Loading...
Loading...
The data controller within the meaning of the General Data Protection Regulation (GDPR) is: TwoStack GmbH, Favoritenstraße 219/1/8, 1100 Vienna, Austria. Phone: +43 660 4532141, Email: office@twostack.at
We are not required to appoint a Data Protection Officer pursuant to Art. 37 GDPR. For any data protection-related inquiries, please contact us directly at: office@twostack.at
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Various personal data are collected when you use this website. This privacy policy explains what data we collect and what we use it for.
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. The server location is Frankfurt am Main, Germany. A data processing agreement in accordance with Art. 28 GDPR has been concluded with Hostinger. The hosting provider automatically collects and stores information in server log files (IP address, browser type, operating system, referrer URL, hostname, time of access). This data is not merged with other data sources and is used exclusively for the secure operation of the website and for defending against attacks. Server log files are automatically deleted after 30 days at the latest. Data transmission between your browser and our server is continuously encrypted (TLS/HTTPS). Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure and stable website operation). For more information, please refer to: https://www.hostinger.com/legal/dpa
When you contact us through one of our forms, the data you enter is processed on the basis of your explicit consent (Art. 6 (1) (a) GDPR) for the purpose of handling your enquiry. For the general contact form that is your name, email address and message. The enquiry about the Website Management Package additionally includes the company name, plus the voluntary details phone number, existing website, industry, company size, preferred start date, the modules you selected, a free-text description of additional features you would like, and up to two preferred times for a first conversation. Transmission is encrypted via TLS/HTTPS. To deliver the message to us, we use the email service provider Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as a processor. We exclusively use Resend's EU region (data center Frankfurt, Germany). A transfer to the USA cannot be fully ruled out technically and is safeguarded by a data processing agreement pursuant to Art. 28 GDPR, EU Standard Contractual Clauses (SCCs), as well as Resend's certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). Resend's privacy policy: https://resend.com/legal/privacy-policy Your enquiry is additionally stored in our customer portal, which runs on a server operated by us within the European Union. That is where we work on it; no third party has access. Storage happens before the email is sent, so that your enquiry survives an outage of the mail path. Stored enquiries are deleted automatically after 12 months. If your enquiry leads to a customer relationship, it is kept as a record of origin and deleted together with your customer record. To protect against automated abuse (spam), your IP address is stored exclusively in hashed form (SHA-256) for a maximum of 5 minutes on our server (rate limiting). This does not allow any identification of you as a person. Your contact data will be deleted once your inquiry has been fully processed, at the latest after 3 years, unless statutory retention obligations apply. You may withdraw your consent at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out prior to it. To do so, please contact us by email at office@twostack.at.
To protect our contact form from automated requests (bots), we use hCaptcha in invisible mode. Provider: Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA. hCaptcha processes your IP address and technical information about your browser and device in order to distinguish between human users and bots. According to the provider, no tracking or advertising cookies are set; only technically necessary cookies for fraud detection are used. A transfer of personal data to the USA may occur. This is safeguarded by EU Standard Contractual Clauses (SCCs) as well as Intuition Machines' certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). According to the provider, the collected data is not stored long-term. For more information, please refer to hCaptcha's privacy policy. Legal bases: Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (f) GDPR (legitimate interest in protecting our website from spam and abusive use). For more information, see: https://www.hcaptcha.com/privacy
Our website uses your browser's LocalStorage technology exclusively to store technically necessary UI settings (e.g., your selected display language or accessibility preferences such as font size, reduced motion or high contrast). The interactive product demo at /wmp/demo additionally uses SessionStorage so that your editing state survives a page reload; that state remains in your browser only, is never transmitted to us and is discarded when you close the tab. The reach measurement (see section 8) sets no cookies and stores no data on your device. No tracking, analytics or advertising cookies are used. The only cookies set are technically necessary cookies of the spam-protection service hCaptcha (see section 6), used solely for fraud detection.
To understand which content on this website is used, we operate our own cookieless reach measurement. No third-party service is involved. The data is processed exclusively on servers operated by us within the European Union, is not passed on to third parties and is not used for advertising. No cookies are set, and no data is stored on or read from your device. No consent is required for this (§ 165 para. 3 Austrian TKG 2021). The following is recorded, and nothing else: the page visited (without query parameters), the language version, the device class (desktop, tablet or mobile), the hostname of the referring website (e.g. "google.com", not the full address), which of a set of controls defined by us in advance were operated, and which sections of a page were in view. Only the identity of the control is recorded; for links leading away from our website, only a name assigned by us in advance and never the destination address. Content you enter in the product demo or the contact form is neither transmitted nor stored; for text entry we merely record that some input took place. For dwell time no figure in seconds is stored. Per section we store exactly one of four classes (under 5 seconds, 5 to 15 seconds, 15 to 45 seconds, longer). Timing pauses while the browser tab is in the background. This shows which content gets read, but not the chronological course of an individual visit. Your IP address is not stored. From your IP address and browser identifier our server computes a short value (SHA-256) using a random key that changes daily and exists only in memory. That value serves the single purpose of not counting requests from the same visit twice within one day. It permits no recognition across several days, no combination with other data and no identification of you as a person; once the day rolls over the key is irrecoverably gone, so not even we can reconstruct the previous day’s values. The browser signals "Do Not Track" (DNT) and "Global Privacy Control" (GPC) are respected: if either is enabled, nothing is recorded and nothing is transmitted. Requests from automated programs (bots) are discarded. The statistical data is deleted automatically after 13 months. The legal basis is our legitimate interest in the needs-based design and improvement of our website (Art. 6 (1) (f) GDPR). You may object to this processing at any time, most easily by enabling DNT or GPC in your browser, or informally by email to office@twostack.at.
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place. The reach measurement described in section 8 produces aggregated statistics only; no user profiles are created and no data is combined across different websites.
You have the following rights regarding your personal data:
To exercise your rights, please contact us at: office@twostack.at
You have the right to lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde (DSB) Barichgasse 40–42, 1030 Vienna Phone: +43 1 52 152-0 Email: dsb@dsb.gv.at