Privacy

Which data is collected when you visit this website, what we process it for, how long we keep it, and what rights you have.

Controller

The controller for the processing of personal data in connection with this website is pixelpoint multimedia werbe GmbH, Rosentaler Straße 150, 9020 Klagenfurt am Wörthersee, Austria, phone +43 463 500 777, email office@pixelpoint.at. We answer questions about data protection at the same address.

This statement covers pixelmap.at including the maps embedded in its pages. The full map application at maps.pixelmap.at, the developer documentation at docs.pixelmap.at, and the maps individual destinations run under their own name are separate services with their own statements. The same applies to other websites we link to, such as pixelpoint.at or openstreetmap.org. Following such a link takes you outside the scope of this text. As long as you do not click the link, nothing is loaded from there.

Which data we process

When you open the website

When you open this website, your browser transmits technical data to our server: a truncated IP address, the date and time of access, the address requested, the result and size of the response, and the details your browser sends with every request of its own accord: browser type and operating system, preferred language and, if your browser transmits it, the page you came from (referrer). Credentials and cookies a browser might send are made unreadable before logging. Truncated means that the trailing part of the address is removed before it is logged: for IPv4 the first three of four number groups remain, for IPv6 the first three of eight. This no longer allows an individual connection to be identified. If a technical error occurs during a request, the error log may contain the full IP address; that log, too, is deleted after seven days at the latest. This data is technically necessary to deliver the page and is kept in server logs. The connection is encrypted throughout (HTTPS).

When you open a map

On several pages, a still image stands in for a map at first. Only when you click “Open map” does your browser fetch settings, map symbols, glyphs and map tiles from further servers operated by pixelpoint multimedia werbe GmbH (maps.pixelmap.at, vtiles.pixelmap.at, tilecache.pixelmap.at). The same technical data arises as when you open the website, and it is logged there in the same truncated form. As long as you open no map, nothing is fetched from these servers.

What you send us yourself

Beyond that, we only process data you send us yourself, namely through the contact form (see “Getting in touch”).

Cookies and external services

This website sets no cookies. That applies to analytics, to advertising and tracking, and to operating the site as well. There is therefore no cookie banner, because there is nothing to consent to.

We embed no external services: no fonts from third-party servers, no third-party map services, no video platforms, no social networks, no analytics tools. Everything this page loads comes either from the page itself or from the three servers operated by pixelpoint multimedia werbe GmbH named above.

What is stored in your browser

As long as you change no setting, this website stores nothing on your device. If you choose a display mode in the page footer (light, dark or automatic), the website remembers that choice locally in your browser. This storage is strictly necessary for the setting you explicitly asked for and therefore requires no consent (Section 165(3) of the Austrian Telecommunications Act 2021). The value contains no personal data, never leaves your device, and can be deleted at any time through your browser settings.

The embedded maps store nothing on your device, including after you have opened them.

Getting in touch

If you use the contact form, you send us your name, email address, subject and message, plus your organisation if you provide it. We need the name, email address, subject and message in order to reply. Using the form is voluntary; you are just as welcome to write to us directly.

These details are delivered to us as an email only and used solely to handle your enquiry. Nothing is stored on the web server: no database, no copy, no ticketing system. If delivery fails, you receive an error message with an alternative email address. The form service’s technical logs contain no content, no names and no addresses, only a timestamp, the result and a random reference number.

To protect against abuse, the service limits how many submissions arrive from one sender address: no more than five in ten minutes. For that purpose, and only that one, it uses the full, untruncated IP address; truncating it would block whole address ranges together. That address is held solely in the service’s memory, is never written to any disk, and is deleted no later than eleven minutes after the last submission, or immediately if the service restarts.

Purposes and legal bases

• Providing the website and the maps, server logs: to deliver the pages, operate them reliably, and detect and prevent disruption and abuse. The legal basis is our legitimate interest in a functioning, secure service (Art. 6(1)(f) GDPR).
• The form’s request limit: to fend off automated mass submissions. The legal basis is our legitimate interest in a contact channel free of abuse (Art. 6(1)(f) GDPR).
• Contact enquiries: to answer your enquiry. Where it concerns possible cooperation, the legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR); otherwise it is our legitimate interest in answering enquiries addressed to us (Art. 6(1)(f) GDPR).
• Stored display mode: to keep your choice for your next visit (Section 165(3) of the Austrian Telecommunications Act 2021; no personal data is involved).

There are no other purposes, in particular no advertising, no profiling and no sale of data. No automated decision-making, including profiling, takes place.

Recipients and processors

Your data is not sold or passed on to third parties for their own purposes. Three processors are involved, each on the basis of a data processing agreement under Art. 28 GDPR:

• Hetzner Online GmbH, Germany: operation of the servers on which this website, the form service and the map services run and on which the server logs are held. Located in Germany.
• Amazon Web Services EMEA SARL, Luxembourg (Amazon SES, Frankfurt region, eu-central-1): delivery of the emails from the contact form.
• Microsoft Ireland Operations Ltd., Ireland (Microsoft 365): operation of our email mailbox, in which contact enquiries arrive and are handled.

The server logs do not leave the servers at Hetzner: they are neither forwarded nor handed to an external logging service nor backed up. We analyse them on the same server to monitor operations; the only things that leave it are counts such as the number of requests, without IP addresses.

Amazon and Microsoft process the data in data centres within the European Union. Both belong to groups headquartered in the United States, so access from there cannot be ruled out entirely. For that case, both groups are certified under the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of protection (Art. 45 GDPR); in addition, the European Commission’s standard contractual clauses apply (Art. 46(2)(c) GDPR).

Authorities receive data only where a legal obligation to provide it exists.

Retention period

• Server and error logs, including their analysis on the server: overwritten automatically and deleted after seven days at the latest.
• Contact enquiries: remain as emails in our mailbox and are deleted as soon as the enquiry has been dealt with. If it leads to an engagement, we keep the business correspondence for as long as statutory retention obligations require, usually seven years (Section 132 of the Austrian Federal Fiscal Code, Section 212 of the Austrian Commercial Code).
• The form’s request limit: only submissions from the last ten minutes are counted; the IP address used for this is held in memory only and is deleted no later than eleven minutes after the last submission.
• Stored display mode: remains until you change it or clear your browser data. It is held solely on your device.

Your rights

You have the right of access to the data processed about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Contact us informally at office@pixelpoint.at for this.

Right to object: Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the supervisory authority. In Austria, that is the Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.