Information Obligation Statement according to Art. 13 General Data Protection Regulation (GDPR).
We process personal data exclusively on the basis of legal provisions (GDPR, Austrian Data Protection Act – DSG, Telecommunications Act 2021 – TKG). In the following policy, we inform you about the most important aspects of data processing on our website.
The party responsible for data processing on this website (the Controller pursuant to Art. 4 No. 7 GDPR) is:
Hana Energy (e.U. in formation), represented by Nambo Do
Address: Bloch-Bauer-Promenade 20/18, 1100 Wien, Austria
Email: contact@hanaenergy.at
For all questions regarding data protection, including exercising your rights, please contact the Controller directly via the email provided above.
Hosting Provider: This website is hosted by GitHub Inc. (88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA)
Data Processing and Logs: When you visit our website, the hosting provider automatically collects information in the context of so-called "Server Log Files." This data is technically necessary and includes:
Purpose: To ensure the technical security, stability, and reliable provision of our website (e.g., to detect and prevent DDoS attacks).
Data Transfer to the USA: Since GitHub is a US-based company, data (such as your IP address) may be processsed on servers located in the United States. We have concluded a Data Processing Agreement (DPA) with GitHub. Furthermore, the data transfer is safeguarded by the EU-US Data Privacy Framework (DPF), to which GitHub (as a subsidiary of Microsoft) adheres, or strictly via Standard Contractual Clauses (SCCs), combined with technical security measures such as robust TLS/SSL encryption for all data transmission, to ensure GDPR compliance.
Legal Basis: Our overriding legitimate interest (Art. 6 Para. 1 lit. f GDPR) in the technical security and smooth operation of the site.
Retention and Deletion: We do not have direct access to these log files. However, GitHub may retain these logs for a limited period for security and incident-investigation purposes in accordance with their privacy policy. For more details, please refer to the GitHub Privacy Statement.
Our website currently does not use any cookies or comparable tracking technologies. Therefore, no processing of personal data for statistical or marketing purposes takes place via cookies, and no cookie consent is required or logged.
To securely process inquiries submitted through our contact form, we use the service Formspree, provided by Formspree, Inc., located in the USA.
Processing Purpose:
Processing data:
Retention by Processor (Formspree): We have configured Formspree to disable the Submission Archive feature. Therefore, Formspree does not store the submitted message content (text inputs, name, email) in their inbox archive longer than necessary to forward the email.. Data is immediately processed and forwarded to us. However, Formspree retains technical transmission logs (specifically IP addresses and browser info) for a limited time solely for security and spam prevention purposes.
Retention by Controller (Hana Energy): Data received via the contact form and stored in our internal systems (e.g., email inbox) is kept for six months to fulfil the inquiry, or for longer if necessary to comply with statutory retention periods (e.g., commercial or tax law obligations).
Your data (including IP address, name, email address, message) is transferred to Formspree’s servers in the USA. The USA is a third country without an adequate level of data protection according to EU standards.
Risk: The USA is assessed a a third country. While the EU-US Data Privacy Framework (DPF) exists, transfers to non-certified US companies may carry the risk that your data could be subject to access by US authorities (e.g., under FISA 702) without effective legal remedies being available to you.
Protection Measures: To ensure appropriate safeguards, we rely on the implementation of Standard Contractual Clauses (SCCs) issued by the EU Commission, combined with additional technical and organizational measures, as agreed with Formspree, Inc.
Legal Basis for Transfer: By submitting the form and explicitly checking the consent box, you expressly consent to this data transfer (including the transfer of your IP address) despite the identified risks (Art. 49 Para. 1 lit. a GDPR).
Right to Erasure: You have the right to request the deletion of data submitted via the contact form at any time. To exercise this right, please contact the Controller directly via email: contact@hanaenergy.at.
Further information on data processing and privacy protection by Formspree can be found in their privacy policy: Formspree's Privacy Policy.
If you contact us via email, the data you transmit (e.g., email address, content of the message) will be stored for the purpose of processing your request and follow-up communication. The legal basis is our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in handling your inquiry efficiently.
Retention: Data is stored for six months or for as long as necessary to fulfill the inquiry or is subject to statutory retention periods.
Should we offer a newsletter service in the future, the following applies:
Subscription: Subscription will be carried out using the Double Opt-in procedure, where you must confirm your registration via email. This serves as proof of your consent.
Data Processed: Email address and optionally name.
Legal Basis: Your Consent (Art. 6 Para. 1 lit. a GDPR).
Withdrawal and Unsubscription: You can withdraw your consent at any time and unsubscribe from the newsletter via the unsubscribe link contained in every newsletter. Your revocation will be logged.
Retention: Subscription data will be stored until your withdrawal or for as long as you subscribe to the newsletter.
As the data subject, you fundamentally have comprehensive rights regarding the processing of your personal data:
| Right | GDPR Article | Description |
|---|---|---|
| Right of Access | Art. 15 | To request information about your data processed by us. |
| Right to Rectification | Art. 16 | To request the correction of inaccurate data. |
| Right to Erasure | Art. 17 | To request the deletion of your data under certain conditions. |
| Right to Restriction | Art. 18 | To request the restriction of processing. |
| Right to Data Portability | Art. 20 | To receive the personal data concerning you in a machine-readable format. |
| Right to Object | Art. 21 | To object to data processing based on legitimate interest. |
| Right to Revocation | Art. 7 | To withdraw consent at any time. |
How to Exercise Your Rights: To exercise any of these rights, please contact the Controller directly via email: contact@hanaenergy.at.
If you believe that the processing of your data violates data protection law, you have the option of lodging a complaint with us (contact@hanaenergy.at) or the competent supervisory authority: the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).
Austrian Data Protection Authority (DSB):
Barichgasse 40-42, 1030 Wien, Austria
Phone: +43 1 52152-0
Email: dsb@dsb.gv.at
We reserve the right to amend this Privacy Policy as necessary or due to changes in legal requirements. The update becomes effective upon publication of the new version on our website. We recommend that you regularly review this page to be informed about the current status.
Source based on: Privacy Generator Austria GDPR