Privacy policy

Last updated: July 2026

This privacy policy explains how ApplePie creative agency OG (“we”, “us”) collects and uses personal data when you visit this website or contact us. We are committed to protecting your data in accordance with the EU General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this site is:

ApplePie creative agency OG
Wagramer Straße 110
1220 Wien, Österreich
Firmenbuchnummer: FN 681220 w
Email: alex@applepie.digital

2. What data we collect

Contact enquiries. When you use the contact form, we process the name, role and message you provide, so we can respond to your enquiry.
Server logs. Our hosting provider may automatically record technical data (IP address, browser type, date and time of request) for security and to keep the site running.

3. Why we process it (legal basis)

To answer and follow up on your enquiry — on the basis of your consent (Art. 6(1)(a) GDPR) and/or to take steps at your request prior to entering a contract (Art. 6(1)(b) GDPR).
To operate and secure the website — on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

4. Cookies & analytics

This site sets no cookies at all and uses no advertising or third-party tracking. It loads its own fonts and scripts and does not build visitor profiles.

For visitor statistics we run GoatCounter, open-source analytics hosted on our own server in Germany. No data is sent to any third party.

Each page view records exactly: the page address, the referring page, the browser, the operating system, the screen width, the country and the browser language. Your IP address is not stored — there is no field for it in the database. To tell one visit from another within a single day, your IP address, browser and a rotating secret are combined into a one-way hash; the hash cannot be reversed to recover the IP. We additionally record two anonymous events: submitting the contact form and clicking an email link.

Legal basis: legitimate interest under Art. 6(1)(f) GDPR in understanding how the site is used. No cookies are set, so no consent banner is required. To opt out, block /count.js — any content blocker will do, and the site works exactly the same without it.

5. Sharing & hosting

We do not sell your data. This site is hosted by World4You Internet Services GmbH, Wolfgang-Pauli-Straße 2 / BT3, 4020 Linz, Austria (FN 232485s), acting as a processor on our behalf. The server runs on infrastructure provided by IONOS SE, Germany — an approved sub-processor of World4You — in a data centre in Berlin. All processing takes place within the EU. Data may be disclosed only where required by law.

6. Data security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures are reviewed and updated as needed to maintain the integrity and confidentiality of your data.

7. Retention

We keep enquiry data only as long as needed to handle your request and any resulting business relationship, after which it is deleted, unless a legal retention period applies.

8. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise these rights, email alex@applepie.digital. You also have the right to lodge a complaint with a supervisory authority.

9. Changes

We may update this policy from time to time. The “last updated” date above reflects the current version.