Privacy Policy
We collect as little personal data as possible, and only use what we collect for the purposes set out below. This policy explains what we process, the legal basis for it, how long we keep it, and the rights you have under the GDPR.
Responsible party
The data controller within the meaning of the GDPR (Regulation [EU] 2016/679) is:
Emely GmbHMariahilferstrasse 101/2/22
1060 Vienna · Austria
Email: fabian@emely.io
2.1 General principles
We process personal data under the GDPR and the Austrian Data Protection Act (DSG). Processing only occurs where a lawful basis under Article 6(1)(a)–(f) GDPR exists. We do not use automated individual decision-making within the meaning of Article 22 GDPR, and we do not engage in profiling. Data is generally collected directly from you.
2.2 Website operation
When you visit this website, our hosting provider automatically processes technical data necessary to deliver the page:
- IP address
- Date and time of the request
- Requested page or resource
- HTTP(S) status code
- Referrer URL
- Browser type and version
- Operating system
Legal basis & purpose: Article 6(1)(f) GDPR — legitimate interest in delivering the website, ensuring IT security (integrity, confidentiality, availability), and diagnosing technical issues.
Retention: Server log files are deleted within seven days at the latest, unless further retention is required to investigate a suspected attack.
2.3 Analytics — Plausible
We use Plausible Analytics to understand how this site is used. Plausible is privacy-friendly by design: it does not use cookies, does not store personal data, does not perform cross-site tracking, and does not generate persistent identifiers or fingerprints. Aggregated, fully anonymous metrics are collected — we cannot identify individual visitors.
Legal basis & purpose: Article 6(1)(f) GDPR — legitimate interest in understanding aggregate usage to improve the site.
Processor: Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Servers are located in the European Union. Plausible's privacy policy: plausible.io/privacy · Data policy: plausible.io/data-policy.
2.4 Waitlist signup
When you join the waitlist, we store the email address you submit. We use it for a single purpose: to notify you when emely. launches and, where helpful, to share milestones related to that launch. We do not sell, rent, or share your address with third parties, and we do not use it for unrelated marketing.
Legal basis: Article 6(1)(a) GDPR — your consent, given by submitting the form.
Retention: Until launch communication is complete, or until you withdraw consent — whichever comes first.
Withdrawal: You can withdraw your consent at any time by writing to fabian@emely.io. Prior lawful processing remains valid.
2.5 Contact by email
If you write to us directly, we process the contents of your message and your contact details to handle and respond to your request. Legal basis: Article 6(1)(b) GDPR (pre-contractual steps or contract performance) where applicable, otherwise Article 6(1)(f) GDPR — legitimate interest in answering inquiries.
Unless stated otherwise above, we keep personal data only as long as necessary for the stated purpose or as required by law.
- Business correspondence, contracts, accounting records: until the end of the business relationship or, where statutory retention applies, at least 7 years per § 212(1) UGB and § 132(1) BAO.
- Claims and legal titles: 3 to 30 years, as required for assertion or defence of legal claims.
- General inquiries: up to 3 years after the matter is closed, unless legal obligations or claim defence require longer retention.
- Server logs: deleted within 7 days at the latest.
- Waitlist email: until launch communication is complete or until consent is withdrawn.
Where the statutory conditions are met, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): obtain confirmation of whether we process your data and a copy of it.
- Right to rectification (Art. 16 GDPR): have inaccurate or incomplete data corrected.
- Right to erasure (Art. 17 GDPR): have your data deleted where the conditions of Art. 17 apply.
- Right to restriction (Art. 18 GDPR): limit further processing of your data.
- Right to data portability (Art. 20 GDPR): receive data you provided in a structured, machine-readable format, where processing is based on consent or contract and carried out by automated means.
- Right to object (Art. 21 GDPR): object to processing based on legitimate interests (Art. 6(1)(f) GDPR) on grounds relating to your particular situation. Objections to direct marketing apply without restriction.
- Right to withdraw consent: withdraw consent at any time by contacting us. Prior lawful processing remains valid.
4.1 Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is:
Österreichische DatenschutzbehördeBarichgasse 40–42
1030 Vienna · Austria
www.dsb.gv.at
We'd appreciate the chance to address any concerns directly first — please reach out to fabian@emely.io before filing a formal complaint.