Privacy Policy
We value transparency and accountability. Reach out to us for any inquiries or concerns.
1. Controller
Thomas Muehlbacher
Alte Poststraße 102, 8020 Graz, Austria
E‑mail: imprint-d91d@tagtile.io
2. Contact for Data Protection
For any privacy‑related enquiries please e‑mail imprint-d91d@tagtile.io.
3. Individual Processing Activities
| No. | Activity | Data | Purpose | Legal Basis | Retention |
|---|---|---|---|---|---|
| 3.1 | Server log files (Vercel Inc.) | Truncated IP, UA, referrer, timestamp, path | Operation & security | Art. 6 (1) (f) GDPR | 30 days |
| 3.2 | Web analytics with Matomo (Easyname GmbH) | Pseudonymised IP, page views, device data | Reach measurement | Legitimate interest* / consent for cookies | 14 months raw |
| 3.3 | Newsletter (Brevo – double opt‑in) | E‑mail, name, tester checkbox | News & beta invites | Art. 6 (1) (a) GDPR; §107 TKG | Until withdrawal |
| 3.4 | E‑mail enquiries | E‑mail, content, meta | Answer enquiries | Art. 6 (1) (b) GDPR | 12 months |
| 3.5 | Feedback form (Plutio Ltd.), external (my.savory.at/...) | Form entries, technical data required to process the request | Service improvement | Art. 6 (1) (a) GDPR | 12 months |
| 3.6 | Map tiles & telemetry (Mapbox Inc.) | IP address, headers; anonymous usage events; localStorage mapbox.eventData* | Render the background map (site design) | Legitimate interest* | Tile logs 30 days; event data ≤ 12 months |
Scroll horizontally to see the full table on mobile devices.
IP addresses are stored only in truncated form (e.g. 192.168.xxx.xxx).
*Our legitimate interest lies in operating a secure, reliable website; a balancing test is available upon request.
The site cannot be rendered correctly without map tiles.
4. Cookies & Consent Management
No tracking cookies are placed before consent; Matomo runs in "cookieless" mode until you opt in via the banner or the “Manage Cookie Preferences” link in the footer. A single strictly‑necessary cookie cookie_consent (1 year) stores your choice.
After choosing a selection or opting in the following cookies or analytics cookies may be set:
cc__pk_id.* (13 months) • _pk_ses.* (30 min) • _pk_ref.* (6 months) • _pk_testcookie (Temporary cookie that expires almost immediately after being set.) • mtm_cookie_consent (1 year) – remembers your opt‑in; • mtm_consent_removed (30 years) – remembers an opt‑out. • matomo_sessid (14 days) – not identifying, prevents CSRF security issues • _pk_hsr (30 minutes) • _pk_uid (13 months) •
Other local storage objects:
MatomoAbTesting (No expiry)mapbox.eventData (12 months) – load counter • mapbox.eventData.uuid (12 months) – anonymous identifier
For more information visit the external Matomo FAQ and their privacy policy. For more information on our map provider, visit the external Mapbox Privacy Policy.
5. Recipients & Processors
| Service | Company / Location | Transfer Safeguard |
|---|---|---|
| Hosting / CDN | Vercel Inc., USA | SCC, EU–US DPF, EU hosting |
| Web server & Matomo DB | easyname GmbH, Austria | — |
| Newsletter | Sendinblue SAS (Brevo), France | EU hosting, DPA v9 |
| Feedback form | Plutio Ltd., United Kingdom | UK adequacy decision, DPA |
| Map service | Mapbox Inc., Washington DC, USA | EU–US DPF, SCC |
6. International Data Transfers
Data with Vercel may be processed in the USA under the EU–US Data Privacy Framework and SCC. Brevo stores data solely within the EU. Plutio operates in the UK under the adequacy decision.
7. Security Measures
We use TLS/HTTPS for all traffic and restrict server access to authorised personnel only, in line with Art. 32 GDPR.
8. Automated Decision‑Making
We do not engage in automated decision‑making or profiling within the meaning of Art. 22 GDPR.
9. Your Rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to processing, to data portability and to withdraw any consent at any time with future effect. Providing data is voluntary; without it certain features (e.g. newsletter) may be unavailable. After withdrawal your data are deleted within 30 days from operational systems.
10. Supervisory Authority & Complaints
You may lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40‑42, 1030 Vienna, Austria – dsb@dsb.gv.at – if you believe that the processing of your personal data infringes applicable law. If you have any questions or concerns regarding this policy, please do not hesitate to contact us at directly and informally at imprint-d91d@tagtile.io. We are open to feedback and will do our best to address your concerns.
11. External Links
External websites are beyond our control; we accept no liability for their content or privacy practices.
12. Copyright
All texts, images and graphics are protected by copyright. Any use outside statutory exceptions requires prior written permission.
13. Changes to this Policy
We may amend this policy to reflect legal or service changes. The latest version is always available here.