Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Elevates GmbH
Weidfeldstraße 117/1 Top 6, 4050 Traun, Austria
Email: info@elevates.at

2. Data Collection Overview

We collect and process personal data only to the extent necessary to provide a functional website and our services. The collection and processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR/DSGVO) and the Austrian Data Protection Act (DSG).

When you visit our website, certain data is automatically collected by our server infrastructure, including:

• IP address (anonymized)
• Date and time of access
• Pages visited and referring URL
• Browser type and operating system

This data is processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in ensuring the security and functionality of our website).

3. Cookies

Our website uses cookies that are technically necessary for the operation of the site. These include session cookies and authentication cookies required for admin login functionality.

We do not use tracking cookies or advertising cookies. No data is shared with advertising networks.

4. Third-Party Services

4.1 Clerk (Authentication)

We use Clerk for admin authentication. When administrators sign in, Clerk processes their email address and authentication tokens. Clerk's privacy policy applies to data processed by their service. Regular visitors do not need to create an account and no personal data is shared with Clerk for non-admin users.

4.2 Cloudinary (Image Hosting)

Creator profile images are stored on Cloudinary. Cloudinary may process technical data (e.g., IP addresses) when images are loaded in your browser. This processing is based on Art. 6(1)(f) GDPR (legitimate interest in providing optimized image delivery).

4.3 Turso (Database)

Our application data is stored using Turso, a cloud-hosted SQLite database service. Turso processes data on our behalf as a data processor under Art. 28 GDPR. No personal visitor data is stored in our database.

4.4 Vercel (Hosting)

Our website is hosted on Vercel. Vercel may collect technical data such as IP addresses and access logs for security and performance purposes. Please refer to Vercel's privacy policy for details.

5. Your Rights (DSGVO/GDPR)

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR) — obtain information about your processed data
• Right to rectification (Art. 16 GDPR) — correct inaccurate data
• Right to erasure (Art. 17 GDPR) — request deletion of your data
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR) — object to processing based on legitimate interest

To exercise any of these rights, please contact us at info@elevates.at.

You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, www.dsb.gv.at).

6. Data Retention

We retain data only for as long as it is necessary for the purposes for which it was collected or as required by law. Server logs are automatically deleted after 30 days.

7. Changes to This Policy

We reserve the right to update this privacy policy to reflect changes in our practices or legal requirements. The updated version will be published on this page with a revised date.

8. Contact

If you have questions about this privacy policy or data protection, please contact us:

Elevates GmbH
Weidfeldstraße 117/1 Top 6, 4050 Traun, Austria
Email: info@elevates.at