Privacy Policy

Last updated: January 2025 | Applies to: vigntte-pass.eu

This Privacy Policy explains how VignttePASS, operating the website vigntte-pass.eu ("we", "us", "our"), collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian data protection law.

1. Data Controller

The data controller responsible for personal data processed through vigntte-pass.eu is:

Organisation	VignttePASS
Address	Mariahilfer Straße 45, 1060 Vienna, Austria
Email	[email protected]
Website	https://vigntte-pass.eu

2. Data We Collect

We collect the following categories of personal data:

Data Category	Examples	How Collected
Contact data	Name, email address	Contact form submission
Communication content	Message text	Contact form submission
Technical data	IP address, browser type, pages visited	Server logs (if any)
Preference data	Cookie consent status	localStorage on your device

We do not collect payment data, sensitive personal data, or data from children under 16 years of age.

3. How We Use Your Data

We use personal data for the following purposes:

Responding to enquiries submitted via the contact form
Improving the content and usability of our website
Complying with legal obligations under Austrian and EU law
Detecting and preventing technical issues or abuse

We do not use your data for marketing purposes, profiling, or automated decision-making.

4. Legal Basis for Processing

Processing Activity	Legal Basis (GDPR)
Responding to contact form enquiries	Article 6(1)(b) — performance of a contract / pre-contractual steps
Website analytics and improvement	Article 6(1)(f) — legitimate interests
Legal compliance	Article 6(1)(c) — legal obligation
Cookie consent management	Article 6(1)(a) — consent

5. Cookies and localStorage

This website uses localStorage (a browser-based storage mechanism) to remember your cookie consent preference. The key used is cookieConsent_vigntte-pass_eu. This data is stored only on your device and is not transmitted to our servers.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. No external analytics services (such as Google Analytics) are used on this website.

You can clear localStorage data at any time through your browser settings. This will reset your cookie consent preference and the banner will reappear on your next visit.

6. Contact Form Data

When you submit the contact form on our website, your name, email address, and message are used to compose an email that is sent directly to [email protected] via your own email client (mailto: protocol). We do not store contact form submissions on our servers. Your data is processed only for the purpose of responding to your enquiry.

7. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected:

Contact form enquiries: retained in email correspondence for up to 3 years, then deleted
Server logs (if any): retained for up to 30 days for security purposes
localStorage data: retained on your device until you clear it

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right of access — to request a copy of the data we hold about you
Right to rectification — to request correction of inaccurate data
Right to erasure — to request deletion of your data ("right to be forgotten")
Right to restriction of processing — to request that we limit how we use your data
Right to data portability — to receive your data in a structured, machine-readable format
Right to object — to object to processing based on legitimate interests
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. This website uses HTTPS encryption for all data in transit. Contact form data is transmitted via your own email client and is subject to your email provider's security measures.

10. Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):

Authority	Datenschutzbehörde (DSB)
Address	Barichgasse 40-42, 1030 Vienna, Austria
Website	www.dsb.gv.at
Email	[email protected]