# Privacy Policy – identitydirector.com
*Last updated: 12 June 2026*
## 1. Controller
selected technologies arc gmbh
Schmalzhofgasse 21/14
1060 Wien
Austria
Registered at the Commercial Court of Vienna, FN 158710y
Email: info@identitydirector.com
## 2. Overview
This website is operated by selected technologies arc gmbh (“we”, “us”). We take the protection of your personal data seriously and process your data exclusively in accordance with the European General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
This privacy policy explains what personal data we collect when you visit our website, why we collect it, and what rights you have.
## 3. Data We Collect
### 3.1 Server Log Files
When you visit our website, our web server automatically collects the following data for technical and security purposes:
– IP address
– Date and time of access
– Requested URL
– HTTP status code
– Browser type and version
– Operating system
– Referrer URL
**Legal basis:** Legitimate interest (Art. 6(1)(f) GDPR) – ensuring the security and functionality of our website.
**Retention period:** Server log files are automatically deleted after 30 days at the latest.
### 3.2 Contact Form / Demo Request
When you submit a contact form or demo request on our website, we collect the following data:
– Name (required)
– Company (required)
– Email address (required)
– Role / Job title (optional)
– Message (optional)
This data is used exclusively to process your inquiry and to contact you regarding your request. When you submit a demo request, you receive an automatic confirmation email, including our product datasheet, at the email address you provide.
**Legal basis:** Pre-contractual measures at your request (Art. 6(1)(b) GDPR).
**Retention period:** Your data will be stored for the duration of the business relationship or inquiry processing, and subsequently for the period required by Austrian statutory retention obligations (typically 7 years under Austrian tax law). You may request deletion at any time, subject to legal retention requirements.
### 3.3 Email Communication
If you contact us by email (e.g. via info@identitydirector.com or demo@identitydirector.com), we process your email address, name, and the content of your message to respond to your inquiry.
**Legal basis:** Pre-contractual measures at your request (Art. 6(1)(b) GDPR) where your inquiry relates to our products or services; otherwise legitimate interest (Art. 6(1)(f) GDPR) in handling correspondence addressed to us.
**Retention period:** Same as Section 3.2.
### 3.4 Bot Protection (Cloudflare Turnstile)
Our demo request form uses Cloudflare Turnstile to verify that submissions are made by a human and not by an automated program. Turnstile is provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”).
When the form page is loaded, Turnstile processes technical data such as your IP address, browser and device characteristics, and interaction signals, and transmits this data to Cloudflare for verification.
In the configuration used on this website, Turnstile sets no cookies and does not track you across websites. The data is not used for advertising purposes.
**Legal basis:** Legitimate interest (Art. 6(1)(f) GDPR) – protecting our website and forms against automated abuse and spam.
**Data transfer:** Cloudflare may transfer data to the United States (see Section 6).
## 4. Cookies
This website uses only technically necessary cookies that are essential for the functioning of the website. These cookies do not collect personal data for marketing or tracking purposes.
No third-party cookies are used. No tracking or analytics tools are implemented on this website. The bot protection service described in Section 3.4 does not set cookies in the configuration used on this website.
**Legal basis:** Legitimate interest (Art. 6(1)(f) GDPR) – technically necessary cookies do not require consent under Art. 5(3) of the ePrivacy Directive.
## 5. Data Sharing with Third Parties
We do not sell, trade, or share your personal data with third parties for marketing purposes.
Your data may be processed by the following service providers who act as data processors on our behalf (Art. 28 GDPR):
– **Hosting provider:** netcup GmbH, Karlsruhe, Germany – operation of this website. The hosting provider processes server log files and data submitted through forms. Server location: European Union.
– **Email services:** Microsoft Ireland Operations Limited, Dublin, Ireland (Microsoft 365) – operation of our email mailboxes and dispatch of emails, including the confirmation email sent after a demo request.
– **Bot protection:** Cloudflare, Inc., San Francisco, USA – verification of form submissions (see Section 3.4).
All data processors are contractually bound to process your data only on our instructions and in compliance with GDPR (Art. 28 GDPR).
## 6. Data Transfers Outside the EU
We process your personal data within the European Union wherever possible. In the following cases, personal data may be transferred to the United States:
– **Cloudflare (bot protection):** Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF). In addition, Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR are in place.
– **Microsoft (email services):** Our contractual partner is Microsoft Ireland Operations Limited, located in the European Union. Microsoft may transfer personal data to the United States in certain operational scenarios. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework (DPF), and Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR are in place.
The European Commission has confirmed by adequacy decision that companies certified under the EU-U.S. Data Privacy Framework provide an adequate level of data protection.
## 7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
– **Right of access** (Art. 15 GDPR) – You have the right to request information about the personal data we hold about you.
– **Right to rectification** (Art. 16 GDPR) – You have the right to request correction of inaccurate personal data.
– **Right to erasure** (Art. 17 GDPR) – You have the right to request deletion of your personal data, subject to legal retention obligations.
– **Right to restriction of processing** (Art. 18 GDPR) – You have the right to request that we restrict the processing of your personal data under certain conditions.
– **Right to data portability** (Art. 20 GDPR) – You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
To exercise any of these rights, please contact us at: info@identitydirector.com
## 8. Your Right to Object (Art. 21 GDPR)
**Where we process your personal data on the basis of legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time, on grounds relating to your particular situation. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms. To exercise your right to object, contact us at: info@identitydirector.com**
## 9. Automated Decision-Making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
## 10. Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien
Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
## 11. Changes to This Privacy Policy
We reserve the right to update this privacy policy to reflect changes in our data processing practices or legal requirements. The current version is always available on this website.