Przejdź do treści

Polityka prywatności

Przykładowe strony w tym serwisie to wersje demonstracyjne Meine-Handwerker-Website (PebbleByte GmbH). Występujące w nich firmy, osoby, ceny, opinie, godziny otwarcia i dane kontaktowe są fikcyjne. Nie oferujemy tu żadnych usług rzemieślniczych.

Teksty prawne są dostępne wyłącznie po niemiecku i angielsku, dlatego wyświetlamy je tu po angielsku.

At a glance

In line with Art. 13 of the General Data Protection Regulation (GDPR), this privacy policy explains which personal data we process when you visit this website, why, on which legal basis, who receives it, how long we keep it and what rights you have. In short:

  • No tracking: no analytics tools, no advertising, no social media plugins, no profiling.
  • No cookies of our own and nothing stored in your browser (e.g. local storage).
  • Fonts, images and scripts are served from our own server, not by Google or other third parties.
  • The free tools run entirely in your browser. What you enter is not sent to us.
  • The map on the example websites only loads after you click.
  • Data you send us yourself (preview request, email, phone call) is only used for your request.

1. Controller

The controller responsible for processing personal data on this website within the meaning of Art. 4(7) GDPR is:

Company
PebbleByte GmbH
Address
Mittelgasse 4/13, 1060 Wien, Austria
Phone
+43 676 59 40 027

We are not legally required to appoint a data protection officer (Art. 37 GDPR) and have not appointed one. For any questions about data protection, contact us at office@pebblebyte.com.

2. This website and the example websites

This website presents Meine-Handwerker-Website, PebbleByte's website service. It contains example websites for trades businesses in construction and roofing, interior finishing, and building and vehicle technology, a guide section and free tools. The businesses, people, references, reviews and contact details on the example websites are fictional. The phone numbers and email addresses shown there (e.g. addresses ending in “.example”) cannot be reached.

There is no online shop, no user account, no newsletter and no comment function. The only form is the request for a free website preview (see section 9).

3. Hosting and delivery via Cloudflare

This website runs on Cloudflare Workers and is delivered via Cloudflare's network. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. So that your browser can display the website, Cloudflare processes the following technically necessary data on our behalf on every request:

  • IP address of your device
  • date and time of access
  • requested address (URL) and HTTP status code
  • referrer (previously visited page), if your browser sends it
  • browser, operating system and language settings (user agent, Accept-Language)
  • amount of data transferred
  • approximate location at country level, which Cloudflare derives from the IP address

Purposes: delivering the website, caching and optimising pages and images for fast loading, detecting and fixing errors, and protecting against abuse and attacks (e.g. DDoS attacks, automated access). The cache and image optimisation (Cloudflare R2 and Cloudflare Images) only hold the public content of the website, no data about visitors.

The legal basis is our legitimate interest in a secure, fast and functional website (Art. 6(1)(f) GDPR). Without this processing, the website cannot technically be displayed.

Retention: Log data available to us for troubleshooting (Cloudflare Workers Logs) is deleted automatically after no more than 7 days. We do not use it to analyse user behaviour, do not combine it with other data and do not create profiles. Cloudflare keeps security-related data for operating its network in accordance with its own privacy policy: https://www.cloudflare.com/privacypolicy/

Cloudflare acts as our processor under a data processing agreement (Art. 28 GDPR). For transfers to the USA, see section 12.

4. Language selection

If you open the website without a language in the address, we redirect you to the matching language version based on your browser's language setting (Accept-Language). This happens automatically at the moment of the request and is not stored. The legal basis is our legitimate interest in showing you the website in your language (Art. 6(1)(f) GDPR).

5. Cookies and browser storage

We do not set any cookies ourselves and do not store any information in your browser (no local storage, session storage or similar). We do not use analytics or tracking tools, advertising services or social media plugins. That is why there is no cookie banner on this website.

To protect against automated attacks, Cloudflare may set a technically necessary security cookie (e.g. “__cf_bm”, lifetime 30 minutes). It distinguishes humans from bots, contains no data that identifies you and is not used for tracking. As it is strictly necessary for the secure operation of the website, it is permitted without consent (§ 165(3) Austrian Telecommunications Act 2021; legal basis Art. 6(1)(f) GDPR). You can delete or block cookies in your browser at any time; the website will usually remain usable.

6. Fonts, images and scripts

All fonts, images, icons and software libraries are served directly from our server. No connection to Google Fonts, image databases, third-party content delivery networks or other external providers is made when you open a page. The only exception is the map, which you can choose to load (see section 8).

7. Free tools

The free tools (e.g. legal notice generator, cost calculator, Google preview, AI preview and QR code for Google reviews) run entirely in your browser. What you enter there is not sent to us or to third parties and is not stored; when you close or reload the page, your input is gone. The AI preview is a simulation and does not query any AI service.

When you click “Copy”, the text is placed on your device's clipboard. Files for download (e.g. QR codes) and print views are generated directly in your browser. Links to external services in the tools (e.g. to Google) only open when you click them (see section 10).

8. Map (OpenFreeMap)

The business pages of the example websites can show an interactive map. The map is only loaded once you explicitly click “Load map”. Before that, no connection to the map service is made. After the click, your browser requests the map style and map data directly from OpenFreeMap (https://openfreemap.org). The operator of that service then receives your IP address and the technical data listed in section 3. The map data comes from OpenStreetMap.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) Austrian Telecommunications Act 2021), which you give by clicking. Consent is voluntary and is not stored: the next time you open the page, the map again only loads after a click. You can withdraw it at any time with effect for the future by reloading the page. We have no influence on the processing by the map service or on where it runs its servers; processing outside the EU cannot be ruled out.

9. Request for a free website preview

If you request a free website preview, we process:

  • your name and email address (required)
  • your sector and trade (required)
  • the address of your current website (optional)
  • the page language and the time of the request (automatic)

Purpose: We use this to create your personal preview, send you the link by email and answer your questions. For the preview, we also look at publicly available information about your business, such as your current website. We need the required details to create and send the preview; without them, a request is not possible. There is no legal or contractual obligation to give us any data.

The legal basis is taking pre-contractual steps at your request (Art. 6(1)(b) GDPR). The request is free of charge and non-binding.

How it works: The details are not stored in a database on this website. They are transmitted to Cloudflare in encrypted form and delivered as an email to our mailbox via Cloudflare Email Routing (see section 3 and section 11). A hidden field in the form helps us detect automated spam requests. No further data about you is collected for this and no third-party service (e.g. CAPTCHA) is used.

Retention: If no contract results, we delete your request, the preview and the related correspondence no later than 6 months after our last contact, or earlier if you ask us to. If the request leads to a contract, we keep business-relevant records for the statutory retention period (7 years under § 132 Austrian Federal Fiscal Code and § 212 Austrian Commercial Code).

10. Contact by email or phone

If you contact us by email (office@pebblebyte.com) or phone (+43 676 59 40 027), we process the data you provide, such as your name, email address, phone number, and the content and time of your enquiry, in order to handle your request and reply to you. Phone calls are not recorded.

The legal basis is the performance of pre-contractual measures or a contract (Art. 6(1)(b) GDPR) where your enquiry aims at this, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Retention is the same as in section 9.

Please note that emails are not necessarily encrypted all the way to us. Do not send us sensitive data by email, such as passwords, bank details or personal data of your customers.

11. Recipients of your data

We do not sell your data and do not pass it on for advertising. Personal data is only received by:

  • Cloudflare, Inc., USA: hosting, delivery and protection of the website, and delivery of preview requests by email (processor, see section 3)
  • Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA: operation of our email mailbox (Private Email), where requests and correspondence are stored (processor)
  • the operator of OpenFreeMap, only if you load the map (see section 8)
  • if a contract is concluded: our tax advisor as well as authorities and courts, where we are legally required to

Within PebbleByte GmbH, only the people who need your data to handle your request have access to it.

12. Transfers to third countries

Cloudflare and Namecheap are based in the USA, so data may be transferred to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework; transfers are based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46(2)(c) GDPR). For Namecheap, transfers are based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR), which form part of the data processing agreement. You can request a copy of these safeguards from us.

13. Data security

The entire website is only available encrypted via HTTPS (TLS). Data from the preview form is also transmitted in encrypted form. We restrict access to our accounts with the providers named above and to your data to the people who need it (Art. 32 GDPR).

14. Your rights

You have the following rights regarding your personal data at any time:

  • Access: you can find out whether and which data we process about you (Art. 15 GDPR).
  • Rectification: you can have incorrect data corrected and incomplete data completed (Art. 16 GDPR).
  • Erasure: you can ask us to delete your data unless we are legally required to keep it (Art. 17 GDPR).
  • Restriction: you can ask us to only process your data in a restricted way (Art. 18 GDPR).
  • Data portability: you can receive data you have given us in a common, machine-readable format (Art. 20 GDPR).
  • Withdrawal: you can withdraw consent at any time with effect for the future. Processing carried out until then remains lawful (Art. 7(3) GDPR).

To exercise them, simply write to office@pebblebyte.com. Exercising your rights is free of charge. We reply within one month (Art. 12(3) GDPR) and may ask you to confirm your identity so that we do not disclose data to unauthorised persons.

15. Right to object

Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. Simply send your objection to office@pebblebyte.com; no particular form is required.

16. Right to lodge a complaint

If you believe that the processing of your data violates data protection law, you can lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live or work. The authority responsible for us is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, https://www.dsb.gv.at. We would appreciate it if you contacted us first so that we can resolve your concern.

17. No automated decisions

No automated decision-making, including profiling (Art. 22 GDPR), takes place. Every request is handled by a person.

18. Changes to this privacy policy

We update this privacy policy when the website, our service providers or the law change. The version published here applies; the date of the last change is shown below.

Last updated: November 2026