Privacy Policy

Last updated: 1 January 2024. This policy applies to the website infovignette.online.

1. Data Controller

VignetteInfo Austria, Mariahilfer Str. 45, 1060 Wien. Email: [email protected]. Phone: +43 1 234 5678.

2. Data Collected

We collect only the minimum data necessary to operate this information website. This includes: data you voluntarily submit via the contact form (name, email address, message content); technical data automatically recorded by our server (IP address, browser type, pages visited, timestamps); and preferences stored locally in your browser (cookie consent status via localStorage). We do not collect payment information, government identification, or sensitive personal data as defined under GDPR Article 9.

3. Purpose of Processing

We process your data for the following purposes: responding to enquiries submitted via the contact form (legal basis: legitimate interest / contract performance); improving website content and user experience (legal basis: legitimate interest); complying with legal obligations (legal basis: legal obligation). We do not use your data for automated decision-making or profiling.

4. Cookies and localStorage

This website uses localStorage (not traditional cookies) to store your cookie consent preference under the key cookieConsent_infovignette.online. This data is stored only in your browser and is never transmitted to our servers. We do not use third-party tracking cookies, advertising cookies, or analytics services. The UIkit CSS/JS framework is loaded from a CDN (jsdelivr.net); this CDN may set its own cookies — please refer to jsDelivr's privacy policy for details.

5. Contact Form

When you submit the contact form, your name, email address and message are transmitted via your email client (mailto protocol) to us. This data is not stored on our servers. We use this information solely to respond to your enquiry. We do not share this data with third parties except as required by law.

6. Third Parties

We do not share your personal data with third parties except where necessary to provide our services or as required by law. We do not use third-party analytics services, advertising networks, or social media tracking pixels.

7. Your Rights

Under GDPR, you have the following rights: right of access to your personal data; right to rectification of inaccurate data; right to erasure ("right to be forgotten"); right to restriction of processing; right to data portability; right to object to processing. To exercise these rights, contact us at [email protected].

8. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Contact form enquiries are deleted after 12 months. Server logs are deleted after 30 days.

9. Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, loss or disclosure. Our website is served over HTTPS. We regularly review and update our security measures.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be published on this page with an updated date. We recommend you review this page periodically. Continued use of this website after changes constitutes acceptance of the updated policy.