Privacy Policy
How how2austria.com processes your personal data in accordance with the GDPR, the Austrian DSG, and the TKG.
🇬🇧 English · 🇩🇪 Deutsch · 🇷🇺 Русский
1. Who processes your data
Data Controller:
The owner of how2austria.com.
Contact: via the feedback form on the homepage.
The site does not have a legal entity in Austria or the EU. If you wish to contact us regarding data processing, please use the contact form on the site.
2. What data we collect and why
2.1. Newsletter subscription
When you subscribe via the form on the site, we collect:
- Email address — for delivering the digest.
- Page language (ru/en/de) — to send emails in your chosen language.
- Subscription source — a technical field (e.g.
how2austria-newsletter-en).
Legal basis: Art. 6(1)(a) GDPR — your consent.
Data transfer: your email is transmitted to Loops.so (USA, certified under the EU-US Data Privacy Framework).
Retention: until consent is withdrawn (unsubscription).
You may unsubscribe at any time using the link in every email.
2.2. Cookies
The use of cookies is described in our separate Cookie Policy.
2.3. Server logs
When you visit the site, our hosting provider (Cloudflare, Inc., USA) automatically collects:
- IP address (temporary, not stored longer than necessary)
- Browser type and version
- Operating system
- Request timestamp
- Pages visited
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in ensuring site security and stability.
Retention: log files are kept for no more than 7 days.
2.4. Embedded content from other sites
Articles on how2austria.com may contain embedded videos (e.g., YouTube) and links to external resources. When you load such elements, third-party services may collect data in accordance with their own privacy policies. We do not control this processing.
3. Legal bases for processing (overview)
| Basis | Art. GDPR | Example |
|---|---|---|
| Consent | Art. 6(1)(a) | Newsletter subscription, analytics and marketing cookies |
| Legitimate interest | Art. 6(1)(f) | Server logs, essential cookies |
4. Data transfers to third countries
We use services that may process data outside the EEA (primarily in the USA):
| Service | Purpose | Transfer mechanism |
|---|---|---|
| Cloudflare | Hosting, CDN, security | EU-US Data Privacy Framework |
| Loops.so | Email newsletter | EU-US Data Privacy Framework |
| Google Analytics | Analytics (with your consent) | EU-US Data Privacy Framework |
| Meta (Facebook) | Marketing (with your consent) | EU-US Data Privacy Framework |
5. Data retention periods
| Category | Retention period |
|---|---|
| Subscription data (email, language) | Until unsubscription |
| Server logs | 7 days |
| Analytics data (GA4) | 14 months |
| Cookie consent record | 365 days |
6. Your GDPR rights
Under Art. 15–22 GDPR, you have the right to:
- Access (Art. 15) — find out what data about you is being processed.
- Rectification (Art. 16) — request correction of inaccurate data.
- Erasure (Art. 17) — request deletion of your data (“right to be forgotten”).
- Restriction of processing (Art. 18) — temporarily restrict processing.
- Data portability (Art. 20) — receive your data in a machine-readable format.
- Objection (Art. 21) — object to processing based on legitimate interests.
- Withdraw consent — at any time (via cookie settings or newsletter unsubscribe).
To exercise any of these rights, write to us via the feedback form.
7. Complaint to the supervisory authority
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with:
Österreichische Datenschutzbehörde (DSB)
Barichgasse 40–42, 1030 Wien
Website: https://www.dsb.gv.at/
8. Changes to this policy
We may update this policy. The date of the last update is shown below. Material changes will be posted on this page.
Last updated: July 2026.