Early Access
Back to home

Privacy policy

Last updated: September 2026

This website is deliberately built to collect as little data as possible: there are no advertising cookies and no embedded third-party fonts. All files are served directly from our own server. We only use Google Analytics with your explicit consent (see section 6).

1. Controller

Name / company
Image Factory e.U.
Address
Kernjakstraße 29
9220 Velden am Wörthersee
Austria
Email
office@theimagefactory.at

2. Hosting

The website runs on a server provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland. Hetzner processes data solely on our behalf under a data processing agreement pursuant to Art. 28 GDPR. The server is located in a data centre in Germany.

3. Visiting the website and server logs

When you visit the website, our server processes technically necessary data:

  • a shortened IP address (the last segment of IPv4 addresses and the last 80 bits of IPv6 addresses are removed),
  • date and time of access,
  • the requested address, HTTP status code and amount of data transferred,
  • referrer URL, browser and operating system (user agent).

This serves the secure and stable operation of the website, including defending against attacks and analysing errors. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. In case of errors, the full IP address may appear in the server's error log. All logs are deleted automatically after 14 days.

4. Early access waiting list

When you join the early access list, we store:

  • your email address,
  • the language of the website (German or English),
  • the time of sign-up, the source ("website") and the status of your sign-up,
  • the version of the consent text you agreed to.

We use this data exclusively to inform you about early access and the launch of KYNORIS. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future, for example by emailing office@theimagefactory.at. Your data will then be deleted.

As a plausibility check, our server uses a DNS lookup to verify that the domain of your email address can receive email; only the domain part is used. To prevent abuse, your IP address is briefly processed in memory during sign-up to limit the number of requests. It is not stored.

The data is not shared with third parties and not used for third-party advertising. We keep it until you withdraw your consent or the early access phase ends. Daily backups are overwritten after 14 days.

5. Cookies and local storage

Without your consent, this website sets only strictly necessary cookies. If you switch the language yourself, we remember that choice in a cookie named kynoris_lang and in your browser's local storage (value "de" or "en", valid for 12 months), so the website opens in your language on your next visit. We also store your decision on the cookie banner (see section 6) the same way, in a cookie named kynoris_consent and in local storage, so we don't have to ask again on every visit. Both are strictly necessary for the service you requested (Section 165(3) of the Austrian Telecommunications Act 2021) and are not used for tracking.

6. Analytics (Google Analytics)

Only if you explicitly consent via the cookie banner do we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). No connection to Google is made before you consent. Google Analytics processes, among other things, pages visited, an approximate location (derived from your IP address, which Google does not store permanently), device, browser and time spent on the site. For this, Google sets the cookies _ga and _ga_* for up to 14 months.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 165(3) of the Austrian Telecommunications Act 2021. You can change your decision at any time via the "Cookie settings" link in the footer; if you withdraw consent, we delete the analytics cookies from your browser and no further data is sent to Google.

Some processing takes place in the US. Google is certified under the EU-U.S. Data Privacy Framework, which provides for an adequate level of data protection. For more information, and to object to data collection by Google Analytics generally, see Google's privacy policy or the browser add-on to disable Google Analytics.

7. Your rights

You have the right at any time to:

  • access the data stored about you (Art. 15 GDPR),
  • rectification (Art. 16 GDPR) and erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing (Art. 21 GDPR),
  • withdraw consent you have given (Art. 7(3) GDPR).

To exercise these rights, contact office@theimagefactory.at. You also have the right to lodge a complaint with a supervisory authority — in Austria, the Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40–42, 1030 Wien, dsb.gv.at.

8. Security

Connections to this website are encrypted via TLS. The waiting list is stored exclusively on our server and is not publicly accessible.