Vercel and infrastructure providers acting on its behalf may process technical data as processors where this is necessary to provide, secure, and maintain the website. Technical logs are retained only for as long as reasonably necessary for operational, security, abuse-prevention, and legal purposes.

4. Analytics

This website does not currently use an analytics product. It does not use Google Analytics, advertising pixels, session-replay tools, or marketing trackers. Clicks on calls to action are not stored.

Ordinary hosting logs described in section 3 may still record that a page was requested. If a dedicated analytics service is introduced, this policy will be updated before or when that processing begins.

5. Contact enquiries

If you contact Jubili through the website form or by email, the information you provide is processed to assess the project, answer your enquiry, take requested steps before a possible contract, and handle follow-up questions.

The website form may collect:

• name and email address;
• Vienna district and property size;
• handover or availability date;
• rental type and indicative furniture budget;
• the project information included in your message; and
• technical submission data needed to deliver and protect the form.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract. For general enquiries that are not directed towards a possible contract, the legal basis is the legitimate interest in responding to communications and managing business enquiries under Article 6(1)(f) GDPR.

Form submissions are sent to this website’s own server on Vercel. They are written to hosting logs. They are not forwarded by email automatically. You can also write directly to office@jubili.co. Enquiry data is not sold or used for unrelated promotional email.

Enquiry data is normally deleted 12 months after the last relevant contact if no contract is concluded. If an enquiry leads to a contract, relevant records may be retained for longer where necessary to perform the contract, establish or defend legal claims, or comply with statutory accounting, tax, and documentation obligations.

6. Recipients, processors, and international processing

Personal data is disclosed only where necessary for the purposes described above, where required by law, or where you have separately authorised disclosure. Categories of recipients may include website hosting and platform providers, infrastructure and security providers, email and IT service providers, and professional advisers or public authorities where legally required.

Vercel, Inc. is based in the United States, so hosting may involve processing outside the European Economic Area. Where Chapter V of the GDPR applies to a transfer, the transfer must be based on an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses, together with any required supplementary measures. You may request further information about applicable safeguards by emailing office@jubili.co.

7. Cookies and external services

This website does not currently use non-essential analytics or marketing cookies. It also does not currently offer a newsletter, send promotional email through a newsletter system, use an external booking tool, or embed third-party video, map, or social-media widgets.

Ordinary links to another website or an email application do not transmit information to that service until you activate the link. The external provider’s own privacy information applies after you leave this website.

8. Data security

Appropriate technical and organisational measures are used to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, and unauthorised access. These measures include encrypted transmission of the website and access controls for the systems used to manage enquiries. No method of transmission or storage can guarantee absolute security.

9. Your rights

Subject to the conditions and limits in the GDPR, you may have the right to:

• obtain information about and a copy of your personal data;
• have inaccurate or incomplete data corrected;
• request deletion or restriction of processing;
• receive data you provided in a portable format;
• object to processing based on legitimate interests; and
• withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal.

This website does not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise your rights, email office@jubili.co. Reasonable information may be requested to confirm your identity before a request is fulfilled.

10. Right to complain

If you believe that your personal data has been processed unlawfully, you may contact Jubili or lodge a complaint with a supervisory authority. In Austria, the competent authority is:

11. Changes to this policy

This policy may be updated if the website, service providers, or legal requirements change. The current version will always be published on this page. If a newsletter, external booking service, additional analytics, advertising technology, or embedded third-party service is introduced, this policy will be updated before or when that processing begins.

Last updated: 19 August 2026