/ PRIVACY

Privacy Policy.

We take the protection of personal data seriously. This policy describes which data we process, on what legal basis, for how long we store it, and what rights you have.

This is a non-binding English translation provided for convenience. The German version of this document is the legally binding original.

1. Controller

swype F2M GmbH, Nußdorfer Straße 65/27, 1090 Wien. Email: office@swype.at.

2. Categories of data processed

→Contact data (name, email, phone number). for inquiries via the contact form
→Contract data (briefings, billing address, payment information). for ongoing client relationships
→Usage data (IP address, browser type, timestamp, pages visited). when visiting the website
→Application data (CV, cover letter, references). for speculative or job applications

3. Legal bases

→Art. 6(1)(b) GDPR. contract performance & initiation
→Art. 6(1)(c) GDPR. legal obligations (accounting, tax)
→Art. 6(1)(f) GDPR. legitimate interest (security, reach measurement)
→Art. 6(1)(a) GDPR. consent (newsletter, optional cookies)

4. Cookies & reach measurement

We use technically necessary cookies as well as. subject to consent. cookies for reach measurement and marketing (e.g. Google Analytics, Meta Pixel, TikTok Pixel). Consent is obtained via our consent tool and can be withdrawn at any time.

5. Processors & recipients

→Hosting & infrastructure: Lovable / Vercel (EU/US, standard contractual clauses)
→Email & CRM: Google Workspace, HubSpot (EU/US, SCC)
→Analytics & tracking: Google Analytics 4, Meta CAPI, TikTok Events
→Accounting & bookkeeping: appointed tax advisory firm in Vienna

6. Transfers to third countries

Where data is transferred to third countries (in particular the USA), this is done on the basis of EU standard contractual clauses, adequacy decisions or explicit consent.

7. Retention period

We store personal data only as long as necessary for the purposes concerned or as required by statutory retention obligations (typically 7 years for tax-relevant documents).

8. Your rights

→Access (Art. 15 GDPR)
→Rectification (Art. 16 GDPR)
→Erasure (Art. 17 GDPR)
→Restriction (Art. 18 GDPR)
→Data portability (Art. 20 GDPR)
→Objection (Art. 21 GDPR)
→Withdrawal of consent already given
→Complaint to the Austrian Data Protection Authority (dsb.gv.at)

9. Contact for privacy matters

For any privacy-related concerns: office@swype.at. We respond within 14 days.

10. Note

This privacy policy is a placeholder draft. Before going live it will be finalized with our GDPR consultants and supplemented with the specific list of processors, cookie table and, where applicable, a data protection officer.