Legal

Privacy policy

This translation is for information only; the German version is legally binding.

Thank you for your interest in our website. Protecting your privacy is important to us. Below we explain in detail how we handle your data.

Controller

The controller responsible for data processing on this website is:

RiKuWe GmbH
Entschendorf 61
8321 St. Margarethen an der Raab
Austria

You will also find details in the imprint.

Collection and storage of personal data and the nature and purpose of their use

When you visit the website

When you open our website, the browser on your device automatically sends information to the server of our website. This information is stored temporarily in a so-called log file. The following information is recorded without any action on your part and stored until it is deleted automatically:

the IP address of the requesting computer,
the date and time of access,
the name and URL of the file retrieved,
the website from which the access was made (referrer URL),
the browser used and, where applicable, your computer's operating system and the name of your access provider.

We process this data for the following purposes:

ensuring a smooth connection to the website,
ensuring convenient use of our website,
evaluating system security and stability, and
other administrative purposes.

The legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest follows from the purposes of data collection listed above. We never use the collected data to draw conclusions about you as a person.

Cookies & local storage

We have deliberately decided against tracking cookies and a cookie banner – because your privacy comes first for us.

This website uses neither analytics nor advertising cookies. No data is passed on to third parties and no profiles are created.

This website sets no cookies. Only when you choose a language with the DE | EN switch does it remember that choice in your browser's local storage (entry tokenwerk.lang with the value de or en, no personal data), so that you keep seeing the pages in that language. Without that choice, the language follows your browser settings. All fonts, images and scripts are loaded from our own server.

The Models and Docs pages load the list of our models directly from your browser from our own TOKENWERK API. No cookies are set and no personal data is transmitted; as with every page request, the server processes your IP address, here additionally for a short time in memory to limit excessive requests.

A cookie banner is therefore not required: the language entry is only stored at your explicit request and is strictly necessary for that function (Section 165(3) of the Austrian Telecommunications Act (TKG), Art. 5 GDPR).

Self-hosted web analytics

To analyse how our website is used, we use Plausible Analytics, a privacy-friendly web analytics system that we operate entirely on our own infrastructure. The measurement script comes from our own server, and the measurement data goes to it as well; it passes them on to our Plausible instance on rikuwe.com, a server of the same controller (RiKuWe GmbH). Your browser does not connect to any third party, and the collected data does not leave our servers.

No cookies are set, no cross-device tracking takes place and no personal data is stored. Your IP address is not stored, it is only processed briefly to tell one visit from the next. Only aggregated, anonymised information is recorded, e.g.:

which pages were visited and how often,
which countries the access came from,
which device or browser was used,
which buttons, links and forms were used, such as “Log in”, the docs, copying a code example or signing up for the newsletter (without your email address).

The legal basis for this processing is Art. 6(1)(1)(f) GDPR. Our legitimate interest lies in the anonymous evaluation of website usage in order to improve our offering and its usability.

Hosting

Our website is hosted by Hetzner, a German provider of web hosting services.

You can find information on Hetzner's privacy policy here:
hetzner.com/legal/privacy-policy ↗

We have concluded a data processing agreement with Hetzner.

Fonts

All fonts used on this website are delivered from our own server. No connection is made to Google Fonts or other external font services.

When you contact us

If you contact us by email or phone, we process the information you provide (e.g. name, email address, phone number and the content of your enquiry) solely to handle and answer your enquiry.

The legal basis for the processing is Art. 6(1)(b) GDPR, as it is necessary for taking steps prior to entering into a contract. The data is not passed on to third parties.

On our homepage you can sign up for our newsletter. We notify you as soon as the TOKENWERK beta opens and occasionally, at most once a month, inform you about new models and features.

All we need for the sign-up is your email address. We use the double opt-in procedure: after signing up you receive an email with a confirmation link, and you are only added once you click it. This way nobody can sign up with someone else's email address. To be able to prove your consent, we store the time of your sign-up and the IP address from which you confirmed it.

We manage sign-ups and sending with the software listmonk, which we run ourselves on our servers at Hetzner (see Hosting). The form sends your details directly to this server. We only count opens of newsletters and clicks on links in them as totals, without any reference to you.

To protect against automated sign-ups, your browser solves a small computation when you submit the form (ALTCHA). The script for this also comes from our listmonk server and is only loaded once you type something into the form. No cookies are set, no data is passed on to third parties and no profiles are created.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 174 of the Austrian Telecommunications Act 2021). You can withdraw it at any time with effect for the future, via the unsubscribe link in every email or by sending us a message. We keep the proof of consent on the basis of Art. 6(1)(f) GDPR; our legitimate interest is being able to prove the lawful sign-up.

We store your data for as long as you are subscribed. After you unsubscribe, your entry is kept marked as unsubscribed, so that you receive no further emails and we can prove your earlier consent; we delete it after three years at the latest. Unconfirmed sign-ups are deleted after 30 days at the latest. Via the unsubscribe link in every email you can also export or completely delete your data yourself at any time.

Storage period

Unless stated otherwise, we process your data for as long as necessary, but for no more than 5 years, unless it is required for administrative or judicial proceedings that have already been initiated or for investigation proceedings under the Austrian Code of Criminal Procedure (StPO).

Your rights

Where we process data on the basis of our legitimate interests, you generally have the right to object if there are reasons arising from your particular situation that speak against this processing.

You generally have the rights of access, rectification, erasure, restriction of processing, data portability and objection. To exercise them, please contact us.

You can withdraw consent you have given at any time with effect for the future. This does not affect the lawfulness of the processing carried out until then.

If you believe that the processing of your data violates data protection law or that your data protection rights have been infringed in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde).