Privacy Policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is: TwoStack GmbH, Favoritenstraße 219/1/8, 1100 Vienna, Austria. Phone: +43 660 4532141, Email: office@twostack.at

2. Data Protection Officer

We are not required to appoint a Data Protection Officer pursuant to Art. 37 GDPR. For any data protection-related inquiries, please contact us directly at: office@twostack.at

3. Privacy at a Glance

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Various personal data are collected when you use this website. This privacy policy explains what data we collect and what we use it for.

4. Hosting and Server Log Files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The server location is Frankfurt am Main, Germany. A data processing agreement in accordance with Art. 28 GDPR has been concluded with Hostinger. The hosting provider automatically collects and stores information in server log files (IP address, browser type, operating system, referrer URL, hostname, time of access). This data is not merged with other data sources and is used exclusively for the secure operation of the website and for defending against attacks. Server log files are automatically deleted after 30 days at the latest. Data transmission between your browser and our server is continuously encrypted (TLS/HTTPS). Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure and stable website operation). For more information, please refer to: https://www.hostinger.com/legal/dpa

5. Contact Form

If you contact us via the contact form, the data you enter (name, email address, message) will be processed on the basis of your express consent (Art. 6 (1) (a) GDPR) for the purpose of handling your inquiry. Transmission is encrypted via TLS/HTTPS. To deliver the message to us, we use the email service provider Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as a processor. We exclusively use Resend's EU region (data center Frankfurt, Germany). A transfer to the USA cannot be fully ruled out technically and is safeguarded by a data processing agreement pursuant to Art. 28 GDPR, EU Standard Contractual Clauses (SCCs), as well as Resend's certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Resend's privacy policy: https://resend.com/legal/privacy-policy To protect against automated abuse (spam), your IP address is stored exclusively in hashed form (SHA-256) for a maximum of 60 seconds on our server (rate limiting). This does not allow any identification of you as a person. Your contact data will be deleted once your inquiry has been fully processed, at the latest after 3 years, unless statutory retention obligations apply. You may withdraw your consent at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out prior to it. To do so, please contact us by email at office@twostack.at.

6. Spam Protection with hCaptcha

To protect our contact form from automated requests (bots), we use hCaptcha in invisible mode. Provider: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA. hCaptcha processes your IP address and technical information about your browser and device in order to distinguish between human users and bots. According to the provider, no tracking or advertising cookies are set; only technically necessary cookies for fraud detection are used. A transfer of personal data to the USA may occur. This is safeguarded by EU Standard Contractual Clauses (SCCs) as well as Intuition Machines' certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). According to the provider, the collected data is not stored long-term. For more information, please refer to hCaptcha's privacy policy. Legal bases: Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (f) GDPR (legitimate interest in protecting our website from spam and abusive use). For more information, see: https://www.hcaptcha.com/privacy

7. Storage of Local Settings (LocalStorage)

Our website uses your browser's LocalStorage technology exclusively to store technically necessary UI settings (e.g., your selected display language or accessibility preferences such as font size). No tracking, analytics or advertising cookies are used. The only cookies set are technically necessary cookies from the spam protection service hCaptcha (see section 6), which are used exclusively for fraud detection.

8. Automated Decision-Making

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.

9. Your Rights as a Data Subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You may request information at any time about whether and which personal data we process about you.
• Right to rectification (Art. 16 GDPR): You have the right to have inaccurate or incomplete data corrected.
• Right to erasure (Art. 17 GDPR): You may request the deletion of your data, provided no statutory retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR): Under certain conditions, you may request the restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR): You may request that we provide your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You may object at any time to the processing of your data on the basis of Art. 6 (1) (f) GDPR.
• Right to withdraw consent (Art. 7 (3) GDPR): Where processing is based on your consent, you may withdraw it at any time with effect for the future.

To exercise your rights, please contact us at: office@twostack.at

10. Right to Lodge a Complaint with the Supervisory Authority (Art. 77 GDPR)

You have the right to lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde (DSB) Barichgasse 40–42, 1030 Vienna Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at