Privacy Policy
Controller
Rupert Kirchner
Wambacherstr. 14
4030 Linz
Austria
Email: [email protected]
Overview
This privacy policy explains which personal data may be processed when you visit the website, create an account, sign in, use the application, or submit a sponsor/contact inquiry.
Data processed when visiting the website
- IP address, request time, requested URL, browser/user-agent information, and technical log data
- security events, failed login attempts, rate-limit events, and abuse-prevention signals
- strictly necessary session cookies required for login, account sessions, and CSRF/security protection
Account and login data
- username, email address, password verification data for manual accounts
- OAuth identity information from Google or Microsoft when you choose social sign-in, such as email address, display name, provider, and provider account ID
- account status, role, approval state, login timestamps, and administrative audit events
Contact and sponsor inquiries
If you submit the sponsor/contact form, the entered name, email address, company, website, message, IP address, and submission time may be processed to review and answer the inquiry.
Purposes and legal bases
- operation of the website and application, account login, and session handling
- account approval and user administration
- security, fraud prevention, abuse prevention, and troubleshooting
- responding to contact and sponsor inquiries
- documenting administrative actions and system events
Depending on the context, processing may be based on contract preparation/performance, legitimate interests in secure operation and communication, consent where required, or legal obligations.
Cookies and similar technologies
The website currently uses only cookies and tokens that are necessary for account login, session handling, security, and form protection. These are required for the requested service and are not used for advertising tracking. See the Cookie Notice for details.
Cloudflare Turnstile
The registration and sponsor/contact forms use Cloudflare Turnstile to protect the website against spam and automated abuse. Cloudflare may process technical request data for this security check. This is used as a security measure for the form you request to submit.
Google and Microsoft sign-in
If you choose Google or Microsoft sign-in, you are redirected to the respective provider. The provider authenticates you and returns only the information needed to create or sign in to your Digital Twin Studio account, typically email address and basic profile information. The provider's own privacy terms apply on their sign-in pages.
Hosting and infrastructure
The website is currently self-hosted and exposed through Cloudflare infrastructure. Server logs and security logs may be processed for operation, troubleshooting, and abuse prevention.
Recipients / processors
Data may be processed by technical service providers required to operate the website, including Cloudflare for security/proxy services and Google or Microsoft when you actively choose their OAuth sign-in. Data is not sold.
International transfers
Some providers, such as Cloudflare, Google, Microsoft, or LinkedIn, may process data outside Austria or the European Economic Area. Where applicable, such transfers should rely on appropriate safeguards provided by the respective provider.
Retention
- Account records are kept while the account exists or while required for security/audit purposes.
- Security and technical logs are kept only for as long as reasonably necessary for operation, troubleshooting, and abuse prevention.
- Contact/sponsor inquiries are kept as long as needed to process the inquiry and follow up.
Your rights
You may request access, rectification, erasure, restriction of processing, data portability where applicable, and objection to processing. You may also contact the Austrian Data Protection Authority if you believe your data-protection rights are infringed.
No analytics or marketing tracking
At this stage the website does not intentionally use analytics, advertising, or cross-site marketing tracking cookies. If such tools are added later, a consent mechanism and this policy must be updated before activation.