Privacy Policy

Overview

This privacy policy explains what data we process on this website, why, and on what legal basis, in plain language rather than pure legalese. This website is deliberately lean: no tracking, no newsletter, no advertising cookies. Everything that's actually processed is listed in full below.

Controller

The controller responsible for data processing on this website is: Sulumbek Masuev (msv-digital), Frauenfelderstraße 7/13, 1170 Vienna, Austria, office@msv-digital.com.

Encryption (TLS/HTTPS)

This website is served exclusively over an encrypted HTTPS connection. The connection between your browser and our server is protected against eavesdropping by third parties; you can recognize this by the lock icon in your browser's address bar.

Hosting & server log files

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When you visit, Vercel automatically stores information in server log files (e.g. IP address, date and time of the request, browser used, referrer URL). This data is deleted automatically after a short time and is used solely for the technical provision and security of the website (error detection, abuse prevention). Legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Processing may take place on servers outside the EU; we have a data processing agreement with Vercel that incorporates the EU Standard Contractual Clauses as a safeguard. We additionally use Vercel Analytics and Vercel Speed Insights, two services from the same provider, to evaluate page views and load times in aggregate. Both operate without cookies and without a persistent identifier for your device; no individual usage profile is created. Legal basis is likewise Art. 6(1)(f) GDPR (legitimate interest in improving our offering).

IP addresses for the contact form and Website Check

To prevent abuse (e.g. automated mass submissions), your IP address is briefly processed server-side when you submit the contact form or use the Website Check, in order to enforce a time-limited request limit. The IP address is not stored permanently. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing abuse).

Contact form

If you contact us via the contact form, your details (name, email address, subject, message) are transmitted by email to office@msv-digital.com in order to handle your inquiry. Delivery is routed through the mail server of our provider world4you Internet Services GmbH, Hafenstraße 47-51, 4020 Linz, Austria. Your details are retained for as long as needed to handle your inquiry and any resulting business relationship, then deleted, unless a statutory retention period applies. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). Providing this data is neither a legal nor a contractual requirement; without it, however, we can't process your inquiry.

Website Check

When using the Website Check, the URL you enter is submitted to the Google PageSpeed Insights API (Google Ireland Limited) for analysis. To generate a preview screenshot, our server also loads the URL you entered once. The checked URL is stored together with the time of the check and, derived only roughly from your IP address, the country and city you accessed it from, for up to about 13 months, and is only viewable in a password-protected internal dashboard accessible to us alone; it is never published and never linked to other visitor data (e.g. the IP address itself). The location is resolved automatically by our hosting provider Vercel at the edge server; we never store your IP address itself. No other personal data about you as a user is collected in the process. Legal basis is Art. 6(1)(b) GDPR (you actively request the analysis) or Art. 6(1)(f) GDPR (legitimate interest in understanding usage of our own offering).

Booking via Cal.com

For appointment booking (date, time, name, email) we use the third-party provider Cal.com (Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA) as a processor, behind the scenes. The calendar itself runs through our own server — your browser never loads anything directly from Cal.com and no Cal.com cookies are set in your browser. Your booking details are sent to Cal.com to create the appointment and send confirmation/reminder emails, including transfers to the USA. Cal.com bases this transfer on Standard Contractual Clauses (SCCs) or, where applicable, the EU-US Data Privacy Framework. Legal basis is Art. 6(1)(b) GDPR (the booking happens at your active request, to prepare an appointment/contract).

Google reviews

The homepage displays a selection of our Google reviews. These are fetched server-side via the Google Places API (Google Ireland Limited); no personal data about you as a website visitor is transmitted to Google in the process. This website also links to external review profiles on Google and Trustpilot. By clicking these links you leave this website; the respective provider's privacy policy applies.

Local storage in your browser & a technical cookie

This website doesn't use classic tracking cookies; a few settings are stored technically in your browser's local storage instead: your language choice, light/dark theme, and your cookie decision. This data never leaves your browser and is not transmitted to us. Legal basis is Art. 6(1)(f) GDPR, or, for the cookie decision itself, the strictly-necessary-storage exemption under applicable ePrivacy law. Cal.com booking is handled separately, through our own server, as described above. We additionally set one technical cookie that lets the site owner view the regular website during an active maintenance pause; it is only set when the site is visited via a secret access link, does not affect regular visitors, and contains no personal data. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in a working test access during maintenance).

Anonymous usage statistics

We count certain interactions to see how our website is used: opening the booking or Website-Check dialog, submitting a contact form, hitting a non-existent page (404), your cookie choice (accepted/rejected), and opening our Google or Trustpilot reviews and clicking "write a review" (not, however, whether a review is actually left there — that happens on the respective provider's own site and is not visible to us). We also count, for every page view, which page was visited, if available which website referred you (e.g. "Google" or "Instagram"), a coarse device type (smartphone, tablet, or desktop computer, derived solely from the User-Agent the browser already sends), and, derived only roughly from your IP address, the country and city you accessed from. The location is resolved automatically by our hosting provider Vercel at the edge server; we never store your IP address itself. No connection to you as a person is made in the process: we store neither an IP address nor any device or browser identifier, only a daily total per feature, page, referral source, device type, or location. These figures are only viewable through a password-protected internal dashboard accessible to us alone and are deleted automatically after about 13 months. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving our own offering).

Your rights

You have the following rights regarding your personal data: – Access to what data we process about you (Art. 15 GDPR) – Rectification of inaccurate data (Art. 16 GDPR) – Erasure of your data, unless a retention obligation applies (Art. 17 GDPR) – Restriction of processing (Art. 18 GDPR) – Data portability in a common format (Art. 20 GDPR) – Objection to processing based on legitimate interest (Art. 21 GDPR) – Withdrawal of any consent given, with future effect (Art. 7(3) GDPR) Contact office@msv-digital.com for any of the above. You also have the right to lodge a complaint with the Austrian data protection authority (Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at) if you believe our processing of your data violates the GDPR.