# Privacy notice

How Stratt Labs handles the limited personal data it processes under Regulation (EU) 2016/679 (GDPR) Article 13.

Effective: 2026-05-23. Last reviewed: 2026-06-09.

## Controller

Tibor Bödecs, e.U.

[Registered business address — to be inserted from FB-Auszug]
Vienna, Austria

Email: hey@strattlabs.com
Firmenbuch (FN): [FN-number — to be inserted]
UID: [ATU-number — to be inserted if registered]

## What we process, and why

Stratt Labs does not embed third-party analytics and does not place advertising cookies. The personal data processed is limited to contact correspondence, engagement records for active clients, and web-server access logs needed to operate and secure the site.

## Recipients and processors

Personal data is processed by Stratt Labs, the hosting provider configured with EU data-localization controls, the email provider under a DPA, and bookkeeping providers under confidentiality and DPA terms.

## Retention

Enquiry correspondence is kept up to 12 months after the last reply unless it becomes an engagement. Engagement records are kept for 7 years after the end of the engagement under § 132 BAO. Server access logs are retained for a maximum of 14 days.

## Rights

Under Articles 15–22 GDPR, you have the right to access, rectification, erasure, restriction, portability, objection, and withdrawal where processing relies on consent. Email hey@strattlabs.com to exercise those rights.

## Complaints

The competent supervisory authority is the Austrian Data Protection Authority: https://www.dsb.gv.at.

Draft fields for Firmenbuchnummer, UID, and registered business address must be filled before public launch.