Privacy Policy

1. Controller

The controller responsible for processing personal data on this website is:

E-mail: kt@open-flute.com
Phone: +43 677 619 25 767

2. General notes

Personal data is processed only to the extent necessary for the secure and technically correct operation of the website, the handling of contact requests and the data-minimising evaluation of website use. Processing is carried out on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and applicable telecommunications law.

3. Hosting, DNS and server log files

This website is provided through Netlify. The DNS zone of the main domain open-flute.com is also managed through Netlify. The provider is Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When the website is accessed, the technical infrastructure may process technically required data, including IP address, date and time of access, requested page or file, data volume transferred, HTTP status code, referrer URL, browser type, operating system and host name of the accessing device.

The processing serves to provide the website, ensure stability and security and detect or prevent technical attacks. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and reliable operation of the website.

Where Netlify processes personal data on our behalf, the applicable data processing agreement and relevant safeguards for international transfers must be observed. The specific retention period of server log files must be checked against the final Netlify account settings.

4. Domain registration and e-mail services

Domain registration and business e-mail infrastructure are handled through GoDaddy and its technical service infrastructure. For receiving and sending e-mails, the e-mail provider may process sender and recipient addresses, subject, message content, communication times and technical transmission data.

The legal basis depends on the content of the communication and is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. The legitimate interest lies in efficient and traceable handling of business communication.

5. Contact by e-mail and phone

If you contact us by e-mail or phone, the data you provide is processed to handle your request and possible follow-up questions. Depending on the content of the request, processing is based on Art. 6(1)(b) GDPR for pre-contractual measures or contract performance, or on Art. 6(1)(f) GDPR for efficient handling of other business enquiries.

The data is stored only as long as necessary for handling the enquiry and complying with legal retention obligations.

6. Contact via WhatsApp

The website contains a link for contact via WhatsApp. A connection to WhatsApp is established only when you click this link. Technical data may then be transmitted to WhatsApp. Further communication via WhatsApp is also subject to the privacy terms of the relevant WhatsApp provider.

Using WhatsApp is voluntary. You may contact us by e-mail or phone instead. Data transmitted through WhatsApp is processed to handle your request. Depending on the content of the request, the legal basis is Art. 6(1)(b) or Art. 6(1)(f) GDPR.

7. Web analytics and technical metrics

This website uses Plausible Analytics, a privacy-friendly web analytics service provided by Plausible Insights OÜ, Estonia. Plausible is used to understand aggregated website usage, such as page views, visitor countries, referrers, devices, visited pages and language versions, scroll depth, outbound link clicks and clicks on e-mail, phone and WhatsApp links.

According to the provider, Plausible does not use cookies, Local Storage or persistent personal identifiers and does not create personal visitor profiles. The analytics data is used only in aggregated form to improve the website and understand general usage patterns.

8. External links

The website may contain links to external websites and services. Merely opening this website normally does not transmit data to those external providers. After clicking an external link, you leave this website. From that point, the respective external provider is responsible for further data processing.

9. Cookies and similar technologies

This website does not use non-essential cookies, Local Storage entries or comparable persistent tracking technologies. Plausible Analytics is used in a cookieless configuration. Therefore, no analytics cookie banner is currently used.

If the technical configuration changes or a service requiring consent is added later, this Privacy Policy will be updated and consent will be obtained where required.

10. Recipients and processors

Personal data is transferred to service providers only to the extent necessary for website operation, communication or analytics. This may in particular include Netlify for website hosting and DNS, GoDaddy for domain registration and business e-mail infrastructure, and Plausible Analytics / Plausible Insights OÜ for web analytics.

Where providers process personal data on our behalf, the required data processing agreements are concluded or the applicable DPA basis is documented.

11. Storage period

Personal data is stored only as long as necessary for the relevant purpose or as required by statutory retention obligations. For server log files, the retention period depends on the hosting provider and the selected configuration. Communication data is deleted after the enquiry is completed unless contractual or legal reasons require longer storage. Aggregated analytics data is stored according to the retention settings selected in the Plausible account.

12. Your rights

Subject to the legal requirements, you have the right of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, contact kt@open-flute.com. You also have the right to lodge a complaint with the Austrian Data Protection Authority.

13. Data security

Appropriate technical and organisational measures are used to protect personal data against loss, misuse and unauthorised access. The website is provided via an encrypted HTTPS connection.

14. Changes to this Privacy Policy

This Privacy Policy will be updated if the technical implementation of the website, the service providers used or legal requirements change.

Status: 09.07.2026