Privacy Policy

This policy explains how personal data is processed when you visit vigilans.app or purchase and manage a Vigilans license, in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

Controller

Hannes Stiebitzhofer
Pater-Schwartz-Gasse 4, 1150 Vienna, Austria
Email: contact@vigilans.app

What we process, why, and on what basis

Purchasing a license

When you buy a license, checkout and payment are handled by our payment provider (Vatly). The data processed includes your email address, billing details, and — where applicable — VAT identification, together with order and payment metadata. Legal basis: performance of a contract (Art. 6(1)(b) GDPR), and compliance with tax and bookkeeping obligations (Art. 6(1)(c) GDPR).

License issuance and management

Your email address is associated with the license key we generate so we can deliver, validate, and — if needed — reissue it. License records are held on our own self-hosted licensing service. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Resending a lost license key

If you use the “Lost your key?” form, we process the email address you submit solely to look up the associated license and send it to that address. Legal basis: performance of a contract, or our legitimate interest in supporting customers (Art. 6(1)(b) and (f) GDPR).

Email delivery

Transactional emails (such as your license key) are sent through Scaleway Transactional Email, an EU-based provider (Scaleway SAS, France), acting as a processor on our behalf. It processes the recipient address and message content solely to deliver the email. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Hosting and server logs

The site runs on infrastructure operated by us. The web server may automatically record technical data (such as IP address, timestamp, and the resource requested) for the purpose of operating and securing the service. Legal basis: our legitimate interest in a secure, functioning website (Art. 6(1)(f) GDPR).

Recipients and processors

We share personal data only with service providers acting as processors on our instructions, and only to the extent necessary:

• Vatly (EU), our merchant of record, for checkout and payment processing.
• Scaleway SAS (France), for sending transactional emails.

Our licensing service is self-hosted and not operated by a third party. All of the processors above are established in the EU, so your data is not transferred outside the EU/EEA.

Cookies and tracking

The site sets no analytics or advertising cookies and uses no third-party tracking. Only technically necessary storage required to operate the site is used.

Retention

We keep personal data only as long as necessary for the purposes above. Invoicing and accounting records are retained for the statutory period (seven years under Austrian tax law, § 132 BAO). License records are kept for the lifetime of the license so we can validate and support it.

Your rights

Under the GDPR you have the right to:

• access your personal data;
• rectification of inaccurate data;
• erasure (“right to be forgotten”);
• restriction of processing;
• data portability;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting prior processing.

To exercise any of these, contact contact@vigilans.app. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).