Privacy Policy

Responsible Party

Johannes Welebil

Address:
Steinbruchstraße 9/14
1140 Wien
Österreich

E-Mail:

The above-mentioned operator is responsible for the processing of personal data on this website.

IT Infrastructure and Hosting

For the operation of the website, subdomains and email communication, the infrastructure of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) is used. Information is automatically recorded in so-called server log files, which the browser automatically transmits. These include in particular:

• IP address
• Date and time of request
• Accessed page/file (URL)
• Referrer URL (the previously visited page, if transmitted)
• Browser type and version
• Operating system
• Status codes (e.g. 200, 404)

The processing of this data is carried out to ensure the stability, functionality and security of the web presence.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest). Storage duration: Server log files are usually deleted after 7 days.

A data processing agreement exists with the hosting service provider according to Art. 28 GDPR.

Contact

When contacting us by email, the transmitted data (email address, name and the content of the message) will be stored for the purpose of processing the inquiry and in case of follow-up questions.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment or pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in communication).

Storage duration: Data from inquiries will be deleted after a period of 5 years if no contract is concluded, unless further correspondence or legal necessity for retention exists.

Demo Applications (Subdomains)

Demo applications are provided on various subdomains to demonstrate technical capabilities. These applications use technically necessary cookies (e.g. session cookies) to enable basic functions such as login status.

This includes processing of master data (when creating a test account), usage data as well as technical metadata and error logs. No real customer data is processed in these applications.

Legal basis: Art. 6 para. 1 lit. b GDPR (implementation of pre-contractual measures), Art. 6 para. 1 lit. f GDPR (legitimate interest in the presentation of software solutions) as well as § 165 para. 3 TKG 2021.

Storage duration: Transaction data is deleted weekly. Profile data is removed after 2 years of inactivity. Error logs are deleted after 6 months.

Software Development and Version Control

The service GitHub (GitHub Inc., USA) is used for managing source code and documenting software projects. Personal data (e.g. author's name or email address) may be stored in the version history of the code to ensure traceability of changes.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in traceable development) and, if applicable, Art. 6 para. 1 lit. b GDPR (contract fulfillment for customer projects).

Third country transfer: GitHub is certified under the EU-U.S. Data Privacy Framework or uses standard contractual clauses.

Data Storage and Recipients

For the execution of contracts and the fulfillment of legal obligations, data such as name, address, bank details and invoice-relevant information are processed. Disclosure only takes place to necessary recipients:

• Processing banks (payment transactions)
• Tax advisors and tax office (tax law obligations)
• IT service providers (infrastructure/hosting)

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment) as well as Art. 6 para. 1 lit. c GDPR (legal obligation).

Storage duration: Accounting-relevant data is retained for 7 years (§ 132 para. 1 BAO). Data related to product liability (e.g. project documentation) is retained for a period of 10 years.

No Analytics Tools

Apart from the explicitly mentioned demo applications, no cookies are set on this website. No evaluation of user behavior by analytics services takes place and no external third-party content is loaded.

Rights of Data Subjects

In principle, there are rights to information, rectification, deletion, restriction, data portability, revocation and objection. Complaints can be directed to the Austrian Data Protection Authority (Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at).