Privacy Policy

1. Controller

The controller responsible for data processing on this website under the GDPR is:

SEADEV Studios GmbH
Untere Hauptstraße 20/1, 8234 Rohrbach an der Lafnitz, Austria
Phone: +43 664 5489467
Email: office@seadev-studios.com

2. Principles

We process personal data only where necessary and on the basis of the GDPR and the Austrian Data Protection Act (DSG). This website is operated within the EU. Where data is transferred to the USA in individual cases — for marketing only with your consent (section 6) and when sending automatic confirmation emails (section 8) — this is based on appropriate safeguards pursuant to Art. 44 et seq. GDPR.

3. Hosting & server log files

This website is operated by SEADEV Studios GmbH on its own infrastructure within the European Union. When the website is accessed, access data is automatically stored in server log files: IP address, date and time, page requested, data volume transferred, browser type and operating system, and the referring page.

Purpose: secure and stable provision of the website and abuse prevention. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: log files are deleted once they are no longer required for the stated purpose and no statutory retention obligations apply.

4. Cookies

We use technically necessary cookies required to operate the site (e.g. storing your cookie decision). These do not require consent (Art. 6(1)(f) GDPR, § 165(3) TKG). All other cookies and processing are used only with your consent via the cookie banner — selectable separately by the categories statistics (section 5) and marketing (section 6). You can adjust or withdraw your choice at any time with effect for the future (button in section 6 or "Cookie settings" in the footer).

5. Web analytics with Matomo

To measure reach and improve our offering we use Matomo – self-hosted analytics software operated on our own infrastructure within the EU. There is no sharing with third parties and no transfer to the USA. IP addresses are processed in anonymised (truncated) form.

Besides the pages you visit we also record interactions in pseudonymous form: clicks on buttons and links, opening FAQ entries, use of the AI Act quick check, and which sections of a page you reached while scrolling. This helps us understand which content is useful and where our site is unclear. The data is not linked to your person and no cross-site user profiles are created.

For the AI Act quick check the following also applies: your answers are evaluated solely in your browser and are not transmitted to us. Only the resulting risk class (e.g. "high risk") is counted pseudonymously.

Matomo is loaded only after your explicit consent to the "statistics" category of the cookie banner. Legal basis: consent (Art. 6(1)(a) GDPR).

6. Google Analytics & Google Ads (marketing)

Only if you consent to the marketing category in the cookie banner do we use Google Analytics 4 and Google Ads conversion tracking to measure the reach of our website and the performance of our advertising campaigns (e.g. whether a visit via an ad leads to a contact request). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA; this transfer is based on the EU-U.S. Data Privacy Framework, under which Google is certified, and on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

For this purpose Google sets cookies (including "_ga", stored for up to 2 years) and processes pseudonymous identifiers, the truncated IP address, and device and visit data; retention of the analytics data at Google is limited to a maximum of 14 months. Without your consent the Google scripts are not loaded; in addition, we transmit your decision via Google Consent Mode. Legal basis: consent (Art. 6(1)(a) GDPR, § 165(3) TKG). More information in the Google privacy policy.

You can adjust or withdraw your consents (statistics and marketing) at any time with effect for the future:

7. Contact & demo requests

If you contact us by email or via the enquiry form, we process the data you provide (e.g. name, company, email address, details and message of your enquiry) to handle your request. Enquiries are stored in our self-operated CRM system on EU infrastructure so that we can process them reliably and keep track of the correspondence. Upon receipt you get an automatic confirmation by email, and our team is notified internally. To protect against automated requests, the form uses a locally computed proof-of-work check; no data is transferred to third parties and no cookies are set. Legal basis: pre-contractual measures and legitimate interest (Art. 6(1)(b) and (f) GDPR). The data is deleted once it is no longer required and no statutory retention obligations apply.

8. Recipients & processors

As a rule, your data is only transferred to processors (e.g. the hosting provider) with whom a contract pursuant to Art. 28 GDPR exists, and primarily within the EU. For sending automatic confirmation emails we use Twilio SendGrid; this may involve a transfer of your email address and message contents to the USA, based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) and the EU-U.S. Data Privacy Framework. For internal notifications we use Microsoft 365 (Microsoft Ireland Operations Ltd.).

9. Your rights

Under the GDPR you have the following rights:

• Access (Art. 15), rectification (Art. 16) and erasure (Art. 17)
• Restriction of processing (Art. 18) and data portability (Art. 20)
• Objection to processing (Art. 21)
• Withdrawal of consent with effect for the future (Art. 7(3))

To exercise your rights, a message to office@seadev-studios.com is sufficient.

10. Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.

11. No automated decision-making

No automated decision-making, including profiling, takes place.