Privacy policy

1. Controller

The controller responsible for this website is Rani Kais, trading under the brand Kais Solutions.

Address

Adelheid-Popp-Gasse 12/10, 1220 Vienna, Austria

Contact

office@kaissolutions.at

2. Hosting and access data

This website is provided via Cloudflare Pages. The provider is Cloudflare, Inc., San Francisco, USA. When the website is accessed, Cloudflare processes technically necessary connection and access data. This may include, in particular, the IP address, time, requested resource, browser and device information, referrer, status codes and security-relevant events.

The processing serves the secure, stable and efficient provision of the website, the defence against abusive access and error analysis. Where personal data is processed in this context, this is done on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.

Cloudflare operates a globally distributed network. Processing may therefore also take place outside the European Economic Area, in particular in the USA. For such transfers, Cloudflare provides a Data Processing Addendum including EU standard contractual clauses. Further information can be found in Cloudflare’s privacy policy.

3. Purposes of processing

Data is processed in order to provide the website securely and reliably, deliver content, detect errors and abusive access, and to evaluate and improve the reach, usage and technical performance of the website in aggregated form.

4. Contact by email

If you contact us by email, the information you provide is used to handle your enquiry. This website itself does not store any form entries.

If your enquiry relates to a potential or existing contract, the processing is based on Art. 6(1)(b) GDPR. For other enquiries, it is based on Art. 6(1)(f) GDPR; our legitimate interest lies in responding to your message appropriately.

Internally, only Rani Kais has access to incoming messages. For the technical provision of the mailbox we use Microsoft Exchange Online as part of Microsoft 365. The provider for the European Economic Area is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes the email data on our behalf on the basis of the Microsoft Products and Services Data Protection Addendum.

For Microsoft 365 tenants set up accordingly in the EU or EEA, Microsoft commits to storing Exchange Online mailbox content within the designated European data region as a rule. In limited cases, data may be processed outside this region. Further information can be found in Microsoft’s privacy statement.

Enquiries that do not lead to an order or contractual relationship and are not subject to a statutory retention obligation are generally deleted twelve months after the communication has ended. Email correspondence relevant under contract, tax or company law is generally retained for seven years from the end of the calendar year concerned, in accordance with statutory retention obligations. Longer storage only takes place where this is necessary because of pending proceedings or for the establishment, exercise or defence of legal claims.

In the case of a justified request for erasure, we delete the data concerned earlier, provided there is no statutory retention obligation or other permissible reason for further storage.

5. Cookies and external content

According to the provider, Cloudflare Web Analytics does not use cookies and does not store any identifiers in local storage for measurement. Beyond that, no advertising trackers, embedded social media feeds or automatically loaded video platforms are used.

For Cloudflare Web Analytics alone, no consent banner is therefore provided in the currently planned technical configuration. If the configuration changes or further services are added, we will check before activating them whether consent is required and whether this policy needs to be updated.

6. Cloudflare Web Analytics

In live operation we use Cloudflare Web Analytics, a service of Cloudflare, Inc. The service helps us understand page views, reach and technical performance of this website in aggregated form and to improve the website.

For this purpose, a JavaScript beacon is loaded from static.cloudflareinsights.com. According to the current Cloudflare documentation, it processes in particular page views, host and page path, referrer host, approximate country of origin, device type, browser, operating system, navigation type, as well as loading times and other performance metrics. Query strings are currently not logged.

Cloudflare states that Web Analytics does not use cookies or local storage entries, does not create individual user profiles through fingerprinting and does not track individual visitors across different websites. Cloudflare describes the service as designed so that no personal visitor data is collected or used.

Where personal data is nevertheless processed during the technical transmission, we base the processing on Art. 6(1)(f) GDPR. Our legitimate interest lies in privacy-friendly measurement of reach and website performance and in the technical and editorial improvement of our offering.

According to Cloudflare’s current information, raw beacon data is stored for seven days and then aggregated. Reports are currently available in the Cloudflare dashboard for the past six months. Information on storage may change as the service evolves.

Further details can be found in the Cloudflare Web Analytics documentation and in Cloudflare’s privacy policy. You can object to processing based on legitimate interests, on grounds relating to your particular situation, via the contact address given above.

7. Storage period

The storage periods described in section 6 apply to Cloudflare Web Analytics. Otherwise, personal data is only processed for as long as is necessary for the respective purpose or as statutory retention obligations require.

The deletion and retention periods described in section 4 apply to email communication.

We do not export or store any additional hosting and security logs in our own systems. Where Cloudflare processes such data for secure technical operation, its storage period depends on the Cloudflare configuration used and the product-specific retention periods that apply there.

8. Rights of data subjects

Within the statutory requirements, you have in particular the right of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent you have given at any time with effect for the future.

If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria.