DECISIONCLOUD · UPDATED 29 SEPTEMBER 2026
Privacy Policy.
Your data, from a website visit to an API access request.
Who is responsible?
Timo Zürner
Gerichtsstraße 13
9300 St. Veit an der Glan
Austria
service@xynatec.com
Website hosting
Cloudflare, Inc., USA, delivers this website. Requests involve technical information such as your IP address, request time, URL, browser and connection details. This is necessary to deliver the site, troubleshoot errors and protect it from attacks. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in reliable and secure operation.
We do not maintain an additional access log for website delivery. Cloudflare processes technical data as needed for delivery, security, troubleshooting and investigating security incidents, under its retention criteria and contractual terms. Website analytics is described separately below.
Requesting an API key
Access buttons open an external form provided by Typeform, S.L., Spain. There is no embedded Typeform form on this site. Your browser connects to Typeform when you follow the link.
The form requires your email address. Your intended API use is optional. We use these details to review your request, answer related questions and provide access. Providing this information is voluntary, but we cannot deliver a key without an email address.
The legal basis is Article 6(1)(b) GDPR for steps you request before entering a service relationship and for providing the service. If you contact us on behalf of a business, Article 6(1)(f) GDPR applies to our legitimate interest in handling business enquiries.
Form responses are used only for API access and related communication, not for newsletters or advertising.
Typeform processes responses for the form operator. Its form page also processes technical usage data and may save progress while you complete the form. See Typeform's privacy policy for its own processing.
Recipients and international transfers
Cloudflare, Typeform and their subprocessors support the website and form. The operator uses your details to handle API access. Email providers are involved in delivering your API key and related messages. Your details are not shared for advertising.
Processing outside the European Economic Area, including in the United States, is possible. Cloudflare and Typeform's processing terms provide for international transfers, including EU Standard Contractual Clauses for relevant transfers. These terms are linked below. You can request further information and a copy of applicable safeguards at service@xynatec.com. We do not promise that all processing takes place exclusively within the EU.
How long are requests kept?
Responses are stored in Typeform. We have not configured a fixed automatic deletion period. Retention depends on whether the information is still needed to review your request or provide and manage your API access. Completed or declined requests should be deleted once they are no longer needed for that purpose. Contact details necessary for an active API account may be retained for the duration of that account. Deletion also needs to cover any copies of the request.
Legal retention duties and storage needed to establish, exercise or defend legal claims may require longer retention in specific cases.
Website analytics
We use Plausible through analytics.xynatec.com to understand and improve website use. The script records pageviews, page URLs, referral sources, browser and device information, engagement time and scroll depth. The supplied configuration also measures outbound link clicks and file downloads.
Connections technically involve your IP address and browser identifier. Plausible's standard software is designed to work without tracking cookies or persistent cross-device visitor identifiers. The script does not create analytics cookies or tracking identifiers in local storage. We do not configure custom events containing form answers, email addresses or API keys.
Where personal data is processed, we rely on Article 6(1)(f) GDPR and our legitimate interest in limited statistical measurement and improvement of the site. Recipients are the operator and hosting providers used for the analytics service. Statistics are retained while needed to evaluate website use; no fixed automatic deletion schedule for this service is stated here.
The Plausible data policy describes the standard software. Its cloud-hosting location is not a promise about the hosting location of our analytics domain. Contact us at service@xynatec.com with questions or an objection.
Fonts and cookies
Fonts are served from this website; there are no Google Fonts requests. We do not set advertising cookies. Hosting security features and the external Typeform page are separate from this site's own code.
Your rights
Subject to the GDPR, you can request access, correction, deletion, restriction and portability of your personal data. You may withdraw consent at any time where processing relies on consent. This does not affect processing that was lawful before withdrawal.
You can object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time. Contact us using the details above. You can also complain to the Austrian Data Protection Authority or another competent supervisory authority.
Scope
This policy covers the information website and API access requests. Processing of later API inputs, including any personal data in them, needs separate information before that service is used.