Privacy Notice
ARkid Legal 10 · How ARkid Technologies GmbH processes personal data in the ARkid Catalogue, in embedded viewers and on this website.
ARkid Legal 10 · How ARkid Technologies GmbH processes personal data in the ARkid Catalogue, in embedded viewers and on this website.
Contact: hello@arkid.app · +43 664 914 00 31
This notice explains how ARkid Technologies GmbH (“ARkid”, “we”) processes personal data. It fulfils our obligations under Arts 13 and 14 GDPR and § 165 para 3 TKG. Section 2 concerns visitors of websites on which ARkid 3D and augmented-reality viewers are embedded. Section 3 concerns visitors of our own websites. Section 4 concerns our customers and business partners.
2.1 No cookies. When you interact with an ARkid viewer on a retailer’s or brand’s website, we do not set cookies and do not store any identifiers on your device. Usage is measured exclusively on our servers on the basis of the technical request that your browser sends when a 3D model is loaded.
2.2 Data processed. The technical request includes: IP address, browser type and operating system (user agent), display resolution, the requested 3D model and the referring page, and the date and time of the request. We derive an approximate country from the IP address for statistical purposes. This data is necessary to deliver the viewer and to provide aggregated usage statistics; the legal basis is the contract with the website operator on whose behalf we process this data (Art 28 GDPR) and, with respect to our own security measures, our legitimate interest in the secure operation of our infrastructure (Art 6 para 1 lit f GDPR).
2.3 Roles. For the measurement described above, the operator of the website on which the viewer is embedded is the controller and ARkid acts as its processor under a data processing agreement. Requests regarding this processing can be addressed to the website operator or to us; we will forward requests as appropriate.
2.4 Retention. Raw request logs are retained for a maximum of 14 months for billing verification and security purposes and are then deleted or irreversibly aggregated.
When you visit arkid.app or catalogue.arkid.app, we process the technical data transmitted by your browser (IP address, user agent, requested pages, date and time) to deliver the website and ensure its security. The legal basis is our legitimate interest in the operation of our websites (Art 6 para 1 lit f GDPR). Strictly necessary cookies are used only for registered users to maintain their login session (§ 165 para 3 TKG).
We use Cloudflare Web Analytics, a privacy-friendly measurement service that works without cookies and without client-side identifiers, to understand aggregated page usage. No advertising or cross-site tracking tools are used. Fonts are served from our own servers.
In the course of our business relationships we process contact, contract, account and billing data for the performance of the contract and pre-contractual measures (Art 6 para 1 lit b GDPR), for compliance with legal obligations, in particular retention duties under § 132 BAO (Art 6 para 1 lit c GDPR), and on the basis of our legitimate interests in the administration of our business, the provision of our services and the assertion and defence of legal claims (Art 6 para 1 lit f GDPR). If you do not provide the required data, we cannot enter into or perform the contract.
| Recipient | Purpose | Location | Transfer basis |
|---|---|---|---|
| ALL-INKL.COM – Neue Medien Münnich | Data centre / hosting | Germany | Within the EEA |
| Cloudflare, Inc. | Content delivery, DDoS protection | USA | SCCs (Art 46 para 2 lit c GDPR) |
| proinity LLC (KeyCDN) | Content delivery | Switzerland | Adequacy decision (Art 45 GDPR) |
| Stripe Payments Europe, Ltd. | Payment processing for subscriptions | Ireland (group: USA) | Within the EEA; SCCs for intra-group transfers |
| Auditors and tax consultants | Tax and accounting | Austria | Within the EEA |
| Banks | Payment transactions | EEA | Within the EEA |
| Lawyers, courts, dispute resolution | Assertion and defence of claims | Austria | Within the EEA |
We store personal data only as long as necessary for the stated purposes. Contractual and accounting records are retained for seven years (§ 132 BAO). In justified individual cases, in particular for the assertion or defence of legal claims, data may be retained for up to 30 years after the end of the business relationship. Data of prospects is stored for up to one year from the last contact.
Subject to the statutory conditions, you have the right to access (Art 15 GDPR), rectification (Art 16 GDPR), erasure (Art 17 GDPR), restriction of processing (Art 18 GDPR), data portability (Art 20 GDPR) and objection to processing based on legitimate interests (Art 21 GDPR). Where processing is based on consent, you may withdraw it at any time with effect for the future (Art 7 para 3 GDPR). No automated decision-making or profiling takes place.
If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria. We would, however, appreciate the opportunity to address your concerns first — please contact us at hello@arkid.app.