Privacy Policy

Last updated: August 4, 2026

We process your data only on a legal basis — under the GDPR, the Austrian Data Protection Act (DSG), and the Austrian Telecommunications Act (TKG 2021). Below are the key points.

This is a translation of our German-language Datenschutzerklärung provided for your convenience. In case of any discrepancy, the German version prevails and is the only legally binding version.

1. Data controller

Ing. Richard Klausgraber – sole proprietorship, trading as "Bitfeder"
Speckbachergasse 23/13, 1160 Vienna, Austria
Phone: +43 699 11082078
E-mail: office@bitfeder.at

2. Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. When you visit the website, information is automatically processed in so-called server log files, transmitted by your browser:

IP address · date and time of access · page or file accessed · browser type and version, operating system · previously visited page (referrer URL)

This data is not combined with other data sources and is only evaluated in a personally identifiable way if there is cause to do so (e.g. to investigate and defend against attacks on our systems).

Purpose: technical operation, stability, and security of the website.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
Retention period: 14 days, then automatically deleted.
Data processing agreement: A data-processing agreement under Art. 28 GDPR is in place with our hosting provider.

3. Contact form and getting in touch

If you contact us via the contact form, e-mail, or phone, we process the data you provide: name, company (optional), e-mail address, phone number (optional), area of interest, and the content of your message.

Purpose: handling your inquiry, preparing a quote, initiating a business relationship.
Legal bases: Art. 6(1)(b) GDPR (taking pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
Retention period: We store your inquiry for six months from the end of the communication, unless a contract is concluded. If a contract is concluded, the statutory retention obligations apply (in particular § 132 BAO: generally seven years).
Recipients: no disclosure to third parties beyond the service providers named in section 5.

4. No cookies, no tracking, local fonts

This website sets no cookies, uses no analytics or tracking services, embeds no content from third-party servers (no external video, map, or social-media embeds), and loads fonts (webfonts) exclusively locally from our own server. No connections are made to Google Fonts or other external font services.

For this reason, no cookie/consent banner is required.

5. Recipients and processors

To fulfil the purposes described above, we use the following service providers, with whom — where required — data-processing agreements under Art. 28 GDPR are in place:

Hosting: Hetzner Online GmbH, Gunzenhausen, Germany
E-mail: self-hosted mail server in Austria (no external provider)

Personal data is not transferred to third countries outside the EU/EEA.

6. Your rights

You generally have the following rights: access (Art. 15 GDPR) · rectification (Art. 16 GDPR) · erasure (Art. 17 GDPR) · restriction of processing (Art. 18 GDPR) · data portability (Art. 20 GDPR) · objection to processing based on legitimate interests (Art. 21 GDPR)

To exercise your rights, simply reach out, no particular form required, to office@bitfeder.at.

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at. Data subjects in other member states may also contact the competent authority there.

7. Data security

This website is transmitted encrypted via HTTPS/TLS. We additionally take appropriate technical and organizational measures to protect your data against loss, misuse, and unauthorized access.

8. Data processing in our products and services

This privacy policy covers visits to this website. In addition, the following applies:

Kronox (access control and time tracking): When used by our customers, employee data (e.g. master data, bookings, access logs, absences) is generally processed under the customer's own data-protection responsibility; for cloud operation, Bitfeder acts as a processor under Art. 28 GDPR based on a data-processing agreement. For on-premise operation, the data remains entirely within the customer's own network.

KanDooo and VerGavo (SaaS): Additional privacy information applies to the use of these products; here too, Bitfeder acts as a processor for customer data.

SQUADD (mobile game): SQUADD is a free game for Android with no user account. The app has no internet access and includes no advertising, analytics, tracking, or payment services. Game progress is stored exclusively on the device and is never transmitted to us or any third party. No personal data is processed.

Services and consulting: As part of consulting, project, and training services, we process contact details of our customers' contact persons (name, role, business contact details) for contract performance (Art. 6(1)(b) GDPR) or based on our legitimate interest in managing the business relationship (Art. 6(1)(f) GDPR). The data is stored for the duration of the business relationship and beyond, in line with statutory retention obligations.

9. Changes to this privacy policy

We update this privacy policy whenever data processing on this website changes. The version published here is always the current one.