Last Updated: October 27, 2023

1. Introduction

I, Alexander Zajic, operator of the website https://dev.krakenstein.at/ (the “Site”), am committed to protecting and respecting your privacy. This Privacy Policy explains how I collect, use, disclose, and safeguard your information when you visit my Site or communicate with me via the contact form or newsletter. By using my Site, you consent to the data practices described in this policy. If you do not agree with the practices described, please do not use the Site.

2. Who is the Data Controller?

The data controller responsible for your personal data is: Alexander Zajic Vienna 1030 Austria Email: alexander.zajic@krakenstein.at

3. What Data Do I Collect and Why? (The Lawful Bases)

I collect minimal data for specific, explicit purposes:

Purpose	Data Collected	Lawful Basis
Contact Form	Name, Email Address, Message	Your legitimate interest in contacting me and my legitimate interest in responding to your inquiry.
Newsletter	Email Address	Your explicit, prior consent (opt-in).
Surveys	Email Address & Survey Responses	Your explicit, prior consent (opt-in).
Website Analytics	Anonymous IP, Device/Browser Info, Pages Visited (See Section 6)	Your consent via the cookie banner.

4. How Do I Use Your Data?

I use your data solely for the purposes for which it was collected:

• To respond to your inquiries sent through the contact form.
• To send you my newsletter, if you have subscribed.
• To send you surveys to improve my services, if you have consented.
• To analyze and improve the performance and content of my Site (anonymously).

5. How Do I Share Your Data?

I value your privacy. I do not sell, trade, or rent your personal data to third parties. I only share your data with the following trusted third-party Data Processors who assist me in operating my website and conducting my business. They are contractually obligated to keep your information confidential and use it solely for the services they provide to me:

• Hetzner Online GmbH (Germany): My web hosting provider. All data processed via this website is stored on their secure servers in Germany.
• Brevo (formerly Sendinblue) (France): My email marketing and automation provider. If you subscribe to my newsletter or participate in a survey, your email address and related data are stored on Brevo’s servers to manage these communications.

I will also disclose your information where required to do so by law.

6. Cookies and Tracking

My Site uses cookies. A cookie is a small text file stored on your device.

• Essential Cookies: These are necessary for the website to function and cannot be switched off. They are usually only set in response to your actions (e.g., setting your privacy preferences).
• Analytics Cookies (Plausible): I use Plausible Analytics, a privacy-focused analytics tool. Plausible does not use cookies and does not collect any personal data. It provides me with aggregated trends on website usage without tracking individuals across the web. All data is in compliance with GDPR, CCPA, and PECR.
• Consent: When you first visit my Site, a banner will ask for your consent to use any non-essential cookies. You can change your consent preferences at any time by clicking the cookie icon in the bottom left corner of the site.

7. Your Data Protection Rights under the GDPR

You have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data I hold about you.
• Right to Rectification: You can ask me to correct inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): You can ask me to delete your personal data.
• Right to Restrict Processing: You can ask me to suspend the processing of your data.
• Right to Data Portability: You can request a copy of your data in a machine-readable format.
• Right to Object: You can object to me processing your data based on my legitimate interests.
• Right to Withdraw Consent: Where I rely on your consent, you can withdraw it at any time (e.g., by using the “unsubscribe” link in every newsletter).

To exercise any of these rights, please contact me at alexander.zajic@krakenstein.at.

8. Data Retention

I will only retain your personal data for as long as necessary to fulfil the purposes I collected it for.

• Contact Form Data: I will retain your messages for 24 months after our conversation concludes unless a longer retention period is required by law.
• Newsletter & Survey Data: I will retain your email address for 24 months of inactivity (e.g., not opening emails or interacting with the newsletter). You can unsubscribe at any time, which will immediately remove you from the active list.

9. Data Security

I have implemented appropriate technical and organizational measures to secure your personal data from accidental loss, unauthorized access, use, alteration, and disclosure. My hosting provider offers state-of-the-art security.

10. Changes to This Privacy Policy

I may update this policy from time to time. The updated version will be indicated by an updated “Last Updated” date at the top of this policy. I encourage you to review this policy periodically.

11. How to Contact Me

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact me at: alexander.zajic@krakenstein.at

12. How to Contact the Supervisory Authority

If you are unhappy with how I have handled your data, you have the right to lodge a complaint with a supervisory authority, in particular in the EU state of your habitual residence, place of work, or place of the alleged infringement. For Austria, this is the: Österreichische Datenschutzbehörde ( Austrian Data Protection Authority)
Barichgasse 40-42 1030 Wien
Phone: +43 1 52 152-0
Email:dsb@dsb.gv.at
Website:https://www.dsb.gv.at