Privacy Policy

Controller

Adrian Steinbach — contact: support@tag-tower.com

What we collect

• Instagram handle you submit at checkout, shown on public tower pages.
• Payment data processed by Stripe (email, payment method details). We do not store full card numbers.
• Purchase records such as block numbers, claim IDs, amounts, and timestamps in our database.
• Technical logs from our host (Cloudflare), for example IP address, request time, and error data needed to run the service.

Legal bases (GDPR Art. 6)

• Contract — to provide blocks you purchase and related support.
• Legitimate interests — to operate, secure, and moderate the public tower, and to prevent abuse.
• Legal obligation — where Austrian or EU law requires retention or disclosure (for example tax or accounting rules).

Sharing and processors

We use Stripe (payments) and Cloudflare (hosting and database). Public tower pages are visible to anyone. We do not sell your personal data. Where data is transferred outside the EEA, we rely on appropriate safeguards (such as Standard Contractual Clauses) offered by our processors.

Retention

Tower and purchase records are kept while the service runs so block numbers stay stable, and longer where Austrian law requires (for example bookkeeping). You can ask us to hide or correct handles where our moderation rules allow.

Your rights

Under the GDPR and DSG you may have rights of access, rectification, erasure, restriction, objection, and data portability, and the right to withdraw consent where processing is consent-based. Contact us at the address above; we respond within the statutory periods (generally one month under GDPR Art. 12).

You may lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde): dsb.gv.at.