This notice explains how personal data is processed under the GDPR.
Controller: Vitalii Perov, Krottenbachstraße 9/4/1, 1190 Vienna, Austria. Tel: +43 676 6643832. Email: office@gwohnungen.at.
Visiting the site: the hosting provider (Google Cloud) processes technically necessary server log data (IP address, time, page requested) to deliver and secure the site. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Hosting location: the site and data are hosted on Google Cloud servers in Frankfurt am Main, Germany (region europe-west3), within the EU/EEA. Website hosting does not involve an international transfer.
Cookies and local storage. We use one cookie: a sign-in session cookie, set only once you use the site as a registered user. It keeps you signed in and carries the security token that protects forms against cross-site requests, plus where you are in a form you have started. It is HttpOnly, SameSite=Lax, sent over HTTPS only, and lasts at most 14 days; signing out deletes it. Your browser also briefly remembers your scroll position on the flat list (session storage), which is discarded when you close the tab.
These are strictly necessary to provide the service you asked for, so under §165(3) TKG 2021 (Art. 5(3) ePrivacy Directive) they need no consent and there is no cookie banner to click. We set no analytics, advertising or third-party cookies of any kind.
No tracking cookies, no third-party tracking. Fonts are self-hosted; no Google Fonts or third-party CDNs are loaded.
Click statistics: we count clicks on a few elements (such as partner links) to see which parts of the site are used. Nothing is stored on your device for this. Your IP address is converted on our server into a non-reversible number using a secret salt, so repeat visits can be counted without identifying you; the IP address itself is not stored. We also derive the country. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Telegram notifications: if you subscribe to the Telegram bot, we process your Telegram chat ID, first/last name, username, language code, join date and your filter settings to send alerts. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Telegram's own privacy terms also apply.
Paid subscription: for paying users we also store subscription status, plan and expiry, and payment records (Stripe subscription/invoice ID, amount, currency and date). Card payments are processed by Stripe, which acts as merchant of record; we do not receive or store your full card number. Payment records are retained for 7 years to meet Austrian tax law (§132 BAO).
Deleting your account: deleting your account removes your profile, preferences, alert settings and subscription record. Two things are kept. Payment records are retained for 7 years to meet Austrian tax law (§132 BAO). And we keep one non-reversible checksum of your email address per service you trialled: it holds no information about you and cannot be used to identify or contact you, and its only purpose is to stop the one-off free trial being claimed again by deleting and re-registering. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). The same applies to the Telegram bot, where the checksum is of your chat ID.
Your rights: access, rectification, erasure, restriction, objection, data portability, and the right to lodge a complaint with the data protection authority (Österreichische Datenschutzbehörde).
Privacy enquiries: office@gwohnungen.at.