Privacy Policy

1. Controller

Daniel Michael Andreas Hösele, MSc, BSc, “revamped”, Ungerdorf 161, 8200 Gleisdorf, Austria, email: hello@revamped.tech. No data protection officer has been appointed, and none is required by law.

2. This website (revamped.tech)

• Server logs: When you visit, our hosting provider processes technically necessary data (IP address, time, page requested, browser). Purpose: delivering the website and keeping it secure. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• No cookies, no advertising services: This website sets no cookies and loads no advertising services. Fonts are served from our own server. Your color preference (light/dark) is stored only by your browser.
• Visitor statistics (Umami): To see which pages are read and which buttons are used, we count visits with Umami. Umami sets no cookies, stores nothing on your device and does not recognize you across several days or websites; your IP address is not stored but only used to determine your country and a daily changing, anonymous visit identifier. We record the page visited, the referring page, browser, operating system, device type, country and clicks on individual buttons. Umami runs on servers of Internet Group AG (Switzerland); the data is not passed on to third parties. Legal basis: legitimate interest in improving our service (Art. 6(1)(f) GDPR).
• Error reports (Sentry): If a technical error occurs on this website, in the customer area or on our servers, we send an error report to Sentry: the error message, the affected page and code location, browser, operating system and device type. We do not send your IP address, cookies, form input or email address. Reports are stored in the EU (Frankfurt) and deleted after 90 days at the latest. Legal basis: legitimate interest in error-free and secure operation (Art. 6(1)(f) GDPR).
• Website check: We use the address you enter to fetch and assess that one public home page. We do not store the result or the address; we process your IP address only in encrypted (hashed) form to limit abuse. Legal basis: your request (Art. 6(1)(b) GDPR) and legitimate interest (point (f)).

3. Customer area and preview

• Login: Your email address and a one-time login code we send you. After you log in, the customer area sets a technically necessary session cookie. Legal basis: contract or pre-contractual measures (Art. 6(1)(b) GDPR).
• Bot protection: When you start a preview, Cloudflare Turnstile checks whether a human is making the request; in doing so, Cloudflare processes technical data from your browser and your IP address. Legal basis: legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).
• Your current website: We read the public pages of the website you specify (texts, images, contact details, opening hours) and use them to create your new website. We delete this inventory together with your website; if no website results from it, after 30 days. We delete uploaded designs after 30 days.
• AI processing: For design, translations and your change requests, we send the content of your website and your requests to an AI provider (see section 8). According to their terms, these providers do not use this data to train their models. Legal basis: contract (Art. 6(1)(b) GDPR).
• Your website data (versions, settings, extras) is stored for as long as your account or your website exists.
• Usage statistics (Umami): In the customer area, too, we use Umami without cookies to count which steps are used (such as “preview created”, “plan chosen”, “change published”) – without your email address, content or website address. Details as in section 2.

4. Payments and invoices

Payments are handled by Stripe. For this, Stripe and we process your name, company name, billing address, VAT ID, email address and payment details; we never see card numbers. We keep invoices and accounting records for seven years (§ 132 of the Austrian Federal Fiscal Code, BAO). Legal basis: contract and legal obligation (Art. 6(1)(b) and (c) GDPR).

5. Emails

We send login codes, notifications (e.g. “Your Pro design is ready”) and invoices by email. We only send marketing emails with your consent.

6. Our customers’ websites

For the websites we operate for our customers, the respective business is the controller; we process their visitors’ data as a processor under our Data Processing Agreement. These websites set no cookies and load no tracking. We forward messages from the contact form to the business by email and do not store them; to protect against abuse, we only log the delivery status and a hashed IP address for seven days. The visitor statistics count page views without cookies and without personal data.

7. Reviews and references

We only show reviews you write for us and before-and-after views of your website with your consent (Art. 6(1)(a) GDPR), together with the name and location of your business. You can withdraw your consent at any time by email; we will then remove the content.

8. Recipients and transfers to third countries

We use the following service providers as processors. If a provider is located outside the EU, we only transfer data on the basis of an adequacy decision (e.g. the EU-US Data Privacy Framework for certified providers) or the European Commission’s Standard Contractual Clauses.

9. Retention

We only keep data for as long as needed for the respective purpose: account data until the account is deleted, website data until the website is deleted, payment and invoice data for seven years, technical logs only briefly for operation and security.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time. To exercise them, write to us at hello@revamped.tech. You can also lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at.