Privacy Policy

1. Data controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

For further contact details, see our legal notice.

2. General information on data processing

We only process personal data to the extent necessary to provide a functional website and our content and services. Processing regularly takes place only with the consent of the data subject (Art. 6(1)(a) GDPR), for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), or on the basis of a legitimate interest (Art. 6(1)(f) GDPR).

Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations (e.g. under the Austrian Commercial Code or Federal Fiscal Code) apply.

3. Hosting & server log files

This website is hosted by easyname GmbH (Vienna, Austria). When you access the website, the hosting provider automatically collects information in so-called server log files transmitted by your browser (e.g. IP address, date and time of the request, browser type, operating system used). This data is used to ensure the technically error-free provision of the website and is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR).

4. Fonts

This website uses fonts that are stored on our own web server and loaded directly from there. No connection to servers of Google or other providers is established, and no data is transferred to third parties.

5. Contact form & contacting us by email

If you use the contact form on this website or contact us by email, the data you submit (e.g. name, email address, company, message content) is processed via a server-side script on our own web hosting and forwarded by email to our inbox in order to process your enquiry. In addition, the details are stored in a protected database on our own web hosting so that we can process and follow up on your enquiry; only DC AGENCY has access. We delete the data as soon as it is no longer required for processing and no statutory retention obligations apply. Messages that our spam filter classifies as suspicious are deleted after 30 days at the latest. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry).

6. Influencer application & creator area

Through the application form for our influencer pool, we collect your name, email address, social media handle, follower count, content focus, and any description you voluntarily provide. This data is processed exclusively for the purpose of inclusion in our influencer pool and the allocation of suitable collaboration enquiries (Art. 6(1)(b) GDPR, pre-contractual measure).

Submission takes place via a server-side script on our own web hosting, which forwards your details to us by email and stores them in a protected database on this web hosting (creator profile in our influencer pool). There we also record when we contacted you about which assignment. Only DC AGENCY has access. If we contacted you on our own initiative (e.g. via a public social media profile), we store your name, contact details and publicly stated channel data for the same purpose on the basis of our legitimate interest (Art. 6(1)(f) GDPR); you can object to this at any time. Your data is deleted as soon as it is no longer required for the stated purposes, and at the latest 12 months after your last contact with us.

Creator area. At dc-agency.at/creator you can create a user account (from the age of 18) – directly, after applying or at our invitation. There we additionally process: your password (only as an encrypted hash), your date of birth (to verify the minimum age), phone number, postal address, profile photo, your description, price expectations, VAT number and whether you use the small business exemption, the framework agreement you confirmed including the time of confirmation, your responses to job offers, your messages to us, content and invoices you upload, and links to published posts. The purpose is to review your profile, to conclude and perform the framework agreement and individual jobs (Art. 6(1)(b) GDPR) and to comply with statutory retention obligations for invoices (Art. 6(1)(c) GDPR). We only pass your name and content on to clients as part of a job you have accepted.

For signing in we set a technically necessary cookie that is only used in the creator area – until you sign out, or for at most 30 days if you choose “stay signed in”. Your browser also locally remembers the email address you last used to sign in. Uploaded content is stored in an area of our web hosting that is not publicly accessible and is deleted 90 days after the job has been completed. You can delete your account and profile yourself at any time in the creator area; we retain invoices in accordance with statutory requirements (section 132 of the Austrian Federal Fiscal Code: seven years). If your profile is deleted (for example at your request or when the retention period expires) and you had confirmed the framework agreement or accepted jobs, we keep the following, restricted and separate from all other data: the confirmed framework agreement and your acceptances (each with the time and a shortened identifier derived from your IP address), the job terms with fee and status, and your name, email address, postal address and VAT number for identification. We use these records solely to be able to prove or defend claims arising from our collaboration (Art. 6(1)(f) and Art. 17(3)(e) GDPR) and delete them seven years after the end of the year in which the profile was deleted.

7. Newsletter

If you subscribe to our newsletter, we process your email address and the language of the website on which you subscribed in order to send you the newsletter. The legal basis is your consent (Art. 6(1)(a) GDPR).

Subscription uses the double opt-in procedure: you receive an email with a confirmation link, and you are only added once you have confirmed. As proof of your consent we store the time and place of subscription (e.g. “website footer”), the time of confirmation and a shortened identifier derived from your IP address that cannot be traced back to you. Unconfirmed subscriptions are deleted after 30 days.

The newsletter is sent via our own mailbox at easyname GmbH (Vienna, Austria); no external newsletter service is used. The subscriber list is stored in the protected database on our web hosting.

To improve our newsletter, we measure whether it was opened and which links were clicked. For this purpose, each email contains an invisible image and links that redirect via our server. For each newsletter we only store the time of the first opening and the first click, assigned to your address. Your consent covers this as well. If you do not want this, you can disable the loading of images in your email program or unsubscribe.

You can unsubscribe at any time – via the link at the end of every email or by sending us a message. You will then no longer receive newsletters. We only keep your address together with proof of consent and unsubscription in order to be able to demonstrate that we acted lawfully (Art. 6(1)(c) and (f) GDPR); on request we delete it completely.

8. Traffic measurement & cookies

To understand which content is being read, we count page views using our own solution running on our server. No external service is used — in particular no Google Analytics — and no cookies are set. That's why this website has no cookie banner. The only exception is the creator area: after you sign in, we set a technically necessary cookie there (see section 6).

For each visit we record: the time and page visited, the referring website if any (e.g. "Google" or "Instagram"), the language set in your browser (from which a rough region is derived), the device type (mobile, tablet, computer), and an identifier formed from your IP address and browser signature.

The identifier is a shortened hash value that changes daily and cannot be traced back to a person. Your IP address is never stored. Recognising a visitor beyond the same day is therefore technically impossible. Raw data is automatically deleted after 14 months, and the data never leaves our server. The legal basis is our legitimate interest in privacy-conscious performance measurement (Art. 6(1)(f) GDPR).

If your browser sends the "Do Not Track" or "Global Privacy Control" signal, no count takes place. Both can be enabled in the settings of common browsers.

9. Your rights

With regard to your personal data, you generally have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw any consent given at any time, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, an informal message to hallo@dc-agency.at is sufficient.

10. Complaints to the supervisory authority

You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data violates the GDPR:

11. Changes to this privacy policy

We will update this privacy policy as our services, the tools we use, or the underlying legal situation change. The version current at the time of your visit shall apply.