This privacy policy informs you about the processing of personal data on this website.
Controller
EARNST.io, Ernst-Lukas Banwinkler, Seefeldgasse 1, 3462 Absdorf, Austria. E-Mail: [email protected]
Hosting and server logs
This website runs on a dedicated server operated by Hetzner Online GmbH (Germany); a data-processing agreement is in place. Each access processes connection data (IP address, date, time, requested page, referrer, user agent) in log files — solely to keep the site running, for fraud and bot defence and for error analysis; deleted after 30 days at the latest. Legal basis: Art. 6 (1)(f) GDPR.
Content Delivery Network (Cloudflare)
We use DNS, proxy and security services by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare routes traffic between your browser and our server and processes technically necessary connection data. Cloudflare is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 (1)(f) GDPR.
Measurement without consent (anonymous and cookieless)
Without your consent we measure page views cookieless, without accessing your device (§ 25 (2) TDDDG / § 165 (3) TKG). So that visits from the same device belong together, our server derives an encrypted, irreversible identifier from connection data (IP address and browser string; HMAC-SHA-256 with a key that never leaves our server) and stores it there; nothing is stored on your device. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in audience measurement and in attributing enquiries to their origin). Without an enquiry, visit data is pseudonymised after 90 days without activity: device and session identifiers are replaced by random values, IP address, click IDs and e-mail addresses are removed and the browser string is cut down to the device class. After that the data can only be used for statistical analysis; it allows no conclusion about a person and can no longer be attributed to anyone. For data protection this is de facto erasure. The data stays on our own server; no third-party analytics is embedded.
Extended measurement with consent ("Statistics" category)
With your consent we set two first-party cookies to link returning visits: _earnst_vid (lifetime 2 years) and _earnst_sid (lifetime 30 minutes). Legal basis: Art. 6 (1)(a) GDPR; revoke anytime via "Cookie settings" (below) — the cookies are then deleted. Your consent decision is stored locally in your browser (timestamp, version, receipt id) and logged without personal reference.
Marketing ("Marketing" category)
No third-party marketing services (e.g. Google or Meta tags) are currently embedded on this website. Should we transmit conversion data to advertising platforms in the future, this will happen exclusively after your consent to the "Marketing" category, using encrypted (hashed) identifiers, and will be documented here first.
Legitimate interest
Individual processing operations, such as fraud and bot defence or measuring conversions within an existing customer relationship, are based on Art. 6 (1)(f) GDPR. You can object at any time (opt-out): [email protected].
Forms and enquiries
Form submissions (e.g. intro call, waiting list, "the bet", case study) are processed to handle your enquiry in our own CRM on our own server (Art. 6 (1)(b) GDPR). For each enquiry we store the advertising origin (e.g. campaign, referrer) where measurable. Transactional emails (e.g. confirmations) are sent via Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA); Resend processes the email address and message content solely for delivery and is certified under the EU-US Data Privacy Framework. Enquiry data is deleted once no longer required and no statutory retention applies.
AI assistant (chat)
The AI chat on this website runs on Claude by Anthropic (Anthropic PBC, 500 Howard St, San Francisco, CA 94105, USA). Your chat input is transmitted to Anthropic to generate the reply; the transfer to the USA is based on appropriate safeguards (EU standard contractual clauses). For quality assurance and to improve the assistant, we store chat exchanges (question and answer) in our own analytics on our own server (Art. 6 (1)(f) GDPR); they are subject to the same deletion periods as other visit data (anonymous, 90 days) and are not used for profiling. If you share contact details in the chat for an enquiry, we process them like form data (Art. 6 (1)(b) GDPR). Please do not enter sensitive data in the chat.
"Earnestly yours" (email sign-up)
For the irregular "Earnestly yours" emails we use double opt-in: the sign-up only becomes active after confirmation via the link we send. Legal basis: Art. 6 (1)(a) GDPR; unsubscribe anytime via the link in every email. Delivery via Resend (see above).
SSL/TLS encryption
This website uses TLS encryption (https) throughout.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with the Austrian data protection authority (dsb.gv.at). Requests to [email protected].