Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Weblux PLATZHALTER: full company name, represented by Felix Aaron Heger
PLATZHALTER: full business address, Styria, Austria
Email: hegerfelix84@gmail.com · Phone: +43 664 1452414

2. General information on data processing

As a matter of principle, we only process our users' personal data to the extent necessary to provide a functional website as well as our content and services. Processing generally only takes place with the user's consent or on the basis of another legal permission (Art. 6 GDPR).

3. Contact form

If you send us enquiries via the contact form, the details you enter in the form are processed: the contact details you provide (name, email address, optionally phone number and business/sector), the package you choose and the type of your request (new website, takeover or redesign of an existing website), your short description, an optional link to your existing online profile (e.g. Google Business Profile, Instagram, old website) and any files you optionally upload (e.g. photos, flyers, price list). The purpose of the processing is to handle your enquiry and to create a first website draft. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures or performance of a contract).

Processing takes place on our own server; uploaded files are additionally delivered to us by email so that we can handle your enquiry. We do not pass this data on to third parties without your consent. The data is deleted as soon as it is no longer required for the purpose for which it was collected, at the latest when the enquiry does not lead to an order and no further contact takes place.

4. Customer portal

If you become our customer, we set up access to our customer portal for you. You log in via a "magic link": you enter your email address and receive a login link that is valid for a limited time; there is no separate password to store. After you log in, we set a technically necessary session cookie to keep you logged in during your visit (legal basis Art. 6(1)(b) GDPR; no advertising or analytics cookies).

In the customer portal we process: the status of your website, open and settled payment requests (amount, reference code, time; we have no access to your bank account, the payment itself is made by conventional bank transfer), as well as the change requests you submit in the portal, including any files you optionally upload. The purpose is the ongoing support of your website within the scope of our contractual relationship (Art. 6(1)(b) GDPR). This data is stored for the duration of the business relationship and is not passed on to third parties.

5. Hosting

PLATZHALTER: The hosting provider and server location will be added as soon as the production stack has been finalised. We make sure the hosting location is within the EU/Austria. Files uploaded via the contact form or the customer portal are also stored on this server, not with a separate third-party provider.

6. Cookies & analytics tools (Google Analytics)

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to understand how our website is used (e.g. which pages are visited and how often). Cookies are used for this purpose that enable an analysis of website usage.

These cookies are only set after you have expressly consented in the cookie banner. If you decline or make no choice, no analytics cookie is set and no connection to Google is established for this purpose. In this case, the legal basis is your consent (Art. 6(1)(a) GDPR). You can change or withdraw your decision at any time via the "Cookie-Einstellungen" (cookie settings) link in the footer; this applies across the whole site until you change it again.

If you have given consent, data including your shortened/anonymised IP address, device and browser information and your usage behaviour on this website is transferred to Google servers (including in the USA) and processed there. Google is certified under the EU-US Data Privacy Framework. Further information is available in Google's privacy policy.

Without your consent, we use only technically necessary functions (see section 4 on the session cookie in the customer portal).

7. Embedded fonts

To display fonts consistently, this website uses so-called web fonts (Sora, Inter, JetBrains Mono). The font files are embedded locally on our own server (self-hosting); when you visit this website, no connection is made to servers of Google or other third-party providers to load fonts. As a result, no IP addresses are transferred to third parties.

8. Your rights as a data subject

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to rectification, blocking or erasure of this data. You also have the right to restriction of processing, data portability and objection. You also have the right to lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

9. Changes to this privacy policy

We reserve the right to amend this privacy policy as soon as the data processing on this website changes, for example due to new tools or hosting providers.