Back to homepage

Privacy Policy

siteflip.at · Last updated: August 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Clemens Benedikt Mandl, SiteFlip
Mittlerer Bahnweg 13, 8523 Frauental an der Laßnitz, Austria
E-Mail: office@siteflip.at · Phone: +43 660 9298852
Further details in the legal notice: siteflip.at/en/impressum

2. General information on data processing

We process personal data only to the extent necessary to provide this website, its content and functions, and to handle your inquiries. Data is disclosed exclusively to the recipients named in this policy, and only where a legal basis exists for doing so.

3. Hosting and delivery of the website

This website is operated on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The data centres are located within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

Delivery is fronted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, acting as content delivery network, DNS and security service. In this process, connection data (in particular IP address, browser type, time of access) is routed through and briefly processed by Cloudflare in order to deliver the website quickly and securely and to fend off attacks. As Cloudflare is based in the USA, a transfer to a third country may occur; this is safeguarded through EU Standard Contractual Clauses pursuant to Art. 46 GDPR as well as Cloudflare's participation in the EU-U.S. Data Privacy Framework.

When the website is accessed, server log files are automatically stored (IP address, date and time, page accessed, browser type, operating system, referrer). This data is technically necessary for secure and stable operation, is not merged with other data sources, and is deleted after 30 days.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and stable operation of the website).

4. Contact form and e-mail contact

When you contact us via the contact form or by e-mail, we process the data you provide (in particular name, company, e-mail address and your message) solely to handle your inquiry. We delete your inquiry together with the associated data no later than six months after it has been conclusively processed, unless statutory retention obligations require otherwise. Providing this data is neither legally nor contractually required; however, without it we cannot respond to your inquiry.

For sending form messages we use Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, as a processor. In doing so, the data you enter is transferred to the USA. Resend is certified under the EU-U.S. Data Privacy Framework; EU Standard Contractual Clauses pursuant to Art. 46 GDPR are additionally in place. The service does not store the content permanently, but makes it available for delivery to our e-mail address.

The legal basis is Art. 6 para. 1 lit. b GDPR (taking pre-contractual measures or performance of a contract); to the extent your inquiry has no contractual connection, we base the processing on Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to inquiries). Providing your data is neither legally nor contractually required; however, without your name and e-mail address we cannot respond to your inquiry. We delete the data once your inquiry has been conclusively processed, and at the latest after six months, unless statutory retention obligations require otherwise. No automated decision-making, including profiling, takes place.

5. Cookies

This website uses exclusively technically necessary cookies. These are cookies required for the operation, security and the functions of the website you have requested – in particular session and security cookies of our upstream provider Cloudflare, used to fend off automated attacks, and where applicable cookies used to store your language preference.

Under § 165 para. 3 of the Austrian Telecommunications Act (TKG 2021), no consent is required for such cookies; they are exempt from the consent requirement because they are strictly necessary to provide the service you have explicitly requested. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure operation of the website).

We do not use cookies for analytics, tracking or advertising purposes. Should we use such technologies in the future, we will obtain your explicit consent in advance and inform you at this point.

6. Your rights

No automated decision-making, including profiling, takes place. You have the following rights regarding your personal data:

  • Access to the data processed (Art. 15 GDPR)
  • Rectification of incorrect data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Withdrawal of any consent given, with effect for the future (Art. 7 para. 3 GDPR)

To exercise your rights, an informal message to office@siteflip.at is sufficient.

7. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria · dsb@dsb.gv.at · www.dsb.gv.at

8. Status and changes

This privacy policy is current as of August 2026. We update it whenever the services we use or the legal situation change.