Privacy policy

Key points at a glance

• This website does not set cookies and does not store anything in your browser.

• We do not use analytics tools, tracking or social media plugins.

• The website is hosted on Hetzner servers in Germany.

• Images and videos are delivered via Storyblok.

• What you tell us via the contact form, by email or by phone is used only to process your enquiry.

Below, we explain which personal data we process, for what purpose and on what legal basis. Personal data is any information that can be used to identify you personally.

Controller responsible for data processing

Ruckzack OG
Langfeldstraße 35
4040 Plesching
Austria

Phone: +43 732 261790
Email: office@ruckzack.at

You can reach us at this address for all questions about data protection.

Hosting and server log files

This website is operated by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The servers are located in data centres in Germany that are certified to ISO/IEC 27001. A data processing agreement under Art. 28 GDPR is in place with Hetzner.

Each time a page is accessed, the server automatically stores the following information in log files:

• IP address of the accessing device

• date and time of access

• address accessed and amount of data transferred

• status code of the response

• address of the previously visited page (referrer)

• browser and operating system

We need this information to provide the website securely and without errors, to detect attacks and to find errors. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. We do not combine the log files with other data and delete them as soon as they are no longer needed for these purposes.

Content, images and videos

We manage the content of this website in the Storyblok content management system of Storyblok GmbH, Peter-Behrens-Platz 2, 4020 Linz, Austria. Our server retrieves the texts from Storyblok. No data about you is transferred in the process.

Your browser loads images and videos directly from Storyblok (a.storyblok.com). Storyblok delivers them via the Amazon CloudFront content delivery network of Amazon Web Services. In the process, your IP address and technical information about your browser are transferred so that the files load quickly and from a nearby server. The legal basis is our legitimate interest in a fast and reliable presentation of the website under Art. 6(1)(f) GDPR. A data processing agreement is in place with Storyblok.

Amazon Web Services may also process data in the USA. The company is certified under the EU-US Data Privacy Framework. An adequacy decision of the European Commission under Art. 45 GDPR therefore applies to the USA.

Videos are played without sound and without platforms such as YouTube or Vimeo.

Fonts

The fonts Josefin Sans and Lato are stored on our own server. When the page loads, no connection is made to Google or other font providers.

Cookies and browser storage

This website does not set cookies and does not store any data in your browser's storage. That is why there is no cookie banner. If we change this, we will update this privacy policy and, where necessary, obtain your consent beforehand.

Contact form

When you write to us using the form on the contact page, we process:

• the topic you selected for your enquiry

• your name

• your email address

• your phone number, if you provide it

• your message

Your enquiry is sent by email to our mailbox. You receive a confirmation at the email address you provided. This confirmation does not contain your message.

We use the information to answer your enquiry and, where applicable, to prepare a quote. The legal basis is Art. 6(1)(b) GDPR if your enquiry is aimed at a contract, otherwise our legitimate interest in answering enquiries under Art. 6(1)(f) GDPR. Required fields are marked as such. Without this information, we cannot process your enquiry.

Spam protection: The form is protected against spam without cookies and without third-party services. When you submit it, your browser solves a small computational task (ALTCHA), which our server verifies. In addition, there is a field that is invisible to humans and a minimum time between loading and submitting. To prevent mass submissions, our server keeps your IP address in memory for no more than ten minutes and does not store it permanently. The legal basis is our legitimate interest in a form free from misuse under Art. 6(1)(f) GDPR.

Enquiries by email or phone

If you contact us by email or phone, we process your details and the content of your enquiry in order to answer it. The legal bases are the same as for the contact form.

Storage period

We keep enquiries until they have been dealt with and no further questions are to be expected. If the enquiry leads to an order, the statutory retention obligations apply, which for accounting records is seven years under § 132 of the Federal Fiscal Code (Bundesabgabenordnung, BAO). After that, we delete the data.

Links to other websites

This website contains links to other websites, for example to our customers' projects. Data is only transferred to the respective provider when you click on a link. These websites are subject to their own privacy policies.

Recipients of your data

We do not pass on or sell your data. The only recipients are the service providers named in this policy, who work on our behalf, and authorities where we are legally obliged to disclose it.

Encryption

This website is delivered only in encrypted form via HTTPS. What you send via the form cannot be read by third parties in transit.

Your rights

You have the right to:

• access to the data we process about you (Art. 15 GDPR)

• rectification of inaccurate data (Art. 16 GDPR)

• erasure of your data (Art. 17 GDPR)

• restriction of processing (Art. 18 GDPR)

• data portability (Art. 20 GDPR)

• objection to processing based on our legitimate interest (Art. 21 GDPR)

• withdrawal of your consent with effect for the future (Art. 7(3) GDPR)

To do so, simply write to us at office@ruckzack.at.

If you believe that we are not processing your data lawfully, you can lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Wien, dsb.gv.at.

Changes

We update this privacy policy when our website or the legal situation changes. The date of the current version is shown at the top. You can find earlier versions at the end of this page.