Privacy policy

Daniel Schlager, Siezenheimer Straße 35, 5020 Salzburg, Austria
office@danielschlager.ai

This policy covers kivanto.ai. Connection data is processed to deliver the pages. Further processing for analytics, downloads, appointment bookings and contact requests is described below. The download page includes a form for your name and email address. No advertising pixels are used.

When you access the website, the hosting provider (Vercel Inc., USA/EU) processes technically necessary connection data (IP address, time, requested file and browser type). The legal basis is our legitimate interest in providing a secure and reliable website (Article 6(1)(f) GDPR). Information about Vercel's processing is available in its Vercel privacy notice.

We use Fathom Analytics by Conva Ventures Inc., Canada, to analyse page views and clicks on booking and download links. Loading the analytics script and transmitting events involves processing technical connection data, including IP addresses and browser information. Fathom does not use cookies for this purpose. We receive aggregated reports and do not send names or email addresses with click events. The purpose is to improve our website (Article 6(1)(f) GDPR). Fathom provides details under Data processing at Fathom.

Before downloading, you enter your name and email address. We store these details, the language, time and version of the displayed privacy notice in Brevo, a service of Sendinblue SAS, France. We use these details to process and identify your download request (Article 6(1)(b) GDPR). This does not subscribe you to a newsletter.

After successful storage, your browser session storage remembers access for the current tab. It stores neither your name nor your email address. To protect against repeated automated requests, a short-lived cryptographically derived identifier of your IP address is processed (Article 6(1)(f) GDPR).

We delete download request details when they are no longer required for this purpose, unless legal retention obligations apply. Send access or deletion requests to the contact address above. Further information about the service is available in the Brevo privacy policy.

After the download selection is unlocked, the page retrieves publicly available release information through the GitHub API. GitHub receives technical connection data such as your IP address, browser information and request time. The request contains no GitHub credentials or referring page address. The legal basis is our legitimate interest in providing current and suitable downloads (Article 6(1)(f) GDPR).

When you open a download, checksums, licence terms or release notes, you are redirected to GitHub or its file delivery service. The connection data required for delivery is processed there. The providers are GitHub B.V., Netherlands, or GitHub, Inc., USA, as specified in the service's privacy statement. Further information is available in the GitHub privacy statement.

If you reach the website through a tagged campaign link, we temporarily store its source information (utm_source, utm_medium, utm_campaign, utm_content and utm_term) in your browser's session storage under kivanto_tracking_params. This information remains available during that tab's session and is deleted when the session ends. It is used to attribute appointment bookings to a campaign.

When you open a Calendly link, available campaign information is passed on as URL parameters. If the current page address contains the advertising click identifiers gclid or fbclid, these are also passed to Calendly; Google or Facebook may be inferred as the source. If source information is missing, kivanto.ai is entered as the source. This attribution is not required to book an appointment. Alternatively, you can contact us using the email address provided.

A Calendly calendar (Calendly LLC, USA) is embedded to book an introductory call. Loading the calendar connects to Calendly and transmits technical connection data such as your IP address. You can choose between Alexander Brandstetter and Daniel Schlager. You enter your name, email address and appointment details directly into Calendly. We use your booking data to arrange, prepare and conduct the meeting (Art. 6(1)(b) GDPR). Calendly also receives the attribution details described above, where available. Alternatively, you can open the calendar in a new tab. Further information can be found in the Calendly privacy notice.

When you contact us by email, we process your information to handle the enquiry (Article 6(1)(b) GDPR) and delete it when it is no longer needed, unless statutory retention obligations apply.

When using Vercel, Fathom, GitHub and Calendly, data may also be processed outside the European Economic Area, particularly in the USA or Canada. The providers' linked privacy notices explain their recipients, retention practices and safeguards for international transfers. You can request information about the service providers used for our processing at the contact address above.

When we solely supply the software, we do not process the work content stored in your local or self-managed Kivanto installation on your behalf. This does not apply as a blanket statement to separately commissioned services or external services you enable. See Data processing / DPA for information about these cases.

When you submit an app for publication, we process the publisher name you provide, your contact email address, the category and the submitted package including source code to review and handle your submission (Article 6(1)(b) GDPR). The package is sent through our website service to the central app store service for review. Once approved, the publisher name, category and package become publicly accessible. The contact address is not displayed in the public catalogue.

To protect against automated abuse, the IP address is temporarily processed to limit submissions (Article 6(1)(f) GDPR). Do not include personal work content, confidential data or access keys in the package. Submission details are deleted once they are no longer required for handling the submission and providing the app, unless statutory retention duties apply. Contact office@danielschlager.ai to request removal of your publication or deletion of your data.

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Please contact office@danielschlager.ai. You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).