Privacy Policy

A. General Information

1. Controller

The controller for all processing activities described in this Privacy Policy is

SkunkWerks GmbH

Naufahrtweg 153, Vienna 1220, Austria

Commercial Register (Firmenbuch) No. FN 410811i, Commercial Court of Vienna

E-mail: compliance@SkunkWerks.at | signal: dch.27

Because SkunkWerks GmbH is established in the European Union, no additional EU-GDPR representative is required under Art. 27 General Data Protection Regulation (GDPR).

2. Data-Protection Officer

Data-Protection Officer (DPO)

SkunkWerks GmbH -- DPO Office

Naufahrtweg 153, Vienna 1220, Austria

E-mail: compliance@SkunkWerks.at

3. Your Rights

Under the GDPR (EU) 2016/679 (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz or DSG) you may, at any time and free of charge, exercise the following rights:

Right Articles Explanation
Withdraw consent Art. 7 (3) Revoke consent with effect for the future.
Access Art. 15 Obtain confirmation and a copy of data we process about you.
Rectification Art. 16 Correct or complete inaccurate data.
Erasure Art. 17 Have data deleted ("right to be forgotten").
Restriction Art. 18 Have processing limited under certain conditions.
Data portability Art. 20 Receive your data in a structured, commonly‑used, machine‑readable format.
Object Art. 21 Object to processing based on our legitimate interests or to direct marketing.

To exercise your rights, contact the DPO or compliance@SkunkWerks.at. Please write from—or refer to—the e‑mail address registered in your SkunkWerks account so we can authenticate you.

You also have the right to lodge a complaint with the Austrian supervisory authority:

Datenschutzbehörde, Barichgasse 40‑42, 1030 Vienna, Austria, www.dsb.gv.at.

4. Legal Bases for Processing

We process personal data only where at least one lawful basis under Art. 6 GDPR applies:

4.1. Consent (Art. 6 (1)(a) GDPR);

4.2. Contract performance / pre‑contractual measures (Art. 6 (1)(b));

4.3. Legal obligation (Art. 6 (1)(c)), e.g. record‑keeping duties under the Austrian Commercial Code (Unternehmensgesetzbuch (UGB)) and the Federal Fiscal Code (Bundesabgabenordnung (BAO));

4.4. Legitimate interests pursued by SkunkWerks GmbH or a third party (Art. 6 (1)(f)), balanced against your fundamental rights and freedoms.

5. Retention Periods

Data are erased or access is restricted as soon as the purpose of processing no longer applies, unless longer retention is required by law (e.g., seven‑year retention of accounting records under § 212 UGB and § 132 BAO) or necessary for the establishment, exercise, or defence of legal claims.

6. Children

Our services are not directed to persons under 16 years. We do not knowingly collect personal data from children.

7. Recipients, Third‑Country Transfers, Linked Sites

We share data only:

  • with Austrian or EU/EEA service providers acting as processors under Art. 28 GDPR (e.g., hosting, CRM, payment);
  • with independent controllers such as payment‑service providers, banks, postal operators, insurers, professional advisers, or public authorities where legally required.

Where data are transferred to recipients in third countries (e.g., the United States), we rely on:

  • Adequacy Decisions (Art. 45 GDPR), where available, or
  • Standard Contractual Clauses as approved by Commission Implementing Decision (EU) 2021/914, supplemented by additional safeguards where necessary

Our website may contain links to third‑party sites. SkunkWerks GmbH is not responsible for the data‑processing practises of such sites.

8. Data Security

We employ state‑of‑the‑art technical and organisational measures pursuant to Art. 32 GDPR, including TLS encryption in transit, role‑based access controls, and regular security audits.

9. Automated Decision‑Making

No automated decision‑making or profiling (Art. 22 GDPR) takes place.

10. Processing within the EU/EEA

All processing covered by this Policy is subject to the GDPR and the Austrian DSG. Your statutory rights (see cl. 3 above) therefore apply in full.

B. Collection and Processing of Your Personal Data When Using Our Website

1. Technical Provision & Hosting

When you visit SkunkWerks.at or any sub‑domain, our servers automatically log:

  • date/time of request;
  • IP address (truncated after 24 h);
  • requesting ISP / hostname;
  • referrer URL;
  • pages viewed and files requested;
  • data volume, HTTP status code;
  • browser & OS information.

Temporary storage is required to deliver the website (Art. 6 (1)(b)). Continued storage (with IP truncation) is based on our legitimate interest in ensuring network and information security (Art. 6 (1)(f)). Log files are kept for 30 days and then deleted.

2. Commercial Services

a. Account Registration

To open a SkunkWerks account you must supply:

  • first & last name;
  • postal address;
  • e‑mail;
  • telephone;
  • (for companies) legal entity name & VAT ID.

We also record the registration IP and timestamp. Purpose: create and manage your account, process orders, and pre‑fill domain‑registration data (Art. 6 (1)(b)). Optional data you supply are processed on the basis of our legitimate interest in efficient communication (Art. 6 (1)(f)).

b. Payments

We integrate the external payment provider Mollie, which acts as its own controller (see the Mollie privacy notice here: https://www.mollie.com/gb/legal/privacy OR https://www.mollie.com/at/legal/privacy). Transfers are necessary for contract performance (Art. 6 (1)(b)) and our legitimate interest in secure payment & fraud prevention (Art. 6 (1)(f)).

c. Direct Marketing to Existing Customers

Under § 107 (3) of the Austrian Telecommunications Act (TKG 2021) and Art. 6 (1)(f) GDPR we may send e‑mail/postal offers about similar SkunkWerks products. You can object at any time by e‑mailing compliance@SkunkWerks.at or via the unsubscribe link.

d. Domain Query (WHOIS)

When you search for a domain, we process the query string and log‑file data. Purpose: provide requested WHOIS information (Art. 6 (1)(b)). Search logs are deleted after seven days.

3. Contact & CRM

If you contact us via e‑mail, phone, or webform, we process your contact details and conversation content to address your request (Art. 6 (1)(b) or (f)). Messages are archived for up to seven years where legal retention duties exist; otherwise deleted after resolution.

C. Web Analytics (Cookies and Similar Technologies)

General Information

When you visit SkunkWerks.at, we store or read information on your device using cookies. All cookies are technically indispensible (see cl3 below), processing is based on your prior consent in accordance with Art. 6 (1)(a) GDPR and § 165 Telecommunications Act 2021 (TKG 2021).

1. Web-Analytics

Service Provider & Safeguards Purpose & Data Categories Cookie Lifetime / Storage Legal Basis
SkunkWerks GmbH SkunkWerks GmbH The cookie we use stores authentication information to identify the user session and the user IP address. Duration of session Art. 6 (1)(f) GDPR, § 165 (3) TKG 2021.
Plausible.io Plausible Insights OÜ Aggregated usage statistics (page views, session, truncated IP, coarse location, device/browser data). n/a Legitimate interest (Art. 6 (1)(f)); no personal data stored, only in aggregation.

2. Withdrawal of Consent & Managing Preferences

You may change or withdraw your consent at any time:

  1. Delete cookies in your browser or use browser add‑ons;
  2. Contact us at compliance@SkunkWerks.at if you need assistance.

Your withdrawal does not affect the lawfulness of processing based on consent before its withdrawal (Art. 7 (3) GDPR).