privatecoffee-website/templates/privacy.html

{% extends "base.html" %}
{% block title %}Privacy Policy{% endblock %}
{% block content %}
  <div class="container">
    <div class="text-center mb-5">
      <h1 class="special-header fancy-text-primary">Privacy Policy</h1>
      <p class="lead">
        This is the privacy policy for the website private.coffee. It describes
        how we collect and use your personal data.
      </p>
    </div>
    <div class="section">
      <p>
        This privacy policy is effective as of 2024-04-26. It may be updated from
        time to time, so please check back regularly.
      </p>
      <p>
        If you have any questions about this privacy policy, please contact us at
        <a href="mailto:support@private.coffee">support@private.coffee</a>.
      </p>
    </div>
    <div class="section">
      <h2>Who are we?</h2>
      <p>The data controller for private.coffee is:</p>
      <address>
        Private.coffee &dash; Verein zur Förderung von Privatsphäre und digitaler
        Souver&auml;nit&auml;t
        <br />
        c/o Klaus-Uwe Mitterer
        <br />
        Gartengasse 22/7/3
        <br />
        8010 Graz
        <br />
        Austria
        <br />
      </address>
      <p>Central Register of Associations (ZVR) Number: 1758485319</p>
      <p>
        Email:
        <a href="mailto:support@private.coffee">support@private.coffee</a>
      </p>
    </div>
    <div class="section">
      <h2>What data do we collect?</h2>
      <p>We collect the following data from you:</p>
      <ul>
        <li>
          Your IP address, which is automatically collected by our web server for
          some of our services.
        </li>
        <li>
          Any data you provide to us, such as your email address, when you create
          an account on one of our services.
        </li>
        <li>
          Usage data that is collected automatically by our services, such as the
          time you last logged in, or the number of times you have logged in, as
          well as any content you create using our services.
        </li>
        <li>
          Any information, including personal data and payment information, that
          you provide to us when you make a donation or join our association.
        </li>
      </ul>
    </div>
    <div class="section">
      <h2>How do we use your data?</h2>
      <p>
        We use your data to provide you with the services you requested. This
        includes:
      </p>
      <ul>
        <li>Communication between our web server and your browser</li>
        <li>Storing your preferences or your created content</li>
        <li>Detection of abuse or resource exhaustion on our servers</li>
        <li>Providing support to you</li>
        <li>Processing donations and memberships</li>
      </ul>
      <p>All of those are what is called "legitimate interests" in legal speak.</p>
      <p>
        We do not use your data for any other purposes, including marketing,
        advertising, or tracking, we do not share your data with third parties
        (unless required by law), we do not use your data to create profiles or
        make automated decisions, and we do not cross-reference your data between
        different services or any other sources.
      </p>
    </div>
    <div class="section">
      <h2>Where do we store your data?</h2>
      <p>
        We store your data on our web servers, which are located in Austria. We
        also use servers in Germany, but those are not public-facing and do not
        store or process any personal data.
      </p>
    </div>
    <div class="section">
      <h2>How long do we store your data?</h2>
      <ul>
        <li>
          IP addresses collected by our web server are stored for up to 48 hours.
          After that, the log files that contain them are deleted automatically.
        </li>
        <li>
          Data associated with an account you have on one of our services is
          stored for as long as you have an account on that service. If you delete
          your account, your data will be deleted automatically. The service will
          have a dedicated privacy policy, please consult that if you have any
          specific questions.
        </li>
        <li>
          If you send a support request to us, we will store your email address
          and any other data you provide to us for up to 30 days in our support
          system. After that, the data will be deleted automatically.
        </li>
        <li>
          Data associated with a donation is stored for as long as required by
          law, which is currently 7 years in Austria. After that, the data will be
          deleted.
        </li>
        <li>
          Data associated with a membership is stored for as long as you are a
          member of our association. If you leave the association, your data will
          be deleted automatically. This does not apply to data that is required
          by law to be stored for a longer period of time, such as financial
          records, which are stored for 7 years regardless of your membership
          status.
        </li>
      </ul>
    </div>
    <div class="section">
      <h2>What are your data protection rights?</h2>
      <p>You have the following data protection rights:</p>
      <ul>
        <li>You have the right to request access to your personal data.</li>
        <li>You have the right to request correction of your personal data.</li>
        <li>You have the right to request erasure of your personal data.</li>
        <li>
          You have the right to request restriction of processing of your personal
          data.
        </li>
        <li>You have the right to object to processing of your personal data.</li>
        <li>You have the right to request transfer of your personal data.</li>
      </ul>
      <p>If you make a request, we have one month to respond to you.</p>
      <p>
        If you would like to exercise any of these rights, please contact us at
        <a href="mailto:support@private.coffee">support@private.coffee</a>.
      </p>
      <p>
        Your privacy is important to us - after all, that's why we're all here -
        and we will do our best to respond to your request as soon as possible.
        Please note that we may need to verify your identity before we can respond
        to your request - we will not share your data with anyone else.
      </p>
      <p>
        If you are not satisfied with our response, or believe that we are
        processing your data in a way that is not compliant with the law, you have
        the right to lodge a complaint with the supervisory authority in your
        country. In Austria, this is the Austrian Data Protection Authority (<a href="https://www.dsb.gv.at/">https://www.dsb.gv.at/</a>). However, we like to think of ourselves as nice people and will try to
        help you out directly, and are always open to suggestions for improvement,
        so please do get in touch with us if you have any questions or concerns.
      </p>
    </div>
    <div class="section">
      <h2>What are cookies?</h2>
      <p>
        Cookies are small text files that are placed on your computer or mobile
        device when you visit a website. They are widely used to make websites
        work, or work more efficiently, as well as to provide information to the
        owners of the site. Cookies are stored on your device, and can be accessed
        by the website that created them. They are not harmful to your device, and
        do not directly contain any personal data, but are used by our services to
        identify you between multiple visits.
      </p>
      <p>
        Cookies are used on some of our services to provide you with a better
        experience. For example, we use cookies to remember your preferences and
        settings - for example, to allow you to login to our services - and to
        provide you with a better experience when browsing our services. We do not
        use cookies to track your activity, either on our services or on other
        websites. In legal/technical terms, we exclusively use "strictly
        necessary" first-party cookies, which is also why you don't see any cookie
        banners on our website.
      </p>
    </div>
  </div>
{% endblock %}