1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
TSC Labs e.U. Peschekgasse 3b A-3100 St. Pölten, Austria Email: office@tsc-labs.eu
2. Collection and processing of personal data
We only collect personal data when you voluntarily provide it during a contact request or course registration (e.g. name and email address via the contact form). This data is used exclusively to process your request and to handle course enrolment.
When you visit this website, your browser transmits technically necessary data (IP address, browser type, pages accessed, timestamp) to our hosting infrastructure. This data is processed solely for operational and security purposes.
3. Legal basis
Processing of contact form data is based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures at your request).
Website analytics are processed on the basis of Art. 6(1)(f) GDPR (legitimate interest in understanding aggregate usage patterns to improve the website). No personally identifiable information is collected for this purpose.
4. Service providers and data processors
We use the following third-party service providers who may process data on our behalf. Each has been assessed as providing sufficient guarantees under GDPR Art. 28.
Brevo SAS Registered in France (EU). Used for transactional email delivery when you submit the contact form. Your name, email address, and message are transmitted to Brevo solely to deliver the notification email to us. Privacy policy: https://www.brevo.com/legal/privacypolicy/
Cloudflare, Inc. Registered in the United States. Used as our content delivery network, edge computing platform (Cloudflare Workers and Pages), and bot protection (Cloudflare Turnstile). Cloudflare processes IP addresses and connection metadata at the network edge. Data transfers to the US are covered by Standard Contractual Clauses (SCCs). Privacy policy: https://www.cloudflare.com/privacypolicy/
Umami Software, Inc. Registered in the United States. Used for privacy-friendly website analytics via Umami Cloud. Umami collects anonymised page view data (pages visited, referrer, browser type, OS, device category). Umami does not use cookies, does not collect IP addresses, and cannot identify individual visitors. Data is processed on servers located in Germany and/or the United States. No personal data is transferred. Privacy policy: https://umami.is/privacy
SimplyMeet.me / SimplyBook.me Operated by SimplyBook Ltd., registered in Cyprus (EU). Used for scheduling introductory calls when you click the booking link. SimplyMeet.me is ISO 27001 certified and hosts all data on European servers. A Data Processing Agreement is available at https://simplymeet.me/en/dpa. SimplyMeet.me processes your name, email address, and selected appointment time when you make a booking. Privacy policy: https://simplymeet.me/en/policy
5. Disclosure to third parties
We do not sell or otherwise pass your personal data to third parties beyond the processors listed in Section 4, unless we are legally required to do so.
6. Retention period
Your data is stored only for as long as necessary to fulfil the respective purpose, or as required by statutory retention periods.
7. Your rights
You have the right to:
- Access the data we hold about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
Please contact us at: hello@tsc-labs.eu
8. Right to lodge a complaint
You have the right to lodge a complaint with the competent data protection supervisory authority. In Austria, this is the Datenschutzbehörde (DSB): https://www.dsb.gv.at
9. Cookies and server logs
This website does not use tracking cookies or fingerprinting.
When you visit the site, technically necessary server logs (IP address, timestamp, page accessed) are processed by Cloudflare as our hosting provider for a maximum of 7 days for security and operational purposes.
When you submit the contact form, a Cloudflare Turnstile bot-protection widget is activated. Turnstile communicates with Cloudflare servers and analyses browser signals (user-agent, interaction patterns) to distinguish humans from bots. This process does not set cookies and does not track you across websites.
10. Analytics
This website uses Umami Cloud for aggregate, anonymised analytics. Umami does not use cookies, does not collect IP addresses, and cannot identify individual users. Only aggregate statistics (e.g. number of page views, referrer domain, device category) are recorded. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).