Privacy Policy

Buero Lightwaves LP
Dominikanergasse 4/19, 1060 Wien, Austria
Email: hello@lightwaves.io
Company Register: 659524 p (Commercial Court Vienna)
VAT ID: ATU82427367

The protection of your personal data is of particular concern to us. We adhere to the principles of data avoidance and data minimisation and therefore process your data exclusively on the basis of legal provisions (GDPR, Austrian DSG). In this privacy policy, we inform you about the most important aspects of data processing on our website.

To protect the security of your data during transmission, our website is only accessible via HTTPS.

This website is hosted on servers within the European Union. For client projects, we offer either EU-only hosting (exclusively EU servers) or standard hosting (third countries possible) – depending on the package selected.

For technical and security reasons, our hosting provider collects the following data (so-called server log files):
- IP address
- Browser type and version
- Operating system
- Referrer URL (referring page)
- Pages accessed
- Date and time of access

Retention period: Maximum 7 days (rolling), then automatic deletion.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical security and error diagnosis).This data is stored separately from any personal data you may have provided and does not allow conclusions to be drawn about a specific person without further investigation.

We use Plausible Analytics, a privacy-friendly analytics service by Plausible Insights OÜ (Estonia, EU).

What is collected:
- Page views (URL, page title)
- Referrer (referring page)
- Device category (Desktop/Mobile)
- Country (no more precise than country level)

What is not collected:
- No cookies
- No IP storage (IP is hashed and immediately discarded)
- No cross-device tracking
- No personal data

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in anonymised usage statistics).
More information: plausible.io/privacy

If you contact us via the form on our website or by email, the following data will be processed:
- Name
- Email address
- Message content
- Timestamp
- IP address (for spam protection, max. 7 days)

Retention period: Your data will be deleted as soon as the enquiry has been dealt with and the matter has been finally clarified – at the latest after 6 months. Longer storage only occurs if required by law or to protect legitimate interests.
Legal basis: Art. 6(1)(b) GDPR (contract initiation) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

You have the following rights (Art. 15–22 GDPR):
- Access (Art. 15) – What data do we have about you?
- Rectification (Art. 16) – Correction of inaccurate data
- Erasure (Art. 17) – “Right to be forgotten”
- Restriction (Art. 18) – Blocking instead of deletion
- Data portability (Art. 20) – Export of your data
- Objection (Art. 21) – Against processing based on legitimate interests
- Withdrawal – Consent can be withdrawn at any time

Requests to: hello@lightwaves.io

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the supervisory authority:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna, Austria
Email: dsb@dsb.gv.at
Web: dsb.gv.at

We do not use cookies. We do not use tracking pixels, no Google Analytics, no social media plugins with tracking functionality.

No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

We point out that data transmission over the Internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

The use of contact data published as part of the imprint obligation by third parties for sending unsolicited advertising is hereby expressly prohibited. We reserve the right to take legal action in the event of unsolicited advertising information being sent.