Privacy policy

No data protection officer has been appointed, as the conditions of Art. 37 GDPR are not met. For any privacy question, an informal email to the address above is sufficient.

Controller

Timon Faux

Address

Brunhildengasse 28, 3424 Zeiselmauer, Austria

Email

info@replai.at

Only data required for the respective purpose is processed. Data is neither sold nor passed on to third parties for advertising purposes. All service providers process data solely on our instructions under a data processing agreement pursuant to Art. 28 GDPR.

When the website is accessed, your browser transmits technically necessary data, which the hosting provider processes in server log files.

• IP address of the requesting device
• date and time of access
• address requested and volume of data transferred
• browser type, browser version and operating system
• where applicable, the previously visited page (referrer)

The purpose is the technical provision, stability and security of the website. The legal basis is our legitimate interest in secure and uninterrupted operation pursuant to Art. 6 (1) (f) GDPR. This data is not merged with other data sources.

When you join the waitlist, your email address is stored. A message containing a confirmation link is then sent. Consent is only deemed given once you click that link (double opt-in).

The following is stored:

• email address
• time of consent and version of the consent text (record-keeping obligation under Art. 7 (1) GDPR)
• time of confirmation
• origin of the sign-up and, where applicable, campaign parameters and the referring page
• two randomly generated identifiers for the survey and for unsubscribing

The legal basis is consent pursuant to Art. 6 (1) (a) GDPR. Consent may be withdrawn at any time with effect for the future — via the unsubscribe link in every email or informally by message to info@replai.at. The lawfulness of processing carried out until withdrawal remains unaffected.

If confirmation does not take place within the validity period of the link, the entry is deleted.

After signing up you may answer a few questions about your rental situation. Participation is voluntary and can be stopped at any time; your waitlist entry is unaffected.

We process the answer options selected, any free-text entries made and the completion status. Answers are linked to the waitlist entry via a randomly generated identifier.

The legal basis is consent pursuant to Art. 6 (1) (a) GDPR. The purpose is prioritising product development.

You can send us messages via the contact form and the idea box on the home page. We process your name (if provided), email address, subject and the content of the message.

The legal basis is Art. 6 (1) (b) GDPR where the enquiry is aimed at concluding a contract, otherwise our legitimate interest in responding to enquiries pursuant to Art. 6 (1) (f) GDPR.

To prevent automated bulk sign-ups, the IP address is briefly evaluated in memory when forms are submitted and compared against a frequency limit. The IP address is not stored permanently for this purpose.

The legal basis is our legitimate interest in protection against abusive use pursuant to Art. 6 (1) (f) GDPR.

We use Plausible Analytics, operated by Plausible Insights OÜ, Estonia, to evaluate page views. Plausible sets no cookies and builds no cross-device profiles. No personal data is stored; evaluation is aggregated only. Processing takes place on servers within the European Union.

The legal basis is our legitimate interest in a data-minimising evaluation of website use pursuant to Art. 6 (1) (f) GDPR. As no device information is stored or read, no consent is required.

This website sets no cookies for advertising or analytics purposes. Only one technically necessary cookie is set, which stores the selected language:

Name

NEXT_LOCALE

Purpose

Stores the selected language version (German or English)

Duration

1 year

As this cookie is strictly necessary for a function expressly requested by the user, no consent is required (§ 165 (3) Austrian Telecommunications Act 2021). A cookie banner is therefore not used.

The following processors are involved. Agreements pursuant to Art. 28 GDPR are in place with all of them.

Processing takes place in data centres within the European Union. Vercel, Supabase and Resend are companies based in the United States. Access from a third country — for example during maintenance or support — can therefore not be entirely ruled out.

In that case the transfer is based on the European Commission’s standard contractual clauses pursuant to Art. 46 (2) (c) GDPR or on certification under the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR.

As a data subject you have the following rights against the controller:

• access to the data processed (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

An informal message to info@replai.at is sufficient. Requests are handled free of charge and within one month.

If you have concerns about the processing, you have the right to lodge a complaint with the supervisory authority:

Authority

Austrian Data Protection Authority

Address

Barichgasse 40–42, 1030 Vienna, Austria

Email

dsb@dsb.gv.at

Web

dsb.gv.at

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place on this website.

This policy will be adapted as soon as processing changes — for example when the closed testing phase starts. The version published on this page at the time applies.