Privacy policy

Controller

hexadezimal e.U., Obertiefenbach 151, 8224 Hartl, Austria
E-mail: office@hexadezimal.at

Processing on this website

Page requests

Purpose: providing and securing the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Pageviews are counted in aggregate and without cookies; no record-level personal data is stored. Retention: the daily figures are aggregate and carry no personal reference; they are kept indefinitely.

Contact, offer and bid forms

Purpose: handling your enquiry and preparing a contract. Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR). Retention: 24 months after the record was last worked on, then deleted automatically. Where an enquiry leads to a contract, statutory retention periods apply instead.

Audience measurement

Purpose: improving the website. Legal basis: your consent (Art. 6(1)(a) GDPR), revocable at any time. A pseudonym is derived from IP address and user agent; it rotates daily and per domain, and the IP address itself is not stored. Raw data is deleted automatically after 90 days; only aggregate daily figures without personal reference remain.

Purchase processing

Purpose: performing the contract of sale and the domain transfer. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and statutory retention duties (Art. 6(1)(c) GDPR). Categories: name, billing address, e-mail address and, where applicable, VAT identification number. Retention: seven years under § 132 of the Austrian Federal Fiscal Code. This data is not deleted automatically.

Recipients

Personal data is passed to the following recipients. Contracts under Art. 28 GDPR are in place with processors. No data is transferred to a third country, with the sole exception of the certificate authority named below, which receives only hostnames and the contact address of the operator.

• Hosting: OVH GmbH, Cologne, Germany — Server operation and storage of all data held by this application. Processing takes place in the Limburg datacentre, Germany.
• Domain registrar: World4You Internet Services GmbH, Austria — Transferring the domain after a concluded sale. The buyer data required for the transfer is passed on.
• Certificate authority: Internet Security Research Group (Let's Encrypt), California, USA — Issuing the TLS certificates for the sales pages. The hostname and the operator's contact address are transmitted; no visitor data is. Issued certificates are published in public Certificate Transparency logs, which makes the domain names publicly visible.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw a consent you have given at any time; the lawfulness of processing carried out until then is unaffected.

Right to lodge a complaint

You may lodge a complaint with a supervisory authority. The competent authority for Austria is:

Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40-42
1030 Wien
Austria
Phone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at
https://www.dsb.gv.at