How we handle your data.

1. Controller

The controller responsible for processing personal data on this website is:

ARkid Technologies GmbH
Anzengruberstraße 1/4
2540 Bad Vöslau, Austria
Represented by its managing director, Stefan Eipeltauer.

Email hello@arkid.app · Phone +43 664 914 00 31

For any question about data protection, or to exercise your rights, write to hello@arkid.app.

2. At a glance

This website sets no cookies of its own and runs no advertising or social media trackers. We count page views with Cloudflare Web Analytics, which works without cookies and without identifiers in your browser (section 5), and the embedded Catalogue viewers count views and interactions (section 7). Its fonts come from our own server. Personal data reaches us in three ways: the technical data every visit produces, what you send us through the contact form or by email, and the technical data a live 3D viewer needs on the pages that embed one.

3. Hosting and delivery

This website is hosted by ALL-INKL.COM – Neue Medien Münnich in a data centre in Germany. Our email inbox is with the same provider.

It is delivered through Cloudflare, a content delivery network (CDN); our contracting party is Cloudflare Germany GmbH, Munich. Your browser connects to Cloudflare, which passes the request on to our server, keeps copies of files close to you so pages load quickly, and filters out attacks and abusive traffic. To do this, Cloudflare processes your IP address and the technical data of each request listed in section 4.

Both providers process this data on our behalf and only to deliver and protect the website. Legal basis: our legitimate interest in delivering the website securely and reliably (Art. 6(1)⁠(f) GDPR).

4. Server log files

Each time a page or file is requested, the server records:

• the IP address of the requesting device;
• the date and time of the request;
• the page or file requested and the amount of data transferred;
• the response status, for example whether the file was found;
• the page you came from, if your browser sends it;
• the browser and operating system, as your browser reports them.

We use this data only to deliver the website, to find and fix errors, and to detect and defend against attacks. We do not use it to build profiles of visitors. Legal basis: Art. 6(1)⁠(f) GDPR, our legitimate interest in a secure and working website.

5. Fonts, cookies and tracking

Fonts. The typefaces on this website are served from our own server. Your browser makes no request to Google or any other font provider.

Cookies and browser storage. This website sets no cookies of its own and stores nothing in your browser’s local storage. Cloudflare, which delivers the website (section 3), may set short-lived cookies that are strictly necessary to protect it, for example the __cf_bm cookie, which helps tell visitors from automated traffic and expires after 30 minutes of inactivity. They are not used for tracking or advertising and need no consent (§ 165(3) TKG 2021). Legal basis: our legitimate interest in a secure website (Art. 6(1)⁠(f) GDPR).

Usage statistics. To see how the website is used in aggregate, we use Cloudflare Web Analytics, a service of Cloudflare, which already delivers the website (section 3). A small script, loaded from Cloudflare, reports each page view with the page address, the page you came from, your browser, operating system and country, and loading times. It sets no cookies, stores nothing in your browser and creates no identifier that would recognise you on a later visit or on other websites. We see only totals, never individual visitors. Legal basis: our legitimate interest in understanding how the website is used and keeping it fast (Art. 6(1)⁠(f) GDPR).

Advertising and tracking. We use no advertising or social media tracking: no tracking pixels, no tag managers, no session recording.

Links to other services. Links to LinkedIn, to Google Maps on the contact page and to the ARkid Catalogue log-in are plain links. Nothing is sent to these services until you click one; from then on, the privacy notice of the service you open applies.

6. Contact form and email

When you write to us through the contact form, we process:

• your name, company and work email address;
• who you are, as you choose it in the form (a brand, a retailer, a distributor / trade agent, press / industry analyst, other);
• your message;
• the topic of your enquiry and, if you came from a pricing plan, the plan you asked about, where the link you followed carries them, and the address of the page you sent it from.

All of these fields are needed to answer you; without them we cannot process the enquiry. Your message reaches our inbox by email, together with the time of sending, your IP address and your browser’s identification, which help us recognise misuse. You receive a confirmation email with a copy of your message. If you write to us by email directly, we process the data in your email in the same way.

We use this data to answer your enquiry and to follow it up. Where your enquiry concerns a contract with us, or steps before one, the legal basis is Art. 6(1)⁠(b) GDPR; otherwise it is our legitimate interest in answering the enquiries we receive (Art. 6(1)⁠(f) GDPR).

If you ask to be added to our status notification list (see the status page), we use your name, company and email address to send you notices of incidents and maintenance windows until you ask us to remove you, which you can do at any time at hello@arkid.app. Legal basis: Art. 6(1)⁠(b) GDPR where you use ARkid Catalogue under a contract with us, otherwise Art. 6(1)⁠(f) GDPR.

Where we use a customer relationship management (CRM) system, the enquiry is also passed to it, so that the right person can follow it up. The CRM provider processes the data on our behalf.

Spam protection

The form contains a field that people do not see; if it is filled in, we treat the message as spam. A signed time stamp in the form shows whether it was sent implausibly fast or after it expired; it holds no personal data. To limit the number of messages from one connection, the server keeps a short record of submission times per connection. The record is filed under a keyed hash of your IP address: the address itself is not stored, and without our secret key the hash cannot be traced back to it (pseudonymisation). Records older than ten minutes are no longer used and are deleted the next time someone opens the contact page or sends a form. Legal basis: our legitimate interest in keeping the form free of abuse (Art. 6(1)⁠(f) GDPR).

7. Embedded 3D viewers

Some pages show live 3D and AR viewers from ARkid Catalogue, our own platform at catalogue.arkid.app. A viewer loads only when you scroll close to it. Your browser then requests it from catalogue.arkid.app, which receives the same technical data as any web server (see section 4) and delivers the 3D model. ARkid Catalogue is hosted in the EU, in Germany. Legal basis: our legitimate interest in showing our products interactively (Art. 6(1)⁠(f) GDPR).

Catalogue also counts views and interactions per product for its engagement statistics, as it does on every site that embeds its viewers. Legal basis: our legitimate interest in knowing how our viewers are used (Art. 6(1)⁠(f) GDPR).

If you start AR on a phone or tablet, your browser or device may ask for permission to use the camera. You decide whether to allow it.

The viewers on other companies’ websites (a retailer’s or brand’s product page) have their own notice: privacy notice for ARkid viewers.

8. Recipients and transfers

We share personal data only with the service providers named in this notice, and only as far as the purpose described requires: ALL-INKL.COM – Neue Medien Münnich (hosting, sending the form emails and our email inbox, Germany), Cloudflare Germany GmbH (delivery and protection of the website, usage statistics, Munich) and, where we use one, our CRM provider. Beyond that, we pass data on only where the law requires us to. We do not sell personal data.

Cloudflare may process data outside the EU. Where Cloudflare processes data in the USA, the transfer is based on the EU–US Data Privacy Framework (Art. 45 GDPR).

We make no automated decisions about you and do no profiling.

9. How long we keep data

• Server log files: for a short period, for security and error analysis, and then deleted. Data needed to investigate a specific incident is kept until the incident is resolved.
• Rate-limit records: no longer used after ten minutes and deleted the next time someone opens the contact page or sends a form.
• Status notification list: until you ask to be removed.
• Enquiries: as long as we need them to deal with your enquiry and follow it up. Where an enquiry leads to a contract, we keep the correspondence for as long as commercial and tax law require (in Austria, generally seven years).

10. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• have processing restricted (Art. 18);
• receive your data in a structured, machine-readable format (Art. 20);
• object to processing based on our legitimate interests (Art. 21);
• withdraw consent at any time, with effect for the future, where processing is based on consent (Art. 7(3)).

To exercise any of these rights, write to hello@arkid.app. We reply within one month.

11. Right to lodge a complaint

If you believe that our processing of your personal data breaches data protection law, you can lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at. You can also turn to the authority in the EU member state where you live or work, or where the alleged breach took place.

12. Changes to this notice

We update this notice when the website or the services it uses change. The version published here applies. Last updated: October 2026.

Company details are in the imprint; the rules for using this website are in the terms of use.