Privacy Policy

Controller

Udivox
Rötzergasse, 1170 Wien, Austria
studio@udivox.com · +43 681 811 86150

What we process

• Server logs (IP address, date/time, URL, referrer, user agent, status code) for security and technical delivery.
• Communication data if you email or call us (contact details, message content, metadata).
• Third-party assets you load from CDNs (e.g., Google Fonts, AOS/GSAP on public CDNs) may receive your IP to deliver files.

Purposes & legal bases

• Provide and secure the website (legitimate interests, Art. 6(1)(f) GDPR).
• Reply to inquiries / pre-contractual steps (Art. 6(1)(b) GDPR).
• Legal obligations (e.g., retention duties) (Art. 6(1)(c) GDPR).

Cookies & tracking

We currently do not set non-essential cookies. If we introduce analytics or marketing pixels, we will ask for consent and update this policy.

Recipients & processors

We use common infrastructure and content delivery networks to operate the site and deliver assets. When loading external libraries (e.g., Google Fonts, cdnjs, unpkg) your IP address is technically required to deliver files; these providers act as independent controllers or processors under their terms.

Transfers outside the EEA

When third-party providers are located outside the EEA, transfers may occur under the EU Standard Contractual Clauses or other appropriate safeguards as provided by the provider.

Retention

Server logs are kept only as long as necessary for security and troubleshooting. Messages and project-related correspondence are retained per statutory requirements and our legitimate interests in documentation.

Your rights

You have the rights of access, rectification, erasure, restriction, portability, and to object to processing where applicable (Arts. 15–21 GDPR). You may withdraw consent at any time with future effect if processing relies on consent.

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): dsb.gv.at.

Security

We use reasonable technical and organizational measures to protect personal data appropriate to risk.

Changes

We may update this policy to reflect changes in processing or law. The current version applies.