Privacy Policy
Introduction
The protection of your personal data is of particular importance to us. We therefore process your data exclusively on the basis of the legal provisions (GDPR, TKG 2021).
Contact Form and E-mail
When you use our contact form or write to us by e-mail, we process the data you provide (name, e-mail address, subject, and message) for the sole purpose of handling your inquiry and any follow-up questions.
The form does not store your data in a database. Your message is sent to us by e-mail and kept only in our mailbox for as long as needed to deal with your inquiry, after which it is deleted unless we are legally required to retain it.
The legal basis for this processing is Art 6(1)(b) GDPR where your inquiry concerns a contract or pre-contractual steps, and otherwise our legitimate interest in responding to your inquiry (Art 6(1)(f) GDPR). We do not pass this data on except to the processors listed below.
Cookies and Tracking
Our website does not set any cookies and does not use analytics, tracking, or advertising tools. We do not create user profiles and do not store any information on your device.
Third-Party Processors
We use the following service providers to operate our website and process contact inquiries. Each acts as a processor on our behalf under a data processing agreement.
Website Hosting (Vercel)
Our website is hosted by Vercel Inc. (USA). When you visit the site, Vercel automatically processes technical data in server log files, including your IP address, browser type, and the time of access. This is necessary to deliver the website securely and reliably. The legal basis is our legitimate interest in a secure and functional website (Art 6(1)(f) GDPR).
Spam Protection (Cloudflare Turnstile)
To protect our contact form against automated abuse, we use Cloudflare Turnstile, a service of Cloudflare, Inc. (USA, with EU operations). Turnstile analyses technical signals such as your IP address and browser characteristics to distinguish humans from bots. The legal basis is our legitimate interest in preventing spam and abuse (Art 6(1)(f) GDPR).
E-mail Delivery (Brevo)
Messages submitted through our contact form are delivered to us by e-mail using Brevo (Brevo SAS, France). In doing so, Brevo processes the contents of your message on our behalf. The legal basis matches that of the contact form itself (Art 6(1)(b) and/or Art 6(1)(f) GDPR).
Where a provider processes data in the USA, this is safeguarded by appropriate measures such as EU Standard Contractual Clauses.
Your Rights
You generally have the right to access, rectification, deletion, restriction of processing, data portability, revocation, and objection.
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you may lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority: dsb.gv.at.
Contact
Habemax GmbH
Absberggasse 27/7.3
A-1100 Vienna
Austria