Privacy policy

Data controller

The data controller responsible for your personal data is Mateo Jakelic e.U. For contact details, please refer to our Imprint page. For any privacy question, write to team@uixa.agency.

This policy explains which personal data we process when you visit uixa.agency, write to us, or request rental gear, why we do it and what rights you have.

Hosting and server log files

Our website is hosted by Vercel Inc. (USA). When you open a page, your browser automatically sends technical data that is processed to deliver the website and keep it secure:

• IP address, date and time of the request.
• Page or file requested and the referring page.
• Browser, operating system and device type.

The legal basis is our legitimate interest in a secure, working website (Article 6(1)(f) GDPR). Vercel processes this data on our behalf under a data processing agreement. Transfers to the USA are based on the EU-U.S. Data Privacy Framework and the EU standard contractual clauses. Log data is kept only as long as needed for operation and security.

To protect our forms against spam, the server keeps the IP address of each form request in memory for 10 minutes to limit how many requests can be sent. It is not stored anywhere else. If a form message cannot be delivered, the error is written to the server log at Vercel so we can fix it and follow up.

Contact form and email

When you use our contact form, we process the topics you chose, your timeline and project goal (both optional), your name, your company (optional), your email address, your note (optional) and the language of the page. If you email us directly, we process your email address and the content of your email.

We use this data to answer your inquiry and, if you want to work with us, to prepare an offer. The legal basis is pre-contractual measures at your request (Article 6(1)(b) GDPR) and our legitimate interest in answering inquiries (Article 6(1)(f) GDPR). Form messages are delivered to our team inbox by email. Our email runs on Google Workspace (Google Ireland Ltd.).

Gear rental requests

When you request rental equipment, we process your name, your company (optional), your email address, the rental period, pickup and drop-off times, the equipment you selected, your message (optional), your confirmation that you accept our rental terms and this policy, and the language of the page. We use this data to check availability, confirm your booking and handle the rental (Article 6(1)(b) GDPR). The request is delivered to our team inbox by email, as described above.

Cookies, analytics and marketing

Analytics (Google Analytics through Google Tag Manager, Google Ireland Ltd.) and marketing (the advertising features of Google Tag Manager, and the OpenAI ads pixel of OpenAI Ireland Ltd., which measures visits and enquiries that come from ads in ChatGPT) only load after you agree in our cookie banner. When you send an enquiry, the OpenAI pixel may pass on your email address and phone number in pseudonymised (hashed) form, so OpenAI can match it to an ad. OpenAI processes this data as an independent controller. The legal basis is your consent (Article 6(1)(a) GDPR and § 165(3) of the Austrian Telecommunications Act 2021). Google may transfer data to Google LLC in the USA, based on the EU-U.S. Data Privacy Framework. OpenAI may transfer data to OpenAI entities in the USA, based on the EU Standard Contractual Clauses. You can withdraw your consent at any time with the cookie settings link in the footer. Details are in our Cookie policy.

YouTube videos

Our own videos are served from our server. Where a page shows a YouTube video, you first only see a preview image that is loaded through our own server, so no connection to YouTube is made. By pressing play, you consent to the video loading from YouTube in privacy-enhanced mode (youtube-nocookie.com, Google Ireland Ltd.), and Google receives your IP address and information about your device. The legal basis is your consent (Article 6(1)(a) GDPR).

Fonts and links

All fonts are hosted on our own server; your browser does not connect to Google Fonts or other font services. Links to Instagram, LinkedIn, Clutch and project websites are plain links. Those services only receive data from you when you click a link and open their site.

Recipients

Besides the service providers named above (Vercel, Google), we only share your data where we are legally required to, for example with tax authorities. We do not sell your data.

Data storage and retention

We keep your personal data only as long as we need it for the purposes above, or until you ask us to delete it. Data we have to keep for legal reasons, such as invoices and business correspondence, is kept for the statutory period (generally seven years under § 132 of the Austrian Federal Fiscal Code, BAO).

Your rights

Under GDPR, you have the following rights:

• Access: Request a copy of the data we hold about you.
• Rectification: Correct any inaccuracies in your data.
• Erasure: Request the deletion of your data.
• Restriction: Limit the processing of your data.
• Data Portability: Obtain your data in a portable format.
• Objection: Object to processing based on our legitimate interest.
• Withdraw consent: Withdraw your consent at any time, with effect for the future.

To exercise these rights, please contact us at team@uixa.agency.

You also have the right to lodge a complaint with a data protection authority. In Austria, this is the Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

You are not obliged to provide personal data, but without your contact details we cannot answer your inquiry or handle a rental. We do not use automated decision-making or profiling.

Security measures

The website is only served over an encrypted connection (HTTPS). We implement technical and organisational measures to protect your data from unauthorised access, alteration, and loss.

Policy updates

We may update this policy from time to time. Significant changes will be communicated via our website.