Legal
Privacy policy
Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Data Protection Act, TKG 2021). This privacy policy explains the key aspects of data processing on our website.
This is a translation for your convenience. The German version is legally binding.
1. Controller
SplashDev e.U.
Owner: Henderikus Johannes Kort
Johann-Strauß-Gasse 3/15, 1040 Vienna, Austria
Email: [email protected]
Phone: +43 676 611 2310
2. Hosting, Cloudflare and server log files
This website is operated by SplashDev e.U. itself and hosted on its own server. When you visit our website, the web server automatically stores technical information transmitted by your browser: IP address, date and time, page visited, referrer URL, browser type and operating system. This data is required for the secure and stable operation of the website. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Log files are automatically deleted after 30 days unless they are needed for longer to investigate security incidents.
Cloudflare: To secure our website and deliver it faster, we use the content delivery network (CDN) and security features of Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Traffic between your browser and our server is routed through Cloudflare servers; Cloudflare processes in particular your IP address and technical connection and request data to fend off attacks and deliver content. The legal basis is our legitimate interest in providing the website securely and efficiently (Art. 6(1)(f) GDPR). A data processing agreement is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). More information: cloudflare.com/privacypolicy.
3. Contacting us
If you contact us by email, phone or via the contact form, we process your details (e.g. name, email address, company and your message) to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We do not pass on this data without your consent.
4. Spam protection in the contact form (Akismet)
To protect our contact form from spam, we use the Akismet service of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. When you submit the form, your entries (e.g. name, email address, message) and technical information such as IP address, browser and time are sent to Akismet and automatically checked for spam. The legal basis is our legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR). The data may be processed in the USA; Automattic is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). More information: automattic.com/privacy.
5. Appointment booking via Microsoft Bookings and Microsoft Teams
To book a free initial call, we link to our booking page on Microsoft Bookings. If you book an appointment there, we process the data you provide (e.g. name, email address, phone number, preferred time and notes) to organise and hold the call. The call usually takes place via Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). Data may be transferred to Microsoft Corporation in the USA; Microsoft is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). More information: privacy.microsoft.com.
6. Cookies
Our website uses technically necessary cookies that are required to operate the site and – only with your consent – analytics cookies from Google Analytics (see section 7). We set technically necessary cookies on the basis of § 165(3) TKG 2021 and Art. 6(1)(f) GDPR. On your first visit, you can use our cookie banner to decide whether to allow analytics cookies; you can change or withdraw your choice at any time via the cookie settings. You can also delete or block cookies in your browser.
To manage consent, we use the WordPress plugin Complianz, which runs on our own server. Your choice is stored in a cookie in your browser (retention 12 months). To be able to prove that consent was given (Art. 7(1) GDPR), we also store a record of consent (time, selected categories and banner version) in our database; no data is passed on to third parties. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR.
7. Google Analytics
If you have given your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to analyse how our website is used (e.g. pages visited, time spent, device and browser information, approximate location). IP addresses are not stored in Google Analytics 4.
The legal basis is your consent under § 165(3) TKG 2021 and Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future via the cookie settings on our website.
Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; an adequacy decision of the European Commission therefore applies to the USA (Art. 45 GDPR). User- and event-level data is automatically deleted after 14 months. More information: policies.google.com/privacy.
8. Fonts
This website uses fonts (in particular “Plus Jakarta Sans”) that are loaded locally from our own server. No connection is made to Google servers.
9. Links to social networks
On our website we link to our company profile on LinkedIn. This is a simple link; no data is transferred to LinkedIn when you visit our website. LinkedIn’s privacy policy (LinkedIn Ireland Unlimited Company) only applies once you follow the link.
10. Retention period
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations (e.g. seven years under § 132 of the Austrian Federal Fiscal Code, BAO).
11. Your rights
In principle, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent you have given at any time with effect for the future. To do so, please contact [email protected].
12. Right to lodge a complaint
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.