KESTRELEYE

Privacy policy

Protecting your personal data matters to us. This privacy policy explains the type, scope and purpose of processing personal data within our online offering and the associated websites, functions and content. Your data is processed exclusively on the basis of applicable law (GDPR, Austrian TKG 2003).

Data security

We take all necessary and appropriate technical and organisational security measures to protect your personal data from loss and misuse. Access to our websites is secured via HTTPS, so communication between your device and our servers is encrypted.

Statistical evaluation

When you visit our websites, the web server logs each access, including: the requesting computer’s IP address, date and time of access, name and URL of the file retrieved, amount of data transferred, whether the request succeeded, and browser/operating-system identification data. This is processed to enable use of the website, ensure system security, administer the network infrastructure, and optimise the site. The IP address is only evaluated in emergencies — for example, investigating attacks.

Hosting

Our hosting provider is Hosttech GmbH, based in Salzburg, which provides infrastructure and platform services, computing capacity, storage, database services, and security/maintenance services, on the basis of our legitimate interest in an efficient and secure online offering (Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR).

Contacting us

If you contact us by form or email, we store the information you provide in order to process your enquiry and any follow-up questions. We do not pass this data on without your consent. Please note that the confidentiality of email content cannot be technically guaranteed unless specific security measures are taken.

Cookies

Our website uses cookies — small text files stored on your device via your browser — to make our offering more user-friendly. You can configure your browser to notify you when cookies are set, or to reject them entirely; doing so may limit the site’s functionality.

Google Analytics

Where this website uses Google Analytics, a web analytics service provided by Google LLC (“Google”), on the basis of our legitimate interest in analysing, optimising and operating our online offering (Art. 6(1)(f) GDPR), your browser may store a cookie enabling analysis of your use of the site. The resulting information is transmitted to and processed on Google’s servers, and pseudonymous usage profiles may be created. You can prevent the storage of cookies via your browser settings, and object to the collection of cookie-generated data by installing the browser add-on available at tools.google.com/dlpage/gaoptout. See Google’s privacy policy for more information.

Google Fonts

We embed fonts (“Google Fonts”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: google.com/policies/privacy.

Embedding third-party services and content

On the basis of our legitimate interest in analysing, optimising and operating our online offering (Art. 6(1)(f) GDPR), we may embed content or service offerings from third parties. This requires the respective third-party provider to see the user’s IP address, since otherwise it could not deliver the content to their browser.

Working with processors and third parties

We only disclose, transmit or otherwise grant access to data to other persons or companies on the basis of a legal permission, your consent, a legal obligation, or our legitimate interests. Where we engage third parties under a data processing agreement, this is done in accordance with Art. 28 GDPR.

Your rights

You generally have the right to access, rectification, erasure, restriction, data portability, and objection. If you believe processing of your data violates data protection law, you may lodge a complaint with the Austrian Data Protection Authority.

Right of withdrawal

You have the right to withdraw consent already given, with effect for the future, under Art. 7(3) GDPR — please use the details on our contact page.

Right to object

You may object at any time to future processing of your data under Art. 21 GDPR, in particular processing for direct marketing purposes — please use the details on our contact page.