Privacy Policy

Controller

The controller within the meaning of the GDPR is:
Skyline Group GmbH
Grillparzerstraße 4
5020 Salzburg, Austria
chris@skyline.at

General

The protection of personal data is important to us. We process personal data exclusively on the basis of statutory provisions (GDPR, Austrian Telecommunications Act, Austrian Data Protection Act).

Contact

If you contact us by email, the data you submit will be stored for the purpose of processing your request. The legal basis is Art. 6 (1) (b) and (f) GDPR. We do not pass this data on without your consent.

Hosting & server logs

This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you visit the site, server logs are recorded automatically (IP address, timestamp, browser type, referrer). Processing serves the purpose of IT security pursuant to Art. 6 (1) (f) GDPR. A data processing agreement is in place with Vercel.

Transfers to third countries

Because Vercel Inc. is established in the United States, the processing described in this policy involves the transfer of personal data to a third country. Vercel Inc. is certified under the EU-US Data Privacy Framework (DPF), which the European Commission has recognised as providing an adequate level of protection (adequacy decision of 10 July 2023). The transfer is therefore based on Art. 45 GDPR. As a fallback, Vercel's data processing agreement incorporates the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR). See Vercel's DPF certification.

Cookies

We do not use advertising or cross-site tracking cookies. The only information we store on your device is a single local-storage entry recording your choice in the consent banner, so we do not ask again on every visit.

Web analytics (Vercel)

With your consent, we use Vercel Web Analytics (provided by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA) to measure aggregate site traffic. Vercel Web Analytics is designed to be privacy-friendly: it does not set tracking cookies, does not store personal identifiers, and uses a hashed, daily-rotated identifier to deduplicate visits. Collected data includes the requested URL, referrer, user agent, and approximate location derived from the IP address; the IP address itself is not stored. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time, with effect for the future, by clicking the “Manage cookies” link in the footer — this re-opens the consent banner so you can change your choice. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. More information at vercel.com/docs/analytics/privacy-policy.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to the processing of your personal data. To exercise these rights, contact us at chris@skyline.at.

You also have the right to lodge a complaint with the data protection authority. In Austria, this is the Austrian Data Protection Authority (dsb.gv.at).

Retention period

Personal data is stored only for as long as necessary for the respective processing purpose or as required by statutory retention obligations.