Privacy

The essentials

• This website does not set cookies.
• There are no ads and no tracking across other websites.
• Plausible is used for visitor statistics. Plausible does not store IP addresses.
• Enquiries sent through the contact form arrive as an email in the Into Numbers inbox. They are only used to answer your enquiry.

1. Controller

Into Numbers Data Science GmbH
Erdbergstraße 10/67, 1030 Vienna, Austria
Email: office@intonumbers.com
Phone: +43 720 701010

No data protection officer has been appointed.

2. Visiting the website

The website is hosted by Amazon Web Services (AWS Amplify Hosting) in the Frankfurt am Main data centre. It is delivered through the Amazon CloudFront network. Your request may be answered by a server near you, including outside the EU.

On every visit, the following data is processed:

• IP address
• date and time
• requested address
• the page you came from (referrer)
• browser and operating system (user agent)
• status code and amount of data transferred

This creates access logs.

Purpose: delivering the website, finding errors, detecting and preventing attacks.

Legal basis: Art. 6(1)(f) GDPR. The legitimate interest is a secure and working website.

Retention: Server error logs are deleted after 30 days. Access logs are stored with the hosting provider for the duration of the hosting contract and are only analysed when there is a technical or security reason.

3. Contact form

When you submit the form, the following data is processed:

• required: name, email address, message
• optional: company, phone number
• automatically: page language and time of submission

Your details go to the website's server at AWS in Frankfurt. From there, Amazon Simple Notification Service (Frankfurt data centre) forwards them as an email to the Into Numbers inbox at Microsoft 365.

Purpose: answering your enquiry.

Legal basis: Art. 6(1)(b) GDPR if your enquiry is aimed at a contract. Otherwise Art. 6(1)(f) GDPR: the legitimate interest is answering enquiries.

Do you have to provide data? You do not have to use the form. Without your name, email address and message, however, a reply is not possible. You can also reach Into Numbers by email or phone.

Retention: If an enquiry does not lead to a contract, it is deleted 12 months after the last contact. If it does, the correspondence is kept for 7 years, as required by Austrian commercial and tax law.

Spam protection: The form uses ALTCHA. Your browser solves a small computing task that the website's server sets and checks. ALTCHA runs entirely on this server, sets no cookies and shares no data with third parties. The legal basis is Art. 6(1)(f) GDPR: the legitimate interest is protecting the form against abuse.

4. Contact by email or phone

If you send an email directly, your email address and the content of your message are processed. Emails are stored in the Into Numbers inbox at Microsoft 365. Legal basis and retention are the same as for the contact form.

5. Visitor statistics with Plausible

Visitor statistics are provided by Plausible Analytics from Plausible Insights OÜ, Estonia. Plausible shows which pages are read and where visitors come from.

When you open a page, your browser loads a small script from Plausible and sends:

• the page visited and the referrer
• browser, operating system and device type
• clicks on links to other websites
• whether a contact form was submitted successfully (without its content)

Plausible uses your IP address and browser identifier only briefly: to determine your approximate location (country, region, city) and to count visits. For this, Plausible creates an encrypted identifier using a key that is deleted every 24 hours. IP address and browser identifier are not stored. Plausible sets no cookies, builds no profiles and does not track you across other websites. The data stays in the EU.

Purpose: understanding which content is useful to visitors.

Legal basis: Art. 6(1)(f) GDPR. The legitimate interest is visitor statistics without personal reference.

Objection: You can object at any time. The simplest way is to block the script with a content blocker or your browser's privacy settings.

6. Fonts and other content

Fonts, images and scripts are served from the website's own server. The only exception is the Plausible script. Your browser does not connect to Google Fonts or similar services.

7. Recipients

These service providers are used as processors. A data processing agreement is in place with each of them.

• Amazon Web Services EMEA SARL, Luxembourg: hosting, forwarding the contact form
• Microsoft Ireland Operations Limited, Ireland: email
• Plausible Insights OÜ, Estonia: visitor statistics

Beyond that, your data is only shared where the law requires it.

8. Transfers outside the EU

AWS and Microsoft belong to groups headquartered in the USA. Both services are set up so that data is processed in the EU. Access from the USA can still not be ruled out. In addition, the Amazon CloudFront network may deliver page requests through servers outside the EU.

For the USA, the European Commission's adequacy decision on the EU-US Data Privacy Framework applies (Art. 45 GDPR). Amazon and Microsoft are certified under it. In addition, the European Commission's standard contractual clauses apply (Art. 46(2)(c) GDPR).

9. Your rights

You have the right to:

• access your data (Art. 15 GDPR)
• rectification (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object (Art. 21)

Right to object: Where data is processed based on Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation.

To exercise your rights, an email to office@intonumbers.com is enough.

You can also lodge a complaint with a data protection authority. In Austria, this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at

10. No automated decisions

No automated decisions within the meaning of Art. 22 GDPR are made, and no profiles are created.

11. Changes

If the website changes, this policy is updated. The version dated above applies.