Privacy policy
Information on the processing of personal data pursuant to Art. 13 and 14 GDPR and the Austrian Data Protection Act (DSG).
This policy describes which data we process when you visit this website (8trails.ai), on what legal basis, and what rights you have. This website uses no cookies, no analytics or tracking tools and no embedded third-party content.
1. Controller
The controller responsible for data processing on this website within the meaning of the GDPR is:
xzeptiq FlexCo
Schützenweg 5, 5321 Koppl, Austria
E-mail: hello@xzeptiq.com
We have not appointed a data protection officer, as we are not legally required to do so. For any data protection enquiry, please contact us at the address above.
2. Legal bases
We process personal data on the basis of our legitimate interests in the secure and efficient operation of this website (Art. 6(1)(f) GDPR) and, when you contact us, to handle your enquiry or carry out pre-contractual measures (Art. 6(1)(b) and (f) GDPR).
3. Hosting & server log files
This website is hosted on GitLab Pages, a service of GitLab Inc. (268 Bush Street #350, San Francisco, CA 94104, USA); the contracting party and processor for customers in the EEA is GitLab B.V. (Amsterdam, Netherlands). Delivery is via its content delivery network. GitLab acts as our processor under a data processing agreement pursuant to Art. 28 GDPR that incorporates the EU Standard Contractual Clauses. When you access the website, the servers automatically collect and store information that your browser transmits in so-called server log files:
IP address · date and time of the request · browser type and version · operating system · referrer URL · amount of data transferred.
This data is processed on the basis of our legitimate interest in the technically error-free presentation and security of our website (Art. 6(1)(f) GDPR). Log data is stored for a short period and then deleted, unless it is required as evidence in the event of security incidents.
4. Domain forwarding
The domains 8trails.com, 8trails.de, 8trails.at and 8trails.ch forward to this website. Forwarding is handled by the domain registrar GoDaddy (GoDaddy.com, LLC, USA), whose servers necessarily process your IP address and the requested address. The legal basis is our legitimate interest in making our offering reachable under all brand domains (Art. 6(1)(f) GDPR).
5. Contact by e-mail
If you contact us by e-mail, we process the data you provide (e.g. name, e-mail address, content of your message) solely to handle your enquiry and any follow-up questions. We store this data until your enquiry has been fully dealt with and then delete it, unless statutory retention obligations apply. Our e-mail service is Google Workspace (Google Ireland Limited), acting as processor pursuant to Art. 28 GDPR.
6. Recipients & processors
We only share personal data where necessary and legally permissible. Service providers processing data on our behalf (GitLab for hosting, Google Workspace for e-mail) act as processors under agreements pursuant to Art. 28 GDPR. We do not sell personal data.
7. Transfers to third countries
Hosting via GitLab Pages, domain forwarding via GoDaddy and e-mail via Google Workspace may involve transfers to the USA. Where the respective provider is certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection (adequacy decision of 10 July 2023), the transfer is safeguarded on that basis; the EU Standard Contractual Clauses apply in addition. Despite these safeguards, access to data by U.S. authorities cannot be entirely excluded.
8. Storage period
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. Once the purpose ceases to apply and no retention obligations remain, the data is deleted.
9. Your rights
As a data subject, you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21).
To exercise these rights, please contact us at hello@xzeptiq.com.
10. Right to lodge a complaint
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, dsb.gv.at.
11. No automated decision-making
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR on this website.