Legal

Privacy Policy

GDPR / DSGVO · Last updated [DATE]

Note: This page is a template. Replace every [PLACEHOLDER], confirm the named processors actually match what you deploy, and have the final text reviewed by legal counsel before going live.

1. Controller

The controller responsible for data processing on this website is:

Setu Innovation (project — not yet an incorporated company)
Email: contact@setu-innovation.com

Preview / test site. This is a non-public preview (set to noindex) with no contact form, so the only processing is your host's server logs (section 3). The controller's full legal name and serviceable address — and sections 4 (contact form) and 5 (analytics) — will be completed before the site is made public.

We have [not] appointed a Data Protection Officer, as we are not legally required to.

2. Overview

We process personal data only where necessary and on a lawful basis under the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Austrian Data Protection Act (DSG). This page explains what we collect, why, on what legal basis, and your rights.

3. Hosting & server logs

This website is hosted by [HOSTING PROVIDER, e.g. Netlify / Cloudflare — incl. company & country]. When you visit, the host automatically processes technical data (e.g. IP address, browser type, date/time of request) in server log files for security and to deliver the site. Legal basis: our legitimate interest in a secure, functioning website (Art. 6(1)(f) GDPR).

4. Contact form & email

If you use the contact form or email us, we process the details you provide — name, email address, company (optional) and your message — to handle and respond to your enquiry.

Purpose: responding to your enquiry and any resulting business relationship.
Legal basis: steps prior to entering a contract (Art. 6(1)(b) GDPR) and/or our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
Retention: we keep enquiry data for [e.g. 6 months], or longer where a business relationship or legal retention obligation requires it.

The form is delivered through Web3Forms (a service that forwards submissions to our inbox). When you submit, your data is transmitted to Web3Forms for processing on our behalf. See the Web3Forms privacy policy: web3forms.com/privacy. [Confirm a data processing agreement / processor terms are in place.]

5. Analytics

This website currently uses no analytics and no tracking. If we adopt analytics in future, we intend to use Plausible Analytics — a cookieless, EU-hosted tool that collects no personal data and builds no cross-site profiles — and we will update this policy before enabling it. The legal basis would then be our legitimate interest in understanding aggregate site usage (Art. 6(1)(f) GDPR).

6. Cookies & third-party content

This website does not set tracking or marketing cookies. Fonts are self-hosted on this domain, so simply loading a page transmits no data to third-party providers such as Google Fonts. We embed no third-party scripts, trackers or social-media widgets; data leaves your browser only when you actively submit the contact form (see section 4).

7. Your rights

Under the GDPR you have the right to:

access your personal data (Art. 15);
rectification (Art. 16);
erasure (Art. 17);
restriction of processing (Art. 18);
data portability (Art. 20);
object to processing based on legitimate interests (Art. 21).

To exercise any of these, contact us at the address in section 1.

8. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. In Austria this is the Data Protection Authority (Österreichische Datenschutzbehörde): dsb.gv.at.

9. Changes

We may update this policy to reflect changes to our processing or legal requirements. The current version is always available on this page.