Privacy policy
The binding privacy policy is the German Datenschutzerklärung. This page summarises it in English.
- Controller: Nikolas Taschler, Südtiroler Straße 12, 2514 Traiskirchen, Austria, hello@fixplatz.com.
- No tracking: no cookies, no analytics, no fonts or scripts from other servers.
- Hosting: Cloudflare delivers the site and processes technically necessary data such as your IP address to deliver and protect it (Art. 6(1)(f) GDPR).
- Waitlist: we store your email address, university, language, the consent text version, timestamps and hashed link codes, to tell you when Fixplatz launches for your university. The legal basis is your consent (Art. 6(1)(a) GDPR). You confirm it with a link in a first email (double opt-in).
- Withdrawal: use the unsubscribe link in any of our emails or write to us. We then delete your entry.
- Retention: unconfirmed entries become invalid seven days after the last confirmation email and are then deleted automatically. Confirmed entries are kept until you withdraw, at the latest until 31 December 2027.
- Abuse protection: we count sign-up attempts per sender using only a keyed hash of the IP address and a one-hour time window, never the address itself (Art. 6(1)(f) GDPR).
- Email to us: Cloudflare forwards messages sent to hello@fixplatz.com to the operator's mailbox at Infomaniak Network SA (Switzerland, covered by an EU adequacy decision). We use them only to reply (Art. 6(1)(f) GDPR) and delete them when no longer needed.
- Processors: Cloudflare, Inc. (hosting, functions and the waitlist database, stored in the EU) and Resend (Plus Five Five, Inc., email delivery, which keeps delivery data for up to 30 days, also after we delete your entry), both in the USA. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, otherwise on the EU standard contractual clauses.
- Payments (from launch): Stripe Payments Europe, Limited, Dublin, Ireland, processes payment data to perform the contract (Art. 6(1)(b) GDPR).
- Your rights: access, rectification, erasure, restriction, data portability, objection and withdrawal of consent (Art. 7(3) and 15 to 21 GDPR). You may complain to the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Wien, www.dsb.gv.at.