Privacy.

Controller

Christian Anton Musilek · Business names: Objective Dreams · Objective Dreams Interactive · Hohenäcker 17/2, 7203 Wiesen, Austria

Email: office@objectivedreams.at

Contact form: objectivedreams.at/contact

Website delivery, hosting and security

Our website is delivered using Cloudflare services. When the website is requested, technically necessary connection and request data is processed. This may include in particular IP address, request time, requested URL, HTTP information, browser or user-agent information and security-relevant event data.

The processing is necessary to deliver the website, maintain stability and security, defend against abusive or malicious access and analyse technical faults. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient operation of the website.

Our technical service provider and recipient is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes data for the services used by us in accordance with its contractual data protection terms and the relevant service.

Retention of technical logs

Technical log and security data is processed only for as long as required for delivery, fault diagnosis and the prevention of abuse and security incidents. The specific period depends on the type of log and the Cloudflare configuration used by us. Security-relevant data may be kept until an incident has been fully resolved and beyond that only where statutory duties or the establishment, exercise or defence of legal claims require it.

Local preferences, cookies and tracking

We do not use analytics, advertising or marketing trackers. The website stores a single user-selected setting locally in the browser: the chosen display theme of the Objective Dreams website. localStorage is used for this purpose.

The language is not stored. It is part of the address you open: a German address always serves the German version, an English address always the English one. Objective Dreams Interactive does not store a language setting either.

This stored display setting exists solely to restore the view you expressly selected on later visits. It remains in the browser until removed via browser settings or by clearing website storage. It is not used for analytics, profiling or advertising.

If technically necessary security functions of the hosting provider use cookies or comparable storage in an individual case, they are used solely for secure technical operation. Non-essential cookies or comparable technologies are not used without prior consent.

Fonts

Fonts used on the website are served as local font files through our own domain. Loading these fonts does not establish a connection to external font providers.

Contact

If you contact us by email or another contact channel provided by us, we process the data you provide – in particular name, company, email address, the content of your request and associated communication data – in order to handle the request and follow-up questions.

When you use the contact form, the inquiry is validated server-side in our Cloudflare Worker and then transmitted using Proton SMTP Submission with STARTTLS to the designated Objective Dreams address: support inquiries to support@objectivedreams.at and all other form inquiries to office@objectivedreams.at. The website backend does not store the inquiry content in its own database.

We use Proton Business for business email. The provider is Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland. Email communications are processed and stored in our Proton Business account. Where Proton processes personal data on our behalf, the data processing agreement provided by Proton for business customers applies.

Where the request relates to entering into or performing a contract, processing is based on Article 6(1)(b) GDPR. Other business enquiries are processed on the basis of our legitimate interest in handling and documenting business communications under Article 6(1)(f) GDPR.

Enquiry data is generally deleted six months after the enquiry has been concluded unless it leads to a contract or statutory retention duties or legitimate reasons require longer retention. If a contract is concluded, the data required for that contract is further processed in accordance with applicable statutory and contractual retention periods.

Recipients and processors

Personal data is disclosed only to recipients that require it for the purposes described above. For the website these include in particular Cloudflare and for business email Proton AG. Where a service provider processes personal data on our behalf, it is engaged under a data processing agreement where required by law.

Further disclosure occurs only where necessary for performance of a contract, required by law, necessary for the establishment, exercise or defence of legal claims, or otherwise supported by a valid legal basis.

Transfers to third countries

The use of Cloudflare may involve processing of personal data outside the European Economic Area, in particular in the United States. Cloudflare relies for relevant transfers, among other safeguards, on the EU-U.S. Data Privacy Framework and, where required, on Standard Contractual Clauses approved by the European Commission together with supplementary measures.

Proton AG is established in Switzerland. The European Commission has adopted an adequacy decision for Switzerland, so personal data may be transferred there on that basis. Where other recipients in third countries are used, transfers take place only in accordance with Articles 44 et seq. GDPR.

Your rights

Subject to the statutory requirements, you have the right to access your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability and to object to processing based on Article 6(1)(e) or (f) GDPR.

Where processing is based on consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

To exercise your rights, contact office@objectivedreams.at. Where necessary to prevent unauthorised disclosure, we may request appropriate proof of identity.

Complaints, provision of data and automated decisions

If you consider that processing of your personal data infringes data protection law, you have the right to lodge a complaint with a data protection supervisory authority. In Austria this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Apart from technically necessary connection data, you do not need to provide additional personal data merely to visit the website. To handle an enquiry, at least the information required to contact you and understand the request must be provided; without it we may be unable to respond.

No decision based solely on automated processing, including profiling within the meaning of Article 22 GDPR, takes place in connection with this website.