Privacy

Controller

TOM & DERRY OG, Zirmweg 99, 6150 Steinach am Brenner, Austria. E-mail: office@tomderry.com.

When you open this site

The site is delivered by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States, which acts as our processor. To deliver a page, its servers process the IP address of your device, the time of the request, the file requested and the browser identification your browser sends, and keep them in server log files.

We use this data only to deliver the site and to keep it secure. The legal basis is our legitimate interest in doing so (Art. 6(1)(f) GDPR). We do not combine the log files with other data and do not pass them on. How long the host keeps them is governed by its own privacy notice.

Vercel is a company in the United States, so this data can be processed there. According to its own statement, Vercel is certified under the EU–US Data Privacy Framework; its data processing agreement also contains the standard contractual clauses of the European Commission.

What this site does not do

It sets no cookies and stores nothing on your device. It runs no analytics. It embeds no content from other providers and loads no fonts or scripts from other hosts. It has no form.

The picture is lit by your device’s clock. The time is read in your browser and is not sent to us. We do not ask for your location.

When you write to us

If you send us an e-mail, we process your address, your name and what you write in order to answer you. The legal basis is steps taken at your request before a contract (Art. 6(1)(b) GDPR) and otherwise our legitimate interest in answering (Art. 6(1)(f) GDPR). The message is stored in our mailbox with our e-mail provider.

We delete enquiries that do not lead to a contract twelve months after the last message. Correspondence that leads to a contract is kept for seven years, as tax and company law require. You are not obliged to write to us, and no decision about you is made automatically.

Your rights

You have the right to access, to rectification, to erasure, to restriction of processing, to object and to data portability. To use any of them, write to the address above.

You can also lodge a complaint with the Austrian data protection authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, www.dsb.gv.at.