Privacy

The controller responsible for processing your data on this website is:

Company name

Flamingo Agency – Content & Strategy e.U., owner Julian Seum, B.A.

Address

Preßgasse 30/7, 1040 Vienna, Austria

Email

office@flamingoagency.at

Telephone

+43 664 385 69 89

We have not appointed a data protection officer because the law does not require one for a company of our size. For any privacy-related questions, contact us directly using the details above.

Hosting

This website is hosted by the Austrian provider Zubasoft, Bernhard Zuba, Sonnenweg 9, 3482 Stettenhof. The servers are located in the European Union. We have concluded a data processing agreement with Zubasoft pursuant to Article 28 GDPR.

The website is managed using our own tool, the Flamingo Editor. It runs on a server operated by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaka, Cyprus, in a data centre in Düsseldorf, Germany. The website retrieves updates from there, and enquiries submitted through the form are also received there (see below). We have also concluded a data processing agreement with Hostinger.

What happens when you access the website

To deliver a page to you, the server necessarily processes your IP address, the requested address, the date and time, and information about your browser and device. For security purposes, Zubasoft may briefly store this information in access logs, for no longer than 7 days. We do not analyse any of it ourselves. The connection is encrypted throughout (HTTPS).

The legal basis is our legitimate interest in operating a functional and secure website (Article 6(1)(f) GDPR).

If you contact us through the enquiry form, we store your name, email address, message and the page from which you submitted the form in the Flamingo Editor on Hostinger’s server. At the same time, we receive an email notification containing these details, sent through our email account with Zubasoft. To prevent spam, the form uses a small automated task without any third-party provider. We use your IP address only briefly to limit repeated submissions in quick succession. We do not store it with your enquiry.

We use your details solely to respond to your enquiry. The legal basis is your consent (Article 6(1)(a) GDPR), which you provide by ticking the box in the form, and steps taken prior to entering into a contract (Article 6(1)(b) GDPR). You may withdraw your consent at any time by email.

If you email us directly, the same applies to the data contained in your message.

How long we retain data

We delete enquiries that do not become projects after six months. The server makes a backup copy every night, and these copies are overwritten after 14 days.

If an enquiry becomes a project, we delete the data once statutory warranty and comparable obligations have expired. We review whether the data is still required every three years. Where data is subject to statutory retention obligations, we delete it after those obligations expire, generally after seven years (Section 212 UGB, Section 132 BAO).

When you sign up for the newsletter, we store your email address, the language of the page you signed up on, and the times of signup and confirmation. Like the enquiry form, the signup form uses a small automatic task to check that a person is on the other end, without any third-party service. We use your IP address only briefly to slow down many signups in a row. We do not store it with your signup.

We use double opt-in: after you sign up, we send you an email with a link. Only when you confirm there do we add you to the list. The newsletter is sent through our email account at Zubasoft, the list is stored on the server at Hostinger and managed by our team. We do not track whether or when you open our emails or which links you click.

The legal basis is your consent (Article 6(1)(a) GDPR, Section 174 TKG 2021), which you give by ticking the box in the form and clicking the confirmation link. You can withdraw it at any time: with the unsubscribe link at the end of every email, or by emailing us.

How long we retain data

For as long as you receive the newsletter. We delete signups you do not confirm after 30 days. After you unsubscribe, the address stays on file as blocked for another 12 months, so that we make sure not to write to you again and can prove your withdrawal; then we delete it. On request we delete it immediately. The server’s nightly backup copies are overwritten after 14 days.

This website does not use cookies for analytics or advertising. It uses only two technically necessary cookies that reveal nothing about you:

• Viewing access: While the website is password-protected, a cookie remembers for 30 days that you entered the password.
• Editor login: For our team only. A cookie keeps people who edit the website logged in. The editor also stores settings in the browser.

Consent is not required for technically necessary cookies (Section 165(3) TKG 2021). The legal basis is our legitimate interest in operating a functional website (Article 6(1)(f) GDPR). You can delete cookies in your browser at any time.

The fonts (Fraunces and IBM Plex) and the software libraries used for animations and scrolling (GSAP, Lenis, three.js) are hosted on our own server together with the website. Loading a page therefore does not establish a connection to Google or to content delivery networks. The only exception is the audience measurement described below.

To understand which pages are read and to improve the website, we use Umami Cloud (Umami Software, Inc.). When a page is opened, a script is loaded from cloud.umami.is. It transmits the page viewed, the page you came from, browser, operating system, device type, screen size, language and the approximate country. Umami sets no cookies and stores nothing on your device. Your IP address is not stored.

The legal basis is our legitimate interest in analysing and improving our offering (Article 6(1)(f) GDPR). You can object to the measurement at any time; a message to office@flamingoagency.at is enough. A script blocker in your browser also prevents it.

This website contains links to Instagram, Facebook, Google Maps and our partners’ websites, for example. These are simple links without embedded content. Data is transferred only when you click a link. From that point onwards, the privacy policy of the respective website applies.

You have the right at any time to:

• Access the data we hold about you (Article 15 GDPR)
• Rectification of inaccurate data (Article 16 GDPR)
• Erasure of your data (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Object to processing based on legitimate interests (Article 21 GDPR)
• Withdraw consent with effect for the future (Article 7(3) GDPR)

Simply email us at office@flamingoagency.at. We will respond within one month.

Complaint

If you believe that we are not handling your data properly, you may lodge a complaint with the österreichische Datenschutzbehörde: Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at. However, we would prefer to resolve the matter directly with you first.

As of October 2026