Privacy Policy

1. Who is responsible (controller)

The data controller responsible for this website is:

2. Data we process when you visit

To serve the website we process a limited amount of technical data. We do not combine it with anything else and we do not use it to identify you.

• Server log data. When your browser requests a page, our hosting provider automatically processes your IP address, the requested URL, date and time, referrer and user-agent. This is necessary to deliver the site and to keep it secure and stable.
  Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in operating a secure, functioning website).
• Essential cookie. We set one strictly necessary session cookie (_enqodo_key) that the website needs to operate securely, including holding the token that protects against cross-site request forgery. It contains no tracking identifiers and is not used for analytics or advertising. Strictly necessary cookies do not require consent.
• Website analytics. We use Plausible Analytics to understand how our website is used, for example which pages are visited and how visitors find us. Plausible does not use cookies and does not store any information on your device. To count unique visitors, it combines your IP address and user-agent with a random value that is deleted every 24 hours. Your IP address and user-agent are never stored. We only see aggregated statistics such as page views, referrers, country, browser, operating system and device type, which cannot be used to identify you.
  Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in understanding and improving our website).

3. Hosting and recipients

The website is hosted on Fly.io (Fly.io, Inc., United States), which acts as our processor and processes the server log data described above on our behalf. Their handling of data is described in the Fly.io privacy policy.

For website analytics we use Plausible Analytics (Plausible Insights OÜ, Estonia), which also acts as our processor. The analytics data is stored on servers in Germany and does not leave the EU. Their handling of data is described in the Plausible data policy.

We do not sell your data or share it with anyone other than these processors.

4. International transfers

Fly.io is a US company and serves the site from data centres in multiple regions, which may be outside the European Economic Area. Fly.io, Inc. is certified under the EU-US Data Privacy Framework, so transfers of personal data to the United States are covered by the European Commission's adequacy decision of 10 July 2023. Plausible is an EU company and stores all analytics data in the EU.

5. How long we keep data

Server logs are kept only as long as needed for security and operation, then deleted or anonymised in the ordinary course by our hosting provider. The essential cookie expires at the end of your browser session. The random value Plausible uses to count unique visitors is deleted after 24 hours. The remaining analytics data cannot be linked to you and is kept for as long as we operate the website.

6. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict or object to processing (Art. 18 and 21);
• data portability (Art. 20);
• lodge a complaint with a supervisory authority (Art. 77).

To exercise any of these, email privacy@enqodo.com.

7. Right to complain

If you believe we process your data unlawfully, you may complain to the Austrian supervisory authority: