Policy for Privacy - Blackout-Detector

Privacy Policy

Last updated: 2025-12-17

This Privacy Policy explains how ERM-Consult (Eisenkirchner Rainer Management Consulting) (“we”, “us”, “our”) processes personal data when you use our website [website domain] and our online alarming services.

We comply with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and applicable telecommunications and e-commerce laws.

1. Controller

The controller responsible for data processing is:

ERM-Consult (Eisenkirchner Rainer Management Consulting)

Enzersfelderstraße 36

2203 Großebersdorf
Austria

Email: info@blackout-detector.cocm

2. Scope of this Privacy Policy

This Privacy Policy applies to:

Our public website
User accounts
Subscription-based online alarming services
Customer communication and billing

It does not apply to external websites linked from our site.

3. Categories of Personal Data

Depending on how you use our Website and services, we may process the following categories of personal data:

Identification data (name, company name)
Contact data (email address, phone number)
Account credentials
Billing and payment information
Subscription and service usage data
Technical data (IP address, date/time of access, browser type)
Communication data (support requests, emails)

4. Purposes and Legal Bases of Processing

We process personal data for the following purposes:

4.1 Website operation and security

Ensuring technical functionality
Preventing misuse and fraud

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

4.2 Contract performance

Account creation
Provision of alarming services
Subscription management
Customer support
Billing and invoicing

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

4.3 Legal obligations

Accounting and tax compliance
Retention obligations under Austrian law

Legal basis: Art. 6(1)(c) GDPR (legal obligation)

4.4 Communication

Responding to inquiries
Service-related notifications

Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR

5. No Tracking, Advertising or Profiling

We do not use:

Google Analytics or similar analytics tools
Advertising or marketing cookies
Social media tracking pixels
Automated profiling or decision-making

Your data is not used for targeted advertising.

6. Hosting and Processors (Subbly)

Our webshop and subscription management are operated using Subbly Ltd., which acts as a data processor on our behalf.

Processor:
Subbly Ltd.
United Kingdom
https://subbly.co

Subbly processes personal data solely to provide:

E-commerce functionality
Payment processing
Subscription management
Technical hosting and security

Processing is governed by a Data Processing Agreement (DPA) in accordance with Art. 28 GDPR.

7. International Data Transfers

Personal data may be processed within the European Union and, where necessary, in third countries (e.g. the United Kingdom).

Where data is transferred outside the EU/EEA, appropriate safeguards are in place, such as:

Adequacy decisions by the European Commission, or
Standard Contractual Clauses (SCCs)

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.

Account data: for the duration of the contractual relationship
Billing data: according to statutory retention periods (typically 7 years under Austrian law)
Communication data: until the request is resolved, unless legal retention applies

9. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

Encrypted data transmission (TLS)
Access controls
Role-based authorization
Regular security updates

10. Your Rights as a Data Subject

You have the following rights under the GDPR:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)

You may withdraw consent at any time, where processing is based on consent.

11. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the supervisory authority:

Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria
https://www.dsb.gv.at

12. Changes to this Privacy Policy

We reserve the right to update this Privacy Policy to reflect legal, technical, or operational changes. The current version is always available on this Website.

13. Contact

If you have questions regarding data protection, please contact:

(see contact details above)