Privacy Policy

reg.at – a service provided by dawox GmbH
Effective: September 2026

1. Controller

dawox GmbH
Bahnhofstraße 9
6824 Schlins, Austria
Email: [email protected]

2. General Information on Data Processing

We process your personal data in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). Personal data means any information relating to an identified or identifiable natural person.

3. Access Data (Server Logs)

When you visit our website, the following data is automatically processed:
- IP address
- Date and time of access
- Browser type and version
- Operating system
- Referrer URL
- Requested page/file
- HTTP status code

This processing is necessary for the technical delivery of the website and is based on Art. 6(1)(f) GDPR (legitimate interest).

4. Customer Account and Contract Fulfillment

To register a customer account and fulfill contracts, we process the following data:
- Name, address
- Email address, phone number
- Payment and billing data
- Contract and usage data (e.g., domains, hosting plans)

Legal basis: Art. 6(1)(b) GDPR (performance of a contract)

5. Domain Registration

To register domain names, we transmit your contact data to the respective domain registries such as nic.at, DENIC, or ICANN, usually via our technical registrar, sourceWAY GmbH, Adalbertsteinweg 97, 52070 Aachen, Germany.

When registering a domain with the extension .at, .co.at, or .or.at, your data will be transferred to nic.at GmbH, Jakob-Haringer-Straße 8/V, 5020 Salzburg, Austria. In this context, you expressly agree to the registration guidelines and the general terms and conditions of nic.at GmbH. This data transfer is necessary for the fulfillment of the domain registration contract and is based on Art. 6(1)(b) GDPR.

6. Payment Processing via Stripe

We use the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland to process payments (e.g., credit card, EPS, PayPal).

The following data may be transmitted to Stripe:
- Name, email address
- Payment information
- Invoice amount and currency
- IP address

Stripe processes this data partly under its own responsibility (Art. 6(1)(b) and (f) GDPR). More information: https://stripe.com/at/privacy

7. Web Analytics with Rybbit

We use the open source analytics tool Rybbit to analyze the usage of our website in a privacy-friendly manner. Rybbit is not used as a third-party service. It is operated on our behalf by sourceWAY GmbH, Adalbertsteinweg 97, 52070 Aachen, Germany, on their own infrastructure at track.sourceway.de. A data processing agreement according to Art. 28 GDPR is in place with this processor. The data is not transmitted to the maker of the software, to any other third party, or to any country outside the European Union.

In the configuration we use, Rybbit operates without cookies. No information is stored on your device or read from it, which means that no consent under section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) is required. Rybbit does not follow your browsing across websites and does not create personal user profiles.

The following data is recorded for each page view:
- Page accessed, page title, and time spent
- Entry and exit page as well as the referrer (previously visited page)
- Campaign parameters (UTM parameters), if present
- Browser type and version, operating system, device type, screen resolution
- Approximate location at country, region, and city level, derived from the IP address
- Date and time of the visit

Your IP address is processed transiently only, in order to determine the approximate location and to generate a session identifier. It is not stored. The session identifier is derived from a hash of the IP address and the browser identifier (user agent), using a random value that changes every day. Any inference back to the IP address is therefore ruled out, and no recognition takes place beyond the change of day.

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the statistical evaluation of the use of our website and in its analysis, optimization, and technically sound operation. The analytics data is deleted after 14 months. You may object to this processing at any time under Art. 21(1) GDPR by contacting [email protected], or prevent the collection by stopping the analytics script from loading in your browser, for example by using a script or tracking blocker.

More info: https://rybbit.io/

8. Contact

If you contact us via email or contact form, we will process your information to handle your inquiry.
Legal basis: Art. 6(1)(b) or (f) GDPR

9. Processors and Hosting

Our website is hosted by an external service provider. A data processing agreement according to Art. 28 GDPR is in place with this provider.

10. Retention Period

We only store personal data as long as necessary for the respective purpose or as required by statutory retention periods (e.g., 7 years under § 132 BAO).

11. Your Rights

You have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)

To exercise your rights, please contact [email protected].
You also have the right to lodge a complaint with the Austrian Data Protection Authority: https://www.dsb.gv.at

12. Changes to this Privacy Policy

We reserve the right to update this privacy policy in accordance with legal requirements or changes in our services. The current version is available at reg.at/privacy.