Privacy Policy

The protection of your personal data is important to us. We process data exclusively on the basis of the statutory provisions (GDPR, TKG 2021) and as sparingly as possible.

Controller

ONE TANGO GmbH, Salztorgasse 2, 1010 Wien · contact@onetango.at · +43 699 15223002 Data protection officer: Michael Schellander — michael@onetango.at

Hosting and data processing

This website is operated and technically maintained by rockit GmbH. They process personal data exclusively on our behalf and on our instructions — processing on behalf of a controller under Art. 28 GDPR. This covers operating the website, storing form enquiries and technical maintenance.

Hetzner Online GmbH acts as sub-processor. The server is located in Nuremberg, Germany. Your data is not transferred to third countries outside the EU.

Server logfiles

When the website is accessed, technically necessary data (e.g. IP address, date and time, page accessed) is processed automatically. The legal basis is our legitimate interest in the secure and stable operation of the website.

Contacting us

If you contact us by email, your details will be stored to process the enquiry and will not be passed on to third parties without your consent.

Cookies

This website does not set any tracking or marketing cookies. Only technically necessary cookies for the operation of the website are used.

Audience measurement

To understand which content is being read, we collect anonymous usage statistics with Matomo — open-source software that we run on our own server. No data is transmitted to Google or any other analytics service.

The measurement is deliberately kept to a minimum:

• No cookies. No cookie is set for audience measurement.
• IP addresses are truncated before they are stored. They cannot be traced back to individuals.
• "Do Not Track" is respected. If this setting is active in your browser, you are not counted.
• The data never leaves our server.

The Matomo instance is operated by rockit GmbH as our processor (Art. 28 GDPR) on a server of Hetzner Online GmbH in Nuremberg, Germany.

The legal basis is our legitimate interest in designing this website to meet visitors' needs (Art. 6(1)(f) GDPR). Because no cookies are set and no data is stored on or read from your device, no consent under § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) is required.

Objection: You can object to being counted at any time — opt out here. So that your objection is still known on your next visit, a single cookie is set that stores only this objection. It does not count you; it prevents you from being counted.

Fonts

We do not embed any external Google Fonts. All fonts are loaded locally from our own server — no data is therefore transmitted to third parties.

Map / Getting here

In the footer of every page there is a static directions graphic. It is hosted on our own server, so loading a page sends no request to any third party. Clicking it takes you to Google Maps — only then do you leave this website.

On the contact page we additionally offer an interactive Google map. It is not loaded automatically: at first you see the same static graphic. Only when you click "Load Google map" is a connection to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) established. Data such as your IP address, information about your browser and the page you are on is then transmitted to Google; Google may set cookies and may also transfer the data to the USA.

The legal basis is your consent under Art. 6(1)(a) GDPR, which you give by clicking. Without that click, none of these transfers take place. More in Google's privacy policy.

Newsletter

Newsletter subscription takes place exclusively with your express consent. The legal basis is Art. 6(1)(a) GDPR.

For distribution we use Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) as a processor pursuant to Art. 28 GDPR. When you subscribe, your email address is transmitted to Brevo and stored there. The subscription only takes effect once you click the confirmation link in the email Brevo then sends you (double opt-in). Until then, your address is not added to the mailing list. For details see the Brevo privacy policy.

When you subscribe we collect your first and last name as well as your email address. The name is used solely for the personal salutation in the newsletter.

To prevent the subscription form from being abused by automated programs, it is protected by a bot check: Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When the newsletter page is opened, a script is loaded from Cloudflare; in doing so your IP address, details about your browser and the page you are visiting are transmitted to Cloudflare and evaluated there to distinguish humans from machines. The legal basis is our legitimate interest in a functioning subscription form protected against abuse, pursuant to Art. 6(1)(f) GDPR. For the transfer to the USA, Cloudflare relies on standard contractual clauses. For details see the Cloudflare privacy policy.

You can unsubscribe at any time via the unsubscribe link in every newsletter, or informally via contact@onetango.at.

Retention periods

We store personal data only for as long as it is needed for the respective purpose, or as long as statutory retention obligations require.

The seven-year period for business records follows from the statutory retention obligation under § 132 of the Austrian Federal Fiscal Code (Bundesabgabenordnung). It applies only to records belonging to an actual business transaction — a mere enquiry without a booking is not covered and is deleted sooner.

Your rights

You have the rights to information, rectification, erasure, restriction of processing, data portability and withdrawal of consent given. To exercise these, please contact michael@onetango.at. You also have the right to lodge a complaint with the Austrian Data Protection Authority.