Legal

Privacy policy

Controller

The controller for data processing on this website is:

Maximilian Hofmeister
Altenberg 11
2130 Lanzendorf
Austria
max@arco.aljoma.at

A data protection officer is not required by law and none has been appointed.

This website

This website is deliberately built to collect as little as possible. It loads no content from third-party servers, uses no analytics or tracking services, and embeds no fonts through an external network (CDN). The fonts it uses are stored locally on this website's own server. While you look at the page, no data flows to third parties.

Server log files

When you open this website, the hosting provider automatically records data transmitted by your browser and stores it in what are known as server log files. These are:

• the IP address of the accessing device,
• the date and time of access,
• the page or file requested,
• the previously visited page (referrer), where transmitted,
• the browser and operating system used.

This processing is technically necessary in order to deliver the website, keep it running stably and securely, and prevent misuse. The legal basis is the legitimate interest in secure and functioning operation under Art. 6(1)(f) GDPR. The log files are deleted automatically after 30 days at the latest.

This website is operated technically at HOSTINGER operations, UAB, Švitrigailos str. 34, LT-03230 Vilnius, Lithuania. Hostinger processes the data as a processor, acting solely on instructions and on the basis of a data processing agreement. The server location for this website is within the European Union. As part of its own operations, Hostinger may also transfer data to third countries such as the United States; this takes place on the basis of the European Commission's standard contractual clauses.

Cookies and local storage

This website uses no methods for recognising visitors and sets exactly one cookie, and only when you switch the language: arco.lang with the code de or en, valid for one year, for this domain only. The server reads it when you open the homepage so it can take you straight to the language you chose. It contains no identifier, allows no recognition of you, and is not analysed. It is required for the function you chose and therefore needs no consent (Section 165(3) of the Austrian Telecommunications Act, TKG 2021). You can delete it at any time through the website data in your browser settings. As long as you don't switch, there is no cookie; the homepage then follows the language your browser sends with every request (Accept-Language). A cookie banner is not necessary.

Contact by email

If you write me an email, I process the data you provide, that is your email address, your name where given, and the content of your message, in order to answer your enquiry. The legal basis is my legitimate interest in replying under Art. 6(1)(f) GDPR, and Art. 6(1)(b) GDPR where a contract is being initiated. I keep this data only as long as it is needed to deal with the matter and delete it afterwards, unless statutory retention periods require otherwise.

The ARCO app

This privacy policy covers the website. The ARCO app itself processes your recordings solely on your device. There is no user account, no cloud and no access to the microphone. Your videos do not leave your device. Purchase and delivery of the app run through Apple's App Store. Apple processes the data arising there under its own responsibility and in line with Apple's privacy policy.

Redeeming codes in the app

When you redeem a code for extra free swings in the app, the app sends that code to our server (arco.aljoma.at) to check whether it has already been used. Each code can be redeemed only once. All that is stored is the code's random identifier and the time; no user account, no device identifier and nothing about you as a person. As with any server request, your IP address is processed briefly for this call to prevent abuse through mass requests, and is held only in hashed, non-reversible form. The legal basis is the performance of the agreement the code represents (Art. 6(1)(b) GDPR) and our legitimate interest in preventing multiple redemptions (Art. 6(1)(f) GDPR). A code cannot be redeemed without this check.

Linked services

This website contains links to external services, such as the App Store, Instagram and LinkedIn. These are plain links. Data is transmitted to the provider in question only once you click such a link. That provider is then responsible for the processing. Please consult its privacy policy about how it handles your data.

Your rights

Under the GDPR you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21). To exercise any of these rights, an informal message to the address above is enough.

If you believe that the processing of your data breaches data protection law, you have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority, Barichgasse 40 to 42, 1030 Vienna, www.dsb.gv.at.

As of September 2026

Governing version

This page exists in German and in English. The German version is the legally governing one. The English translation is provided for convenience only.

Back to the home page