Bitmonti StudioW E B D E V E L O P M E N T

Legal

Privacy Policy

Last updated: October 15, 2026

Data Controller

Mario Kreidl · Bitmonti Studio
Krapfergasse 5, 6274 Aschau im Zillertal, Österreich
mario@bitmonti.com

  1. Website and Browser Storage

    When you visit our website, Vercel and IONOS process technical connection data (in particular your IP address, time of access, page accessed, and browser data) to deliver and protect the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure operation. Our own server logs are deleted or anonymized after 14 days, or later in the event of a security incident.

    The website stores your language preference and your Google Analytics decision for a maximum of 360 and 7 days, respectively (consent or rejection). The chat stores the current conversation history in your browser until the end of the session. This storage supports the selected functions and provides proof of your decision; the legal bases are Art. 6(1)(f) GDPR and Section 165(3) TKG 2021.

  2. AI Chat

    When you use the chat, we process your messages, the responses, timestamps, and a technical conversation identifier. We use OpenAI and other service providers to generate and deliver responses. This serves to answer your questions (Art. 6(1)(b) GDPR when taking steps prior to entering into a contract, otherwise Art. 6(1)(f) GDPR: provision of the service). Use of the chat is voluntary; without sending a message, no chat response can be generated.

    The active chat history is stored for a maximum of 7 days from the start of the conversation. After the conversation ends on the server, we retain the complete history for 90 days to assess and defend against potential legal claims (Art. 6(1)(f) GDPR). Longer retention may be necessary in the event of a specific legal dispute. OpenAI may retain submitted content for abuse monitoring for up to 30 days.

    Cloudflare Turnstile processes connection and device data when a message is submitted to protect against automated abuse. Technical chat events are stored for capacity planning for up to 180 days, and pseudonymous data for abuse prevention for up to 24 hours (Art. 6(1)(f) GDPR; secure and stable operation). When voice input is enabled, it uses your browser's speech recognition; we only receive the text once it has been submitted.

  3. Contact

    When you contact us by email, chat, or WhatsApp, we process the information you provide to handle and respond to your inquiry (Art. 6(1)(b) GDPR when taking steps prior to entering into a contract, otherwise Art. 6(1)(f) GDPR: responding to your inquiry). For this purpose, we use Microsoft Exchange and Resend for confirmed chat inquiries. When using WhatsApp, WhatsApp Ireland Limited also processes data under its own responsibility. Providing this information is voluntary; without contact details, we cannot respond.

    We delete inquiries once they are no longer necessary for handling the inquiry, maintaining a business relationship, or addressing potential claims; statutory retention obligations remain unaffected.

  4. Google Analytics

    Only with your consent do we use Google Analytics 4 to collect page views and usage data (e.g., client ID, pages visited, and device information). The legal bases are Art. 6(1)(a) GDPR and Section 165(3) TKG 2021. The _ga and _ga_* cookies are stored for a maximum of 2 years, and user-related analytics data for 2 months. You can withdraw your consent at any time below with effect for the future.

    Google Analytics is disabled on this device.

  5. Recipients and Third Countries

    Depending on the function used, hosting, cloud, AI, security, analytics, and communication service providers receive personal data; the providers used are linked above. For transfers outside the EEA, particularly to the USA, an adequacy decision (EU-US Data Privacy Framework for certified companies) or EU Standard Contractual Clauses apply, depending on the recipient. Details of these safeguards can be found in the linked provider information.

  6. Your Rights

    Under the GDPR, you have the right to access, rectification, erasure, restriction of processing, and data portability, subject to the applicable conditions. You can withdraw your consent at any time with effect for the future and object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation. To exercise these rights, please contact the email address provided above.

    You can lodge a complaint with a supervisory authority, in particular the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria.