Privacy Policy

1. Controller

The controller responsible for data processing through this website is:

2. General principles

Personal data is processed only where there is a lawful basis and only for the purposes described in this policy. The principal legal bases are steps taken at your request before entering into a contract, the performance of a contract, compliance with legal obligations, and legitimate interests in operating a secure and useful website and responding to enquiries.

You are not generally required to provide personal data to browse this website. Certain technical data is processed automatically so that the website can be delivered securely. If you contact Jubili, the information needed to understand and answer your enquiry must be provided; otherwise, the enquiry may not be processed.

3. Website hosting and server logs

When you access this website, technical request data may be processed automatically. This can include your IP address, the requested page or file, the date and time of access, the referring page, browser and device information, user agent, and response or error information.

This processing is necessary to deliver the website, maintain its stability and security, diagnose errors, prevent misuse, and protect the website and its visitors. The legal basis is the legitimate interest in the secure and reliable operation of the website under Article 6(1)(f) GDPR.

The website is hosted and operated using services provided by Ploy, Inc. Ploy and infrastructure providers acting on its behalf may process technical data as processors where this is necessary to provide, secure, and maintain the website. Technical logs are retained only for as long as reasonably necessary for operational, security, abuse-prevention, and legal purposes.

4. Ploy Analytics

This website uses Ploy's built-in, first-party analytics. It may record page views, requested pages, referral and traffic-source information, timestamps, browser and device information, approximate location derived from network information, and interactions such as calls to action or form-submission events. IP addresses may be processed at the website edge to deliver requests, protect the service, and derive limited technical or regional information.

Ploy's built-in analytics do not rely on third-party analytics scripts or analytics cookies. This website does not currently use Google Analytics, advertising pixels, session-replay tools, or marketing trackers.

Analytics data is used to understand aggregate website use, improve content and usability, measure whether important functions work, and protect the service. The legal basis is the legitimate interest in operating, evaluating, and improving the website under Article 6(1)(f) GDPR. Analytics data is retained according to the operational needs and configuration of the service and is deleted or aggregated when it is no longer needed for these purposes.

5. Contact enquiries

If you contact Jubili through the website form or by email, the information you provide is processed to assess the project, answer your enquiry, take requested steps before a possible contract, and handle follow-up questions.

The website form may collect:

• name and email address;
• Vienna district and property size;
• handover or availability date;
• rental type and indicative furniture budget;
• the project information included in your message; and
• technical submission data needed to deliver and protect the form.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract. For general enquiries that are not directed towards a possible contract, the legal basis is the legitimate interest in responding to communications and managing business enquiries under Article 6(1)(f) GDPR.

Form submissions are processed through Ploy's form service, stored for the workspace, and sent to Jubili by email. Ploy and the email and IT service providers used to receive and secure the enquiry may therefore process the information as service providers. Enquiry data is not sold or used for unrelated promotional email.

Enquiry data is normally deleted 12 months after the last relevant contact if no contract is concluded. If an enquiry leads to a contract, relevant records may be retained for longer where necessary to perform the contract, establish or defend legal claims, or comply with statutory accounting, tax, and documentation obligations.

6. Recipients, processors, and international processing

Personal data is disclosed only where necessary for the purposes described above, where required by law, or where you have separately authorised disclosure. Categories of recipients may include website hosting and platform providers, infrastructure and security providers, email and IT service providers, and professional advisers or public authorities where legally required.

Ploy, Inc. is based in the United States, so the use of its services may involve processing outside the European Economic Area. Where Chapter V of the GDPR applies to a transfer, the transfer must be based on an applicable adequacy decision or appropriate safeguards, such as the European Commission's standard contractual clauses, together with any required supplementary measures. You may request further information about applicable safeguards by emailing office@jubili.co.

7. Cookies and external services

This website does not currently use non-essential analytics or marketing cookies. It also does not currently offer a newsletter, send promotional email through a newsletter system, use an external booking tool, or embed third-party video, map, or social-media widgets.

Ordinary links to another website or an email application do not transmit information to that service until you activate the link. The external provider's own privacy information applies after you leave this website.

8. Data security

Appropriate technical and organisational measures are used to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, and unauthorised access. These measures include encrypted transmission of the website and access controls for the systems used to manage enquiries. No method of transmission or storage can guarantee absolute security.

9. Your rights

Subject to the conditions and limits in the GDPR, you may have the right to:

• obtain information about and a copy of your personal data;
• have inaccurate or incomplete data corrected;
• request deletion or restriction of processing;
• receive data you provided in a portable format;
• object to processing based on legitimate interests; and
• withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal.

This website does not use automated decision-making or profiling that produces legal or similarly significant effects.

To exercise your rights, email office@jubili.co. Reasonable information may be requested to confirm your identity before a request is fulfilled.

10. Right to complain

If you believe that your personal data has been processed unlawfully, you may contact Jubili or lodge a complaint with a supervisory authority. In Austria, the competent authority is:

11. Changes to this policy

This policy may be updated if the website, service providers, or legal requirements change. The current version will always be published on this page. If a newsletter, external booking service, additional analytics, advertising technology, or embedded third-party service is introduced, this policy will be updated before or when that processing begins.

Last updated: 27 July 2026