Privacy Policy

Last updated: 18.08.2026

This Privacy Policy explains how SQUER Solutions GmbH ("we", "us", "our") collects, uses, and protects personal data when you visit the CodeCrafts website, register for the CodeCrafts event, subscribe to our newsletter, or otherwise interact with us in connection with CodeCrafts. This policy is provided in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

For information required under §25 of the Austrian Media Act and general company details, please see our Legal Notice.

2. What Data We Collect and Why

2.1 Website Hosting and Content Management (HubSpot)

Our website is hosted and operated using HubSpot, a customer relationship management and marketing platform provided by HubSpot, Inc. (USA) / HubSpot Ireland Limited (EU). When you visit our website, HubSpot automatically processes technical data such as your IP address, browser type, device information, pages visited, and time spent on the site, typically via cookies or similar technologies.

Purpose: Operating and displaying the website; ensuring functionality and security
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for essential technical operation; consent (Art. 6(1)(a) GDPR) for non-essential cookies, where applicable via our cookie consent banner.
Recipient: HubSpot, Inc. / HubSpot Ireland Limited, acting as our data processor.

2.2 Analytics (HubSpot Analytics)

We use HubSpot's built-in analytics tools to understand how visitors use our website (e.g. page views, traffic sources, interaction patterns). This data is used in aggregated or pseudonymized form wherever possible.

Purpose: Understanding and improving website usage and content.
Legal basis: Consent (Art. 6(1)(a) GDPR), obtained via our cookie consent mechanism, unless data is processed in a strictly anonymized/aggregated manner.
Storage: For details on HubSpot's own data retention, please refer to HubSpot's privacy policy at https://legal.hubspot.com/privacy-policy.

2.3 Contact Form (HubSpot Forms)

If you contact us via a form on our website, the data you submit (e.g. name, email address, message content, and any other information you provide) is processed via HubSpot's form tool.

Purpose: Responding to your inquiry.
Legal basis: Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), or legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).
Recipient: HubSpot, Inc. / HubSpot Ireland Limited, acting as our data processor.
Retention: We retain contact form submissions only as long as necessary to process your inquiry, unless a longer retention period is required for legal reasons.

2.4 Newsletter (Mailchimp)

If you subscribe to our newsletter, we collect your email address and, where provided, your name. This data is processed using Mailchimp, a newsletter and marketing platform provided by The Rocket Science Group LLC (USA), part of Intuit Inc.

Purpose: Sending you newsletters and updates about CodeCrafts.
Legal basis: Consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time, e.g. via the unsubscribe link included in every newsletter email, without affecting the lawfulness of processing carried out before withdrawal.
Recipient: The Rocket Science Group LLC (Mailchimp), acting as our data processor.
Retention: Your data is stored until you unsubscribe or object to further processing.
International transfer: As Mailchimp is a US-based provider, data transferred to the US is safeguarded through appropriate mechanisms such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses, where applicable. Further details are available in Mailchimp's privacy policy at https://mailchimp.com/legal/privacy/.

2.5 Event Registration and Ticketing (Tito)

If you register for the CodeCrafts conference, your registration is processed through Tito, a third-party event registration and ticketing platform. Depending on the registration form, this may include your name, email address, company/employer, dietary requirements, and payment-related information (processed directly by Tito or its integrated payment providers).

Purpose: Processing your event registration, managing attendee lists, and facilitating entry to the event.
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
Recipient: Tito, acting as our data processor (or, in some cases, as an independent controller for its own platform operations — please refer to Tito's privacy policy for details at https://ti.to/privacy).
Retention: Registration data is retained for the duration necessary to organize the event and fulfil any statutory record-keeping obligations (e.g. accounting/tax law), after which it is deleted or anonymized.

2.6 Photo, Film, and Sound Recordings at the Event

Please note that photo, film, and sound recordings are made during the CodeCrafts event. These recordings may depict persons present at the event; the selection of persons captured is random. Resulting images and recordings may be published on our website, our social media channels, and in our promotional materials.

By entering the event premises, attendees consent to this free publication as described above, without the need for a separate express declaration. If you do not agree to being recorded, please notify the responsible photographer or camera operator immediately on-site. If you object to a specific publication of an image depicting you, please contact us immediately by email or phone, quoting the exact file name or description of the image in question. In such cases, the image will be removed within a reasonable period and will not be published further.

3. Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR) — to obtain information about the personal data we hold about you.
Right to rectification (Art. 16 GDPR) — to have inaccurate data corrected.
Right to erasure (Art. 17 GDPR) — to request deletion of your data, subject to legal retention obligations.
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Art. 20 GDPR).
Right to object (Art. 21 GDPR) — in particular to processing based on legitimate interest or for direct marketing purposes.
Right to withdraw consent at any time, with effect for the future (Art. 7(3) GDPR).
Right to lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, https://www.dsb.gv.at.

To exercise any of these rights, please contact us at office@squer.at.

4. International Data Transfers

Some of the third-party providers we use (HubSpot, Mailchimp, Tito) may process data outside the European Economic Area, including in the United States. Where this occurs, we rely on appropriate safeguards recognized under the GDPR, such as the European Commission's Standard Contractual Clauses and/or the respective provider's certification under the EU-U.S. Data Privacy Framework, where applicable. You can request further information on the specific safeguards in place by contacting us.