Privacy Policy
Datenschutzerklärung gemäß DSGVO (EU) 2016/679
1. Data Controller
MoLo FlexKapG
Kopernikusgasse 4/4, 1060 Wien, Austria
FN 664826k, Handelsgericht Wien
Email: info@mo-lo.eu
MoLo FlexKapG is the controller responsible for the processing of your personal data as described in this privacy policy. If you have questions about data protection, you can reach us at any time at the contact details above.
2. Overview
We take the protection of your personal data seriously. This website is designed with a privacy-first approach. We use cookieless analytics by default and only load cookie-based tracking when you explicitly consent.
Cookieless by Default
Our primary analytics tool (Plausible) requires no cookies and collects no personal data.
EU Hosting
All data is hosted on Hetzner servers in Germany. Your data never leaves the European Union.
No Data Selling
We never sell, rent, or share your personal data with third parties for marketing purposes.
3. Hosting
This website is hosted on a virtual private server (VPS) provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner operates data centres exclusively within the European Union (Germany and Finland).
When you visit this website, the web server automatically logs technical connection data (so-called server log files). This includes your IP address, the pages accessed, date and time of access, browser type and version, and the referring URL. These logs are stored for security purposes (e.g. detecting attacks) and are automatically deleted after 14 days. The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in the security and stability of our web service).
4. Analytics
4.1 Plausible Analytics (cookieless, always active)
We use Plausible Analytics, a privacy-focused, open-source web analytics tool. Plausible is self-hosted on our own server within the EU.
Plausible does not use cookies, does not collect personal data, and does not track individual visitors across sessions or websites. All data is aggregated. No individual visitor profiles are created. Plausible is compliant with GDPR, CCPA, and PECR without requiring cookie consent.
Data collected by Plausible: page URL, referrer, browser type (general), operating system (general), device type, country (derived from IP, which is then discarded). No IP address is stored. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in understanding website usage patterns in aggregate).
4.2 Google Analytics 4 (consent-gated)
We use Google Analytics 4 (GA4), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, only when you explicitly consent to the use of analytics cookies. GA4 is loaded only after you click "Accept" on the cookie consent banner, in compliance with TKG 2021 §165 (Austrian Telecommunications Act).
If you consent, GA4 uses cookies to generate pseudonymised usage statistics. Google may transfer data to servers in the United States; however, Google relies on EU Standard Contractual Clauses (SCCs) and additional safeguards for such transfers. You can revoke your consent at any time by clearing your cookies or using the cookie consent banner.
The legal basis for processing through GA4 is Art. 6(1)(a) GDPR (your consent). Without your consent, GA4 will not be loaded and no data will be collected through it.
5. Cookies
This website does not set any cookies by default. Cookies are only placed if you actively consent to Google Analytics 4 via the cookie consent banner. Our primary analytics tool, Plausible, operates entirely without cookies.
If you consent to GA4, the following cookies may be set: _ga (used to distinguish users, expires after 2 years), _ga_<ID> (used to persist session state, expires after 2 years). You can manage or delete cookies through your browser settings at any time.
6. Contact Forms & Email
If you contact us by email (info@mo-lo.eu), we will process the personal data you provide (name, email address, message content) for the purpose of handling your inquiry. This data is stored only as long as necessary to process your request or as required by law. The legal basis is Art. 6(1)(b) GDPR (contract initiation) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
7. Third-Party Services
7.1 Google Fonts
This website uses Google Fonts, loaded from Google's CDN (fonts.googleapis.com / fonts.gstatic.com). When you visit a page, your browser connects to Google's servers to load font files. Google may receive your IP address in this process. Google Fonts are served from EU CDN nodes where available. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in consistent typography). For more information, see Google's privacy policy: policies.google.com/privacy.
8. Your Rights (DSGVO/GDPR)
Under the GDPR, you have the following rights regarding your personal data. To exercise any of these rights, contact us at info@mo-lo.eu.
Right of Access
You can request information about whether and which personal data we process about you (Art. 15 GDPR).
Right to Rectification
You can request the correction of inaccurate personal data (Art. 16 GDPR).
Right to Erasure
You can request the deletion of your personal data, provided there is no legal obligation to retain it (Art. 17 GDPR).
Right to Restriction
You can request the restriction of processing of your personal data under certain conditions (Art. 18 GDPR).
Right to Data Portability
You can request to receive your personal data in a structured, commonly used, machine-readable format (Art. 20 GDPR).
Right to Object
You can object to the processing of your personal data based on legitimate interests at any time (Art. 21 GDPR).
9. Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent authority for Austria is:
Österreichische Datenschutzbehörde (DSB)
Barichgasse 40-42, 1030 Wien
Telefon: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at
10. Changes to This Policy
We reserve the right to update this privacy policy to reflect changes in our data practices or legal requirements. The current version is always available on this page. We recommend reviewing this policy periodically.