Privacy Policy

This notice explains how personal data is processed on this website, pursuant to Articles 13 and 14 GDPR and the Austrian Data Protection Act (DSG).

1. Controller

• Erxia Tang
• Große Neugasse 12, 1040 Wien, Österreich / Austria
• hello@tangora.top

A data protection officer is not required under Art. 37 GDPR for an operation of this size. Please direct all data protection matters to the contact above.

2. Data processed when you visit

This website is hosted on Cloudflare. For the purpose of delivering the site and protecting it against attacks, technical access data (IP address, time of request, requested URL, user agent, referrer) is processed transiently.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning website)
• Retention: handled by Cloudflare under its own logging policy. No separate copy is stored or analysed by me.

3. Cookies and local storage

This website uses Cloudflare Web Analytics to count visits. The service sets no cookies and collects no personally identifiable data, so no consent is required. Beyond that, no tracking or advertising cookies are used.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interest in knowing whether the site is reachable and used)

Only two local-storage entries are used, both strictly necessary and therefore exempt from consent under §165 TKG 2021: tg-notice-ack (whether you have dismissed the first-visit notice) and tg-motion (whether you have turned animation off). These stay in your browser and are never sent to me or any third party.

As for cookies: Cloudflare's security protection sets a cookie named cf_clearance when a request looks suspicious, recording that the visit has passed a human-verification check. It is strictly necessary for security purposes, exempt from consent under §165 TKG 2021, and is not used for tracking, analytics or advertising. No other cookies are set by this website.

4. Contact form

When you use the contact form, your name, email address and message are forwarded to my mailbox in order to answer your enquiry. The data is not written to any database, no server-side copy is retained, and your IP address is not logged.

• Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(b) GDPR (pre-contractual measures)
• Retention: deleted once your enquiry has been dealt with, subject to statutory commercial and tax retention obligations.
• Withdrawal: you may withdraw consent at any time via the email address above. This does not affect the lawfulness of processing carried out beforehand.

5. Website check-up (paid)

When you buy a website check-up, payment is completed on Stripe's payment page. Stripe processes your name, email address, payment details and the web address you enter, and passes the payment result and these details to me so that I can perform the contract. I never see your full card number.

For the check, I pass the web address, the business name and the city to Google (map and page-speed services) and OpenAI (web search) to look them up. This is information your business already makes public.

The report is stored on Cloudflare and made available to you through a randomly generated link; it is deleted automatically 30 days after it is sent. The link is sent by email (email service: Resend).

• Legal basis: Art. 6(1)(b) GDPR (performance of a contract); for payment and invoice records also Art. 6(1)(c) GDPR (statutory retention).
• Retention: the report is deleted automatically after 30 days; payment and invoice records are kept for seven years under § 132 of the Austrian Federal Fiscal Code (BAO).

6. Processors and third-country transfers

Transfers to the USA take place on the basis of the European Commission's Standard Contractual Clauses and the respective data processing agreements.

7. Your rights

Under the GDPR you have the following rights:

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)

To exercise these rights, contact hello@tangora.top. You also have the right to lodge a complaint with the supervisory authority: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien.

8. Automated decision-making

No automated individual decision-making or profiling within the meaning of Art. 22 GDPR takes place on this website.