1. Controller
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
- Company
- PebbleByte GmbH
- Address
- Mittelgasse 4/13, 1060 Wien, Austria
- Phone
- +43 676 59 40 027
2. Example websites
This website presents Meine-Praxis-Website, PebbleByte's website service, and shows example websites for medical practices. The practices, doctors, reviews and contact details on the example websites are fictional. The practice phone numbers and email addresses shown (e.g. addresses ending in “.example”) cannot be reached. Please do not send any health data through this website. There are no forms, no appointment booking and no user accounts.
3. Hosting and delivery via Cloudflare
This website runs on and is delivered via Cloudflare Workers. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. On every request, Cloudflare processes technically necessary data on our behalf:
- IP address
- date and time of access
- requested address (URL) and HTTP status code
- referrer (previously visited page), if your browser sends it
- browser, operating system and language settings (user agent, Accept-Language)
- amount of data transferred
The purpose is to deliver the website, show it in your preferred language, keep it running reliably and protect it against abuse and attacks (e.g. DDoS). The legal basis is our legitimate interest in a secure and functional website (Art. 6(1)(f) GDPR).
Cloudflare acts as our processor under a data processing agreement (Art. 28 GDPR). Data may be transferred to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework; transfers are based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46(2)(c) GDPR).
We do not use this data to analyse user behaviour and do not create profiles. Log data available to us for troubleshooting is deleted automatically after no more than 7 days. More information: https://www.cloudflare.com/privacypolicy/
4. Cookies, analytics and fonts
We do not use cookies, analytics or tracking tools, or advertising services. To protect against automated attacks, Cloudflare may set a technically necessary security cookie (e.g. “__cf_bm”, lifetime 30 minutes). It is strictly necessary for secure operation and therefore permitted without consent (§ 165(3) Austrian Telecommunications Act 2021, Art. 6(1)(f) GDPR).
Fonts and images are served directly from our server. No connection to Google Fonts or other third parties is made when you open a page.
5. Map (OpenFreeMap)
The practice page can show an interactive map. The map is only loaded once you explicitly click “Load map”. Only then does your browser request map data from OpenFreeMap (https://openfreemap.org), which transmits your IP address and the technical data listed above to the operator of that service.
The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) Austrian Telecommunications Act 2021), which you give by clicking. Your consent is not stored – the next time you open the page, the map again only loads after a click. You can withdraw your consent for the future at any time by reloading the page.
6. Links to other websites
This website contains links to external services, e.g. the Google Maps route planner or review platforms. No data is transmitted to these providers unless you click such a link. From then on, the provider's own privacy policy applies.
7. Contact by email or phone
If you contact us by email (office@pebblebyte.com) or phone, we process the data you provide – such as your name, email address, phone number, and the content and time of your enquiry – in order to handle your request and reply to you.
The legal basis is the performance of pre-contractual measures or a contract (Art. 6(1)(b) GDPR) where your enquiry aims at this, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We do not pass the data on to third parties without your consent; our email provider processes it solely as a processor on our behalf.
We delete your enquiry once it has been fully dealt with and no further correspondence is expected, usually no later than 6 months afterwards. If the enquiry leads to a contract, we keep business-relevant correspondence for the statutory retention period (7 years under § 132 Austrian Federal Fiscal Code and § 212 Austrian Commercial Code).
Please note that emails may be transmitted unencrypted. Do not send us sensitive data by email, in particular no health data.
8. Your rights
You have the following rights regarding your personal data:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on legitimate interests (Art. 21 GDPR)
- withdrawal of consent with effect for the future (Art. 7(3) GDPR)
To exercise them, please contact office@pebblebyte.com. If you believe that the processing of your data violates data protection law, you can lodge a complaint with a supervisory authority (Art. 77 GDPR). In Austria, this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, https://www.dsb.gv.at
9. Automated decisions
No automated decision-making, including profiling (Art. 22 GDPR), takes place.
Last updated: November 2026