Privacy

Data controller

Flagsheep e.U. Dr. Gerhard Rzepa Berg 3, 3071 Böheimkirchen, Austria

Hosting and security

This website is delivered through Cloudflare. Accessing it involves processing technically necessary connection data, including your IP address, time of access, requested address, and browser and device information. This is necessary to deliver the website and keep it secure.

The legal basis is our legitimate interest in secure and reliable operation under Article 6(1)(f) GDPR. The recipient is the hosting and network provider Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, including affiliated companies involved in delivery.

Using a global provider may involve processing data outside the EEA. Such transfers must satisfy Articles 44 et seq. GDPR, for example through an applicable adequacy decision or appropriate safeguards such as EU Standard Contractual Clauses.

Connection data is processed only for as long as needed for delivery, security and, where necessary, investigating incidents. The provider’s specific retention depends on the features used and their configuration.

Cookies and local storage

The website itself sets no cookies and stores no information in your browser’s local storage. Language selection is based solely on the requested address. There is no audience measurement, profiling or embedded third-party content.

Email contact

If you email us, we process your email address and the information you provide to respond to your message. Email is handled through Google Workspace. Google Ireland Limited and affiliated companies may process data as service providers.

The legal basis is Article 6(1)(b) GDPR for contract-related enquiries or our legitimate interest in handling other correspondence under Article 6(1)(f) GDPR.

Messages are deleted when no longer needed for their purpose, unless statutory retention obligations or legitimate reasons require further storage.

Your rights

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation.

To exercise your rights, please use the contact address above. You may also lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, Austria.