Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

SNS Software Solutions GmbH i.G. (in formation)
Schrötlgasse 8a, 1220 Vienna, Austria
Email: office@sns-austria.com

2. Overview

We take the protection of your personal data seriously and process it only in accordance with statutory data protection regulations (GDPR, Austrian Data Protection Act / DSG) and this privacy policy. This website is an informational site; we collect as little personal data as possible.

3. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you visit the site, Vercel automatically processes technical connection data (see “Server log files” below) to deliver the website securely and reliably. This is based on our legitimate interest in a stable and secure online presence (Art. 6(1)(f) GDPR). We have concluded a data processing agreement (DPA) with Vercel, and transfers to the USA are safeguarded by the EU Standard Contractual Clauses.

4. Social Media Scheduling Tool (“the App”)

In addition to this website, SNS operates a social media scheduling and publishing tool (“the App”) on behalf of specific business clients, used to schedule, publish, and manage content across the client’s own social media accounts (including Facebook, Instagram, LinkedIn, YouTube, and TikTok).

4.1 Data we process on behalf of clients

When a client connects their social media accounts to the App, we process:

• Account identifiers and access tokens issued by the relevant platform (Facebook, Instagram, LinkedIn, YouTube, TikTok), used solely to publish content and retrieve engagement data on the client’s behalf.
• Content created, scheduled, and published by the client’s authorized users through the App.
• Engagement data returned by the connected platforms (e.g. comments, reactions, views, follower and post statistics).
• User account information for individuals with App access (name, email, role/permissions).

4.2 Purpose and legal basis

This data is processed solely to provide the scheduling, publishing, approval-workflow, and reporting functions the client has authorized, under a separate written agreement (including a Data Processing Agreement / AVV) with the client. SNS acts as processor on the client’s behalf; the client remains controller of their own social media account data. The legal basis is performance of that agreement (Art. 6(1)(b) GDPR) and our legitimate interest in providing the contracted service (Art. 6(1)(f) GDPR).

4.3 Storage and sub-processors

App data is stored and processed within the EU:

• Application data and database: Supabase (Frankfurt, Germany)
• Media storage: Cloudflare R2
• Application hosting: Vercel (see Section 3 for Vercel’s data handling)
• Job processing/queuing: Railway

Access tokens are stored encrypted, with access restricted to authorized SNS personnel and logged. We do not sell this data or use it for advertising, and we do not use it to train AI models.

4.4 Third-party platforms

Each connected platform (Meta/Facebook/Instagram, LinkedIn, Google/YouTube, TikTok) processes data under its own privacy policy and developer terms. Our use of data obtained through these platforms complies with each platform’s respective developer policies and terms of service.

4.5 Data retention and deletion

Client and account data is retained for the duration of the client agreement and deleted within 30 days of account disconnection or contract termination, except where retention is required by law. Clients may request deletion or disconnection at any time by contacting office@sns-austria.com.

5. Server log files

Our hosting provider automatically collects and stores information in server log files that your browser transmits to us. These may include:

• Anonymised / abbreviated IP address
• Date and time of the request
• Browser type and version
• Operating system
• Referrer URL

This data is not merged with other data sources and is used solely to ensure operation, security, and troubleshooting. The legal basis is Art. 6(1)(f) GDPR.

6. Analytics

We use Vercel Analytics, a privacy-friendly, cookieless analytics service provided by Vercel Inc. It measures aggregated, anonymous usage statistics (such as page views) without using cookies and without tracking or identifying individual visitors. No cross-site profiles are created. The legal basis is our legitimate interest in understanding and improving the use of our website (Art. 6(1)(f) GDPR).

7. Cookies

This website does not set tracking or advertising cookies. Only technically necessary storage required to display the site may be used. Because we do not use non-essential cookies, no cookie consent banner is required.

8. Contact (email & contact form)

If you contact us by email, the data you provide (your email address and the content of your message) is processed solely to handle your enquiry.

Our website also provides a contact form. When you submit it, we process the details you enter, namely your name, email address, optional phone number, the type of service you select, and your message, in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering a contract) or Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries).

Contact form submissions are delivered to our mailbox on our behalf by EmailJS (emailjs.com), acting as a processor. Where this involves a transfer of data outside the EU/EEA, it is safeguarded by appropriate measures such as the EU Standard Contractual Clauses.

This data is deleted once it is no longer required and no statutory retention obligations prevent deletion.

9. Data retention

We store personal data only for as long as necessary for the purposes described above or as required by statutory retention periods (e.g. under tax and commercial law). After that, the data is deleted.

10. Your rights

Under the GDPR you have the right to:

• access to your personal data (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)

To exercise any of these rights, contact us at office@sns-austria.com.

11. Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

12. Changes to this policy

We may update this privacy policy to reflect changes to our practices or for legal reasons. The current version is always available on this page.