1. Data Controller
The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:
Matheo Windhaber, reachable at: matheo.windhaber@gmx.at
“Exec” is operated by a private individual, not a registered company. The Operator's name is to be filled in here as a placeholder; whether an address must additionally be provided depends on the legal classification of the offering and should be clarified as part of the recommended legal review.
2. General Information on Data Processing
Personal data means any information relating to an identified or identifiable natural person (e.g. name, IP address, email address). The Operator processes personal data only to the extent described in this Privacy Policy. During the Service's current promotional / introductory phase there are no user accounts and no contact form; personal data is mainly generated when the website is visited and through the advertising described below.
3. Hosting
This website is hosted by STRATO AG (Germany). When the website is accessed, the hosting provider automatically collects so-called server log files, which may contain: IP address, date and time of access, page/file accessed, amount of data transferred, browser and operating system used, and referrer URL (previously visited page).
Purpose: technically stable and secure provision of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functional and secure website).
As STRATO is based in the EU (Germany), this processing generally does not involve a transfer to a third country.
4. Cookies and Consent Management
This website uses cookies. Strictly necessary cookies, required for the website's basic functioning, may be set without consent (Art. 6(1)(f) GDPR). All other cookies — in particular those used for advertising, described in Section 5 — may only be set after the User has given active, informed consent (Section 165 of the Austrian Telecommunications Act 2021 (TKG 2021) in conjunction with Art. 6(1)(a) GDPR).
Consent is collected via the consent banner integrated into the website through Google AdSense's “Privacy & messaging” tool, which is displayed before any non-essential cookie is set. Users can review or withdraw their choice at any time via that banner.
5. Advertising via Google AdSense
This website displays advertisements provided by Google AdSense, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for users in the EEA/UK/Switzerland), which forms part of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Purpose: displaying and, where consented to, personalizing advertisements, as well as measuring the performance of advertisements.
Data processed: this may include a cookie identifier, IP address, device and browser information, the pages visited, and interactions with advertisements (e.g. clicks and impressions).
Legal basis: for advertising cookies and personalized advertising, the legal basis is the User's consent (Art. 6(1)(a) GDPR in conjunction with Section 165 TKG 2021), collected via the consent banner described in Section 4 before the relevant cookies are set. Where non-personalized advertising is shown without such cookies, this may instead be based on the Operator's legitimate interest in financing the Service (Art. 6(1)(f) GDPR).
International data transfer: data processed by Google may be transferred to and processed in the United States. Google relies on appropriate safeguards for such transfers, such as the EU-U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. Further information is available at Google's own data transfer disclosures.
Managing consent: Users can grant, review, or withdraw their consent to advertising cookies at any time via the consent banner on this website. Further options for managing ad personalization are available at Google's Ads Settings (adssettings.google.com) and at www.youronlinechoices.eu and www.aboutads.info.
Further information: Google's own Privacy Policy, describing how Google processes data in connection with its services (including AdSense), is available at policies.google.com/privacy, with additional information on partner sites at policies.google.com/technologies/partner-sites.
6. Discord
The website contains a link or widget to our Discord server (Discord Inc., USA).
Plain link
If this is a simple link (button or text), no data is transmitted to Discord merely by viewing the website. Only by actively clicking the link does the User leave this website and reach Discord; from that point on, Discord's own privacy policy applies exclusively.
Embedded widget
If, instead, an embedded Discord widget is used (e.g. a server preview as an iframe), data — such as the IP address — may be automatically transmitted to Discord in the USA as soon as the page loads, regardless of whether the invitation is clicked. In that case, prior consent is required from a data protection perspective, for example via a two-click solution (the widget is only loaded after consent). It should be clarified technically which of these two variants applies, and this section adjusted accordingly.
7. Rights of Data Subjects
Subject to statutory requirements, Users have in particular the following rights:
- Right of access to their processed personal data (Art. 15 GDPR);
- Right to rectification of inaccurate data (Art. 16 GDPR);
- Right to erasure of data (Art. 17 GDPR);
- Right to restriction of processing (Art. 18 GDPR);
- Right to data portability (Art. 20 GDPR);
- Right to object to processing (Art. 21 GDPR).
To exercise these rights, an informal message to the contact address given in Section 10 is sufficient.
8. Withdrawal of Consent
Where processing is based on consent (e.g. for advertising cookies), it may be withdrawn at any time with effect for the future, without affecting the lawfulness of processing carried out before the withdrawal.
9. Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, Users have the right to lodge a complaint with a data protection supervisory authority, in particular with:
The Austrian Data Protection Authority (Österreichische Datenschutzbehörde)Barichgasse 40–42, 1030 Vienna, Austria
www.dsb.gv.at
10. Contact
For questions about this Privacy Policy or to exercise your rights as a data subject, the Operator can be reached at: matheo.windhaber@gmx.at
11. Currency and Updates
This Privacy Policy will be updated as needed, in particular once the final list of cookies is determined, if the advertising setup changes, or if the scope of the Service changes (e.g. through the introduction of user accounts or payment functions).