1. Data Controller

The controller responsible for data processing under the GDPR and the Austrian Data Protection Act (DSG) is:

2. Types of Data Processed

• Usage data (pages visited, access times, time spent)
• Technical data (browser type, operating system, device type, screen resolution)
• Connection data (truncated IP address, referrer URL)
• Location data (country and region, derived from IP address)

3. Google Analytics 4 (GA4)

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose: Analysing website usage to improve our content and understand visitor behaviour.

Legal basis: Your consent under Art. 6(1)(a) GDPR in conjunction with Section 165 of the Austrian Telecommunications Act (TKG 2021). No analytics cookies are set without your consent.

Google Consent Mode v2: We have implemented Google Consent Mode v2. Without your consent, GA4 only sends cookieless data pings for statistical modelling — no cookies are set and no personal data is stored persistently. Full analytics data is only collected after you explicitly grant consent.

Cookies set after consent:

Data transfers to third countries: Google LLC (USA) is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023). Data transfers to the USA are lawful on this basis. Further information: dataprivacyframework.gov.

Data retention in GA4: 26 months.

Withdrawal / Opt-out: You can withdraw your consent at any time via "Cookie Settings" in the footer of this website. Additionally, you can prevent data collection by installing the browser add-on: tools.google.com/dlpage/gaoptout.

Google Privacy Policy: policies.google.com/privacy

4. Server-Side Analytics

For the operation and security of this website, the following data is processed server-side on each page request:

• Truncated IP address (the last octet is set to "0" before storage, e.g. 192.168.1.0)
• User-Agent string (browser and operating system)
• Page visited and referrer URL
• Date and time of access

Legal basis: Legitimate interest under Art. 6(1)(f) GDPR (secure and reliable operation of the website).

Retention period: 90 days, then automatically deleted.

Note: No cookies are used for this server-side analytics. IP truncation means direct identification of individuals is not possible.

5. Google Fonts

This website uses Google Fonts (Google Ireland Limited, Dublin). When a page loads, a connection to Google servers is established, which may transmit your IP address to Google.

Legal basis: Legitimate interest under Art. 6(1)(f) GDPR (consistent website presentation).

Further information: policies.google.com/privacy

6. Cookie Overview

7. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): Obtain a copy of your stored data
• Right to rectification (Art. 16 GDPR): Correct inaccurate data
• Right to erasure (Art. 17 GDPR): "Right to be forgotten"
• Right to restriction (Art. 18 GDPR): Restrict processing
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR): Against processing based on legitimate interests
• Right to withdraw consent (Art. 7(3) GDPR): At any time, with future effect

To exercise your rights, please contact: kontakt@alpscraft.at

8. Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority: