Privacy Policy

1. Who is responsible (controller)

The data controller responsible for this website is:

2. Data we process when you visit

To serve the website we process a limited amount of technical data. We do not combine it with anything else and we do not use it to identify you.

• Server log data. When your browser requests a page, our hosting provider automatically processes your IP address, the requested URL, date and time, referrer and user-agent. This is necessary to deliver the site and to keep it secure and stable.
  Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in operating a secure, functioning website).
• Essential cookie. We set one strictly necessary session cookie (_enqodo_key) that the website needs to operate securely, including holding the token that protects against cross-site request forgery. It contains no tracking identifiers and is not used for analytics or advertising. Strictly necessary cookies do not require consent.

3. Hosting and recipients

The website is hosted on Fly.io (Fly.io, Inc., United States), which acts as our processor and processes the server log data described above on our behalf. Their handling of data is described in the Fly.io privacy policy. We do not sell or share your data with any other third parties.

4. International transfers

Fly.io is a US company and serves the site from data centres in multiple regions, which may be outside the European Economic Area. Fly.io, Inc. is certified under the EU-US Data Privacy Framework, so transfers of personal data to the United States are covered by the European Commission's adequacy decision of 10 July 2023.

5. How long we keep data

Server logs are kept only as long as needed for security and operation, then deleted or anonymised in the ordinary course by our hosting provider. The essential cookie expires at the end of your browser session.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict or object to processing (Art. 18 and 21);
• data portability (Art. 20);
• lodge a complaint with a supervisory authority (Art. 77).

To exercise any of these, email privacy@enqodo.com.

7. Right to complain

If you believe we process your data unlawfully, you may complain to the Austrian supervisory authority: