Last updated: 2025 · Roter Panda, sole trader (Einzelunternehmen).
Privacy Policy
GDPR · Last updated: 2025
1. Controller
Hanzhang Xu · Diabelligasse 1A/3/1 · 1130 Vienna, Austria
Email: hello@roter-panda.com
Email: hello@roter-panda.com
2. Data we process
Email contact: When you contact us by email, we process your name, email address, and message content. Purpose: responding to your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).
Server logs: Our hosting provider (Netlify) automatically records IP address, timestamp, and browser identifier on each page request. Purpose: operating and securing the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
Server logs: Our hosting provider (Netlify) automatically records IP address, timestamp, and browser identifier on each page request. Purpose: operating and securing the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
3. Processors
Netlify, Inc. (44 Montgomery St, San Francisco, CA 94104, USA): website hosting and static file delivery. A Data Processing Agreement (DPA) is in place with Netlify; data transfers to the USA are made under Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): email service (Google Workspace / Gmail) for incoming messages to hello@roter-panda.com. A Data Processing Agreement is in place with Google; transfers to third countries are made under Standard Contractual Clauses.
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): email service (Google Workspace / Gmail) for incoming messages to hello@roter-panda.com. A Data Processing Agreement is in place with Google; transfers to third countries are made under Standard Contractual Clauses.
4. Cookies and tracking
This website uses no cookies, no analytics tools, and no tracking. No user profiles are created. No cookie banner is required.
5. Retention periods
Email inquiries are retained for as long as necessary to process them, typically up to 12 months after last contact. Inquiries that lead to a business relationship may be retained longer in line with statutory retention obligations (up to 7 years). Server logs are deleted by Netlify after 30 days.
6. Your rights (GDPR Art. 15–21)
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Direct requests to: hello@roter-panda.com.
7. Right to lodge a complaint
You have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna, Austria
dsb.gv.at · dsb@dsb.gv.at
Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna, Austria
dsb.gv.at · dsb@dsb.gv.at