Declaration on the Information Obligation (Privacy Policy)

The protection of your personal data is a particular concern of ours. We therefore process your data exclusively on the basis of the legal provisions (GDPR, TKG 2021). In this data protection information, we inform you about the most important aspects of data processing within the framework of our website.

Contacting Us

If you contact us using the contact form on our website or via email, the personal data you provide will be stored by us for six months. This storage is necessary for the purpose of processing your inquiry and managing follow-up questions. The legal basis for this processing is our legitimate interest in responding efficiently to user inquiries (Art. 6 para. 1 lit. f GDPR). We will not transfer this data to third parties without your explicit instruction or a valid legal obligation.

Cookies

Our website uses so-called cookies. These are small text files that are stored locally on your end device with the help of your browser. They do not cause any damage. We use cookies to make our website and services more user-friendly.

Session Cookies: These are temporary and are automatically deleted when you close your browser.
Persistent Cookies: These remain stored locally on your device to help us recognize your browser on your next visit (e.g., to remember your preferences). These require your prior consent and are capped at a strict maximum lifespan.

You can configure your browser to inform you about the setting of cookies and allow them only on a case-by-case basis. Disabling cookies completely may limit the functionality of our website. Detailed technical lifespans of our analytical cookies are outlined in the Web Analytics section below.

Web Analytics with Matomo Cloud

Type and Scope of Processing:

Type and Scope of Processing:
We use the web analytics service Matomo Cloud on our website to analyze the behavior of our website visitors and continuously improve our online offering. The service is provided by InnoCraft Limited (7 Waterloo Quay, PO Box 252, Wellington 6011, New Zealand). Data collected (e.g., your truncated IP address, visited subpages, length of stay, browser settings, and click paths) is processed on servers of InnoCraft Limited within the European Union (AWS data center in Frankfurt, Germany; backups in Ireland). An adequacy decision by the European Commission applies to New Zealand, ensuring a level of data protection equivalent to EU standards.

Legal Basis & Right to Revoke:

The placement of local tracking cookies and the subsequent server-side analysis are carried out exclusively on the basis of your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with § 165 para. 3 TKG 2021. You can revoke your consent at any time via our cookie banner / consent manager, or by using the opt-out function below:

Two-Tier Data Retention Architecture:
To guarantee maximum data minimization, we strictly separate the storage lifespans between your local device and our backend servers:

Client-Side (Local Cookies): The persistent tracking cookies placed on your browser (such as _pk_id) automatically expire and delete themselves after a maximum of 13 months (393 days) from your last visit, unless you manually clear them sooner.
Server-Side (Backend Logs): The raw, detailed visitor logs transmitted to our Matomo Cloud database are configured to automatically delete or completely anonymize after a maximum of 393 days. High-level aggregated reports (which contain purely statistical, anonymous trends and no longer contain any personal identifiers) are kept to analyze long-term performance.

Hosting with Amazon Web Services (AWS)

Our website is hosted by Amazon Web Services (AWS), provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Data processed when visiting our website is stored on AWS servers located within the European Union (EU).
To the extent that data may be transferred to AWS servers in third countries (e.g., the United States), such international transfers are safeguarded on the basis of standard contractual clauses (SCCs) approved by the European Commission or appropriate adequacy decisions, ensuring an adequate level of protection for your personal data in accordance with the GDPR.

You have the opportunity to subscribe to our newsletter via the contact form on our website. For this, we require your email address and your declaration that you agree to receive the newsletter.

In order to provide you with targeted information, we also collect and process voluntarily provided information on areas of interest. As soon as you have subscribed to the newsletter, we will send you a confirmation email with a link to confirm the subscription. You can cancel your subscription to the newsletter at any time with the cancellation link at the bottom of each newsletter. We will then immediately delete your data in connection with the newsletter dispatch. This revocation shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

When using our contact form on our website, you have the opportunity to subscribe to our newsletter. For this, we require your email address and your explicit declaration that you agree to receive the newsletter.
In order to provide you with targeted information, we also collect and process voluntarily provided information on your areas of interest. As soon as you have subscribed, we will send you a confirmation email with a link to confirm the subscription (Double Opt-In). You can cancel your subscription at any time via the cancellation link at the bottom of each newsletter. We will then immediately delete your data in connection with the newsletter dispatch. This revocation shall not affect the lawfulness of the processing carried out prior to the revocation.

Your Rights

You are entitled to the rights of access, rectification, erasure, restriction, data portability, revocation, and objection regarding your stored data.

If you suspect a violation of data protection laws or believe your privacy rights have been infringed, please let us know at privacy@cloudwerkstatt.com so we can address it immediately. You may also submit a complaint directly to the competent supervisory authority (in Austria: the Österreichische Datenschutzbehörde).