1. Controller
Controller within the meaning of the GDPR: [COMPANY_NAME], [ADDRESS], Email: [EMAIL]. Note: Company details are placeholders and will be replaced before launch.
2. Hosting & Server Logs
This website is hosted by [HOSTING_PROVIDER]. When you visit the site, technical data (IP address, browser type, timestamp, pages accessed) is stored in server log files. Legal basis: Art. 6(1)(f) GDPR (legitimate interests in the stable and secure operation of the service). Retention period: typically 7 days, after which logs are automatically deleted.
3. Contact Form
When you use the contact form, your name, email address, and message content are transmitted to us and delivered via Resend, Inc. (USA). Resend processes this data under a data processing agreement (DPA). Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) / Art. 6(1)(a) GDPR (consent). Retention period: until your enquiry has been fully processed, or earlier upon your request.
4. Appointment Booking (Cal.com)
For appointment scheduling we use Cal.com, Inc. (USA). When you click "Book a call", the Cal.com booking interface is loaded and data (name, email address, booking details) is transmitted to Cal.com. Legal basis: Art. 6(1)(a) GDPR (consent by clicking the button). Cal.com may use its own analytics tools. Cal.com privacy policy: https://cal.com/privacy.
5. Spam Protection (Cloudflare Turnstile)
To protect our forms from automated abuse, we use Cloudflare Turnstile (Cloudflare, Inc., USA). Turnstile analyses browser characteristics and IP address to detect automated bots without displaying a visible CAPTCHA. Legal basis: Art. 6(1)(f) GDPR (legitimate interests in the security of our services). Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/.
6. Your Rights
You have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21). You also have the right to withdraw any consent given at any time (Art. 7(3) GDPR). To exercise your rights, please contact us at: [EMAIL].
Supervisory authority: You have the right to lodge a complaint with a supervisory authority. The competent authority for Austria is the Austrian Data Protection Authority (Datenschutzbehörde, DSB), Barichgasse 40–42, 1030 Wien, Austria. Tel.: +43 1 52 152-0, Email: dsb@dsb.gv.at, Website: www.dsb.gv.at.
7. Changes to This Privacy Policy
We reserve the right to update this privacy policy as needed. The date of the last amendment is noted at the top of the page. We recommend checking this page regularly.