Privacy policy

Last updated: September 2026 · applies to auton.at

1. Who is responsible

For anything related to your data, write to the address above. Full details are in the Impressum.

2. The short version

• No cookies, no analytics, no advertising or tracking pixels.
• Fonts are served from our own domain — your browser does not contact Google Fonts.
• We only receive personal data when you send us the contact form or an email.

3. Hosting and server logs

The website runs on Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). To deliver the pages and protect them against attacks, Cloudflare processes technical data such as your IP address, the page requested, date and time, referring page and browser type. We keep technical logs only as long as needed for security and error analysis — at most 30 days. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

4. Contact form

When you send the contact form we process what you enter — your idea, the answers you pick, your name, email address and, optionally, company or club — plus a few technical details: the language of the page, the page address, your browser type, the country derived from your IP address (the IP address itself is not stored) and, if you arrived via a link from another website (for example the credit on a client website), the name of that website.

The data is stored in a database at Cloudflare (D1) and we are notified by email through Resend (Resend, Inc., USA). We use it only to answer your inquiry and to prepare a possible project. Legal basis: steps prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR).

To block spam, the form contains an invisible field for bots, and your IP address is used briefly to limit the number of submissions; it is not stored with your inquiry.

Inquiries are deleted automatically 24 months after they arrive. If a contract follows, we keep the related records for as long as statutory retention periods require.

5. Email

If you write to us by email, we process your message and contact details to answer it. Our mailbox is hosted by Namecheap, Inc. (Private Email). Legal basis as in section 4.

6. Storage in your browser

The site uses your browser's session storage (not cookies) to remember that you have already seen the intro animation, where you were on the page when you open a demo, and which website sent you (see section 4). This data stays on your device and is deleted when you close the tab.

7. 3D concept demos

The 3D scenes in the concept demos are loaded directly from their publishers: sparkjs.dev (World Labs Technologies, Inc., USA) and storage.googleapis.com (Google LLC, USA). Your browser only contacts them when you open a 3D demo or, on a desktop computer, point at a demo tile — they then receive your IP address and browser details. Legal basis: our legitimate interest in showing the content you requested (Art. 6(1)(f) GDPR).

8. Links to other websites

We link to projects such as uttc-oberwart.at and vocalo.eu and to our GitHub page. Those sites only receive data when you click a link; their own privacy policies apply.

9. Transfers outside the EU

Some of the providers above are based in the USA. Transfers rely on the EU–US Data Privacy Framework where the provider is certified (e.g. Cloudflare, Resend, Google) and on the EU standard contractual clauses.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. Just email contact@auton.at. You can also complain to the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).

We do not use automated decision-making or profiling.