Privacy Policy

This policy explains which personal data is processed when you visit palmshift.info, why, and what rights you have under the EU General Data Protection Regulation (GDPR), the Austrian Datenschutzgesetz (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). Our apps have their own privacy policies, linked in the menu.

1. Controller

Controller

[To be confirmed: full legal name of the operator]

Address

[To be confirmed: postal address]

Email

office@palmshift.info

We are not required to appoint a data protection officer. [To be confirmed: confirm]

2. The short version

• This is a static website. There are no user accounts, no contact forms, no newsletter and no comments.
• Fonts and all other resources are served from our own domain — no Google Fonts, no third-party CDNs.
• No analytics, advertising or tracking tools are currently active on this website.
• If you email us, we use your message only to reply.

3. Hosting and server logs

The website is hosted by [To be confirmed: hosting provider, e.g. Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA]. When you open a page, the hosting provider's servers necessarily process technical data: IP address, date and time, requested page, referrer, browser and operating system. This is needed to deliver the site securely and to defend against attacks.

• Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).
• Retention: [To be confirmed: log retention period of the chosen hosting provider]
• Transfers outside the EU: the provider may process data in the USA. Transfers are based on[To be confirmed: the EU–US Data Privacy Framework certification and/or Standard Contractual Clauses of the provider]. A data processing agreement with the provider is [To be confirmed: confirm that the provider's DPA has been accepted].

4. Contact by email

If you write to office@palmshift.info, we process your email address, name (if given) and the content of your message to answer you. Legal basis: steps prior to a contract or contract performance (Art. 6(1)(b) GDPR) or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete correspondence when it is no longer needed, unless statutory retention obligations apply. Email provider: [To be confirmed: email hosting provider and location].

5. Storage on your device

This website currently stores nothing on your device. If analytics is ever enabled, your consent choice will be saved in local storage as described on the cookie page. Details are on the cookie information page.

6. Google Analytics 4 (not currently active)

Google Analytics is prepared but switched off. If it is enabled in the future, it will only load after your explicit consent, and this section will describe it in full before it goes live.

7. Links to other websites

Links to external sites (for example app stores or a future support page) are ordinary links. Data is only sent to those providers once you click a link and open their page; their own privacy policies then apply.

8. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and the right to withdraw consent at any time with effect for the future. To exercise them, email office@palmshift.info.

You can also lodge a complaint with a supervisory authority. In Austria this is theDatenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

9. Security

The site is served exclusively over HTTPS and uses a strict Content Security Policy and other security headers to reduce the risk of attacks.

10. Changes

We update this policy when the website or legal requirements change. The current version is always on this page.