Privacy Policy

1. Controller

Michaela Pollak
PHÖNIX
St. Pöltnerstraße 24
3203 Rabenstein an der Pielach
Austria

Email: michaela@phoenix-mp.at

2. Accessing and providing the website

When you access the website, technically necessary connection data may be processed. This may include your IP address, date and time of access, the page requested, data volume transferred, browser type, operating system and referring page. This processing is necessary to provide the website securely and reliably and to detect technical attacks.

The website is currently provided through ChatGPT Sites. For users in the European Economic Area, the provider is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland. OpenAI processes data required for hosting, maintenance, security and support as a processor and may engage contractually bound sub-processors.

The legal basis is our legitimate interest in a secure and reliable website under Article 6(1)(f) GDPR. Technical log data is retained in accordance with the hosting provider's rules only for as long as required for service provision, security, abuse prevention, error analysis and legal obligations. Further information is available in the ChatGPT Sites Data Processing Addendum and the sub-processor list.

3. Contact by email

If you contact us by email, the data you provide — in particular your name, email address, the content of your message and any other voluntary information — is processed in order to respond to your enquiry.

Business email addresses are provided by easyname GmbH, Fernkorngasse 10, 1100 Vienna, Austria. The general address kontakt@phoenix-mp.at is an alias that forwards messages to the business mailbox.

The legal basis is Article 6(1)(b) GDPR where your enquiry concerns steps prior to entering into a contract; otherwise, it is our legitimate interest in responding to your enquiry under Article 6(1)(f) GDPR. Data is deleted once the enquiry has been concluded, unless statutory retention obligations or legitimate reasons require longer storage.

4. Cookies, analytics and external media

This website currently uses no proprietary analytics or advertising services, contact form, newsletter or embedded social media content. PHÖNIX does not use any cookies that are not technically necessary.

To protect the website, the hosting and security provider Cloudflare may set the technically necessary cookie __cf_bm. It helps identify and prevent automated or abusive access, contains a session-generated identifier and generally expires after approximately 30 minutes. The legal basis is the legitimate interest in website security under Article 6(1)(f) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021 for technically necessary storage.

If analytics, advertising or other consent-based services are introduced in future, this privacy policy will be updated before use and any required consent will be obtained.

5. Recipients and international transfers

Personal data is shared only where necessary for the purposes described above, where legally required or where you have consented. Recipients include OpenAI Ireland Limited and its sub-processors for website hosting, as well as easyname GmbH for email services.

Where OpenAI or its sub-processors process data outside the European Economic Area, the provider states that transfers are based on a European Commission adequacy decision or appropriate safeguards, in particular the Standard Contractual Clauses under Article 46 GDPR.

6. Your rights

Subject to the applicable legal requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. Any consent granted may be withdrawn at any time with effect for the future.

To exercise your rights, please contact michaela@phoenix-mp.at.

You also have the right to lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, Austria, email: dsb@dsb.gv.at.

7. Updates to this policy

This privacy policy will be updated if the website, the services used or legal requirements change. A further review will take place before the website is connected to its final hosting environment and before the official launch in 2027.