Privacy Policy

1. Controller

The party responsible for data processing on this website is:

PANDORA NOX

Email: business.pandoranox@gmail.com
Website: https://pandoranox.com/

2. General Information on Data Processing

We attach great importance to the protection of your personal data and its confidential treatment. The processing of your data takes place in accordance with the legal provisions of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Telecommunications Act 2021 (TKG 2021).

We follow the principles of data minimization and purpose limitation. This means that we only collect the data that is necessary for the respective purpose and only store it for as long as is necessary to fulfill these purposes.

3. Server Log Files

Every time you access our website, information is automatically recorded in so-called server log files. This data includes:

  • IP address
  • Date and time of access
  • Requested page/file
  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing computer

The processing of this data is based on Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in ensuring a smooth connection setup for the website as well as system security and stability.

4. Contact and Contact Form

If you send us inquiries via email or a contact form, your details, including the contact details you provided, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. The processed data includes:

  • Name
  • Email address
  • Telephone number (if provided)
  • Content of the message

The processing of this data is based on Art. 6 Para. 1 lit. b GDPR for the performance of a contract or pre-contractual measures, as well as on Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in processing your request. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.

5. Cookies and Consent Management

Our website uses cookies to improve user-friendliness and provide certain functions. Cookies are small text files that are stored on your end device. We distinguish between technically necessary cookies, which are required for the operation of the website, and cookies requiring consent, which are used for analysis and marketing purposes.

The legal basis for the use of technically necessary cookies is Art. 6 Para. 1 lit. f GDPR. For all other cookies, we obtain your consent in accordance with Art. 6 Para. 1 lit. a GDPR. According to § 165 Para. 3 TKG 2021, your consent is required before cookies that are not technically necessary can be set.

You can revoke your consent at any time by adjusting the cookie settings in your browser or by using the consent management tool on our website.

6. Cookie and Services Table

Service/Cookie Provider Purpose Category Legal Basis Storage Duration
Lightbox pandoranox.com Display of images Technically necessary Art. 6 Para. 1 lit. f GDPR Session
X / Twitter (Social Media Link) pandoranox.com Link to Social Media External Media Art. 6 Para. 1 lit. a GDPR Until revoked
Apache Webserver pandoranox.com Provision of the website Technically necessary Art. 6 Para. 1 lit. f GDPR Session

Please note that the use of external services may result in data being transmitted to third parties. Your consent is required before these services are activated.

7. Social Media Links

Our website contains links to social networks such as Twitter. These links are recognizable as such and do not transmit any personal data to the operators of these networks simply by visiting our website. Only by clicking on such a link do you leave our website, and data may be transmitted to the respective provider. Further information on data processing by these providers can be found in their respective privacy policies.

8. Recipients and Processors

We only pass on your personal data to third parties if this is necessary within the framework of contract processing, if we are legally obliged to do so, or if you have previously given your consent. Recipients include, in particular, IT service providers who assist us in providing our website. We have concluded corresponding data processing agreements with these service providers in accordance with Art. 28 GDPR.

9. Transfer to Third Countries

Your personal data will only be transferred to third countries if this is necessary to fulfill our contractual obligations, is required by law, or if you have given us your consent. When transferring data to third countries, we ensure that appropriate safeguards, such as the standard contractual clauses of the European Commission, are in place.

10. Storage Duration

We only store your personal data for as long as is necessary to fulfill the purposes for which it was collected or as required by law. Contact inquiries are deleted as soon as they are no longer necessary. Contract data is stored in accordance with statutory retention periods.

11. Your Rights

You have the right to:

  • Information (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Revocation of given consent (Art. 7 Para. 3 GDPR)
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at

12. Data Security

We use technical and organizational security measures to protect your data against manipulation, loss, destruction, or unauthorized access. Our security measures are continuously improved in line with technological developments.

The transmission of your data is encrypted using SSL/TLS to ensure secure data transfer.

13. Data Protection Officer

We have not appointed a legally mandated Data Protection Officer. If you have any questions regarding data protection law, please contact us directly using the contact details provided above.

14. Automated Decision-Making and Profiling

We do not use automated decision-making processes within the meaning of Art. 22 GDPR that would have legal or similarly significant effects on you. No profiling takes place.

15. Obligation to Provide Data

The provision of your personal data is generally voluntary. Where mandatory fields exist in forms, they are marked as such. Without this data, the respective service cannot be provided.

16. Right to Lodge a Complaint with the Data Protection Authority

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority.

Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at

17. SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption.

18. Changes to this Privacy Policy

Status: June 30, 2026. We reserve the right to adapt this privacy policy in the event of changes to the legal situation or to our services. Please inform yourself regularly about the current status of our privacy policy.