Privacy

Privacy Policy for
claim-space.com

for informational use
Last updated:
22.09.2025

Scope: This notice applies to the purely informational use of our website claim-space.com (incl. subpages). Interactive specialist services such as Claim Communicator / ClaimCare are covered by a separate privacy policy.

1. Controller & Contact

Claimspace FlexCo
Columbusplatz 7‑8/4/4
1100 Vienna
Austria

FN 638056v
Company register court: Vienna Commercial Court
VAT ID: ATU81583109,

Email: office@claim-space.com
Web: www.claim-space.com

Authorised representatives: DI Dr. Erwin Hochreiter, Ing. Ernst Podolsky
A Data Protection Officer has currently not been appointed.

2. Categories of data processed

Since the website is used solely for informational purposes, we collect as little data as possible:

2.1 Technical usage data (server logs)

When the pages are accessed, the web server automatically processes:

IP address (truncated/derived), date/time, URL accessed, HTTP status, data volume transferred, referrer (if transmitted), user agent (browser/OS), request/trace IDs.
Purpose: operational security, error diagnostics, abuse/attack detection, performance monitoring.

2.2 Contact via email & contact form

You can contact us via email or via the contact form. We process the data entered in your message or in the form (typically: name, email, message; optional company/phone) as well as technical metadata (timestamp, form status, request/trace IDs) to handle your request. The form processing is carried out via Webflow (Forms); Webflow stores your input and forwards it to us by email; processor (see Annex A). There is no registration on the website.

2.3 Third-party content / embeds

The website does not load any social media plugins, tracking pixels, map embeds or comparable third-party content without your interaction. Web assets (e.g. fonts) are served locally; no embedding of Google Fonts via external CDNs takes place.

3. Purposes & legal bases (Art. 6 GDPR)

Purpose

Legal basis

Provision of the website, IT security, error analysis, abuse/attack detection

Art. 6(1)(f) GDPR (legitimate interest in secure operation)

Handling your email enquiries

Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or (f) (balancing of interests)

Compliance with legal obligations (e.g. retention, disclosure)

Art. 6(1)(c) GDPR

No solely automated decisions with legal effect take place.

4. Recipients / processors

We use service providers (processors) to the extent necessary. A current overview can be found in Annex A. Disclosure to third parties for advertising or market research purposes does not take place.

5. Transfers to third countries

Processing primarily takes place within the EEA. Where services outside the EEA are used (e.g. globally distributed monitoring infrastructure), transfers take place on the basis of the EU Standard Contractual Clauses (SCCs) and appropriate additional safeguards (transport/storage encryption, data minimisation, pseudonymisation). For the contact form we use Webflow (Forms); processing takes place outside the EEA (in particular USA) on the basis of the SCCs; in addition, we use transport/storage encryption and data minimisation.

6. Cookies & storage

We use no analytics or marketing cookies.

Depending on the infrastructure, strictly necessary mechanisms may be used (e.g. CSRF protection tokens, session IDs for admin/editorial areas). Such mechanisms are generally not set for visitors without login. A cookie banner is therefore not required. Should this change in the future (e.g. on the introduction of analytics), we will inform you in advance and obtain your consent.

7. Retention periods

  • Server/security logs: 90–180 days (rotating), longer only in specific cases (forensics).
  • Email communication: up to 6 months after completion of the correspondence; longer retention only where legally required.
  • Backups: in accordance with the technical rotation plan; data is overwritten on a recurring basis.

8. Security (TOMs)

TLS (≥1.2), encryption-at-rest (where possible), role-based access, least privilege, MFA for admin access, hardening & updates, audit/access logs, network segmentation, backups/restore tests, secure development/deployment processes, secrets management, occasional penetration tests.

9. Your rights

Within the scope of the law, you have the right to access, rectification, erasure, restriction, data portability as well as to object to processing based on legitimate interests.

Contact: office@claim-space.com (subject “Data Protection”). We usually respond within 30 days.

You may submit complaints to the Austrian Data Protection Authority.

10. Minors

The information offered is aimed at persons aged 18 and over.

11. Changes to this notice

In the event of changes to the legal situation, the infrastructure or the service providers used, we will update this notice and adjust Annex A.

Annex A – Processors & technical services (Website)

Service / Provider

Role & purpose

Data processed

Location & legal instrument

easyname GmbH

Web hosting / asset delivery

Server/log data (see 2.1), static assets

EEA (AT/EU); data processing pursuant to Art. 28 GDPR

Datadog (EU1 – datadoghq.eu)

Logging, monitoring, tracing, crash reporting (website operation)

Request/response metadata (incl. IP in truncated/derived form), error payloads, availability and performance metrics, service/session IDs; data minimisation/pseudonymisation

EEA (EU1); data processing; for any international transfers SCCs

GitHub

Code hosting / CI/CD (source code management, deployments); no intended processing of website visitor data

Source code/build artefacts, developer/ticket data

Global/USA; transfers on the basis of SCCs; secrets management & access controls

Webflow (Forms)

Contact form backend (storage & forwarding by email)

Form fields (name, email, message, optional company/phone), timestamps, technical metadata

USA (Webflow, Inc.); transfers on the basis of SCCs; data minimisation; transport/storage encryption

Note: A separate annex/notice applies to interactive services (e.g. Claim Communicator / ClaimCare, email/SMS dispatch, STT/TTS, LLM services).

Note on the binding language version

This English translation is provided for information purposes only; the German version is legally binding.

The German version is legally binding; this English text is provided for information only.