oneshot.buzz

1. Legal Notice (Impressum)

Information according to § 5 Austrian E-Commerce Act (ECG), § 14 Austrian Commercial Code (UGB), § 25 Austrian Media Act (MedienG), and the Service Information Duties Regulation (DL-InfoV):

EU Online Dispute Resolution

According to the Regulation on Online Dispute Resolution in Consumer Affairs (ODR Regulation), we inform you that consumers have the opportunity to submit complaints to the European Commission's Online Dispute Resolution platform. This platform can be accessed at the following URL: https://ec.europa.eu/consumers/odr/

Any complaints can also be sent directly to the email address provided above.

2. Privacy Policy

The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of legal provisions (GDPR, Austrian Data Protection Act - DSG, Telecommunications Act 2021 - TKG 2021). In this Privacy Policy, we inform you about the most important aspects of data processing within the framework of the web application "oneshot.buzz" and the mobile application "SkipToTrip".

1. Data Controller

The controller responsible for processing your personal data is:
Michael Pachner-Doppler
Lienfeldergasse 74/10, 1160 Vienna
Austria
Email: skiptotrip@proton.me

2. Data Processing within the Web Application "oneshot.buzz"

• Provision of the Website (Server Log Files): When accessing this web application, the browser used on your end device automatically transmits information to the server of our hosting service provider. We use the service provider Vercel Inc., 440 Bond Street, Austin, TX 78704, USA for hosting our web application. This information includes the IP address of your end device, date and time of access, and the browser used. This data is processed temporarily to ensure a smooth connection setup and system security. The legal basis for this processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR. We have concluded a Data Processing Addendum (DPA) with Vercel; data transfer to the USA is legally secured via the EU-US Data Privacy Framework (DPF).
• No User Registration / No Login: This web application offers its services without the creation of user accounts, registrations, or logins. No personal user profiles are stored on our servers.
• No Advertising Tracking and Cookies: Since we do not use external advertising networks or marketing tracking pixels, no tracking cookies requiring consent are placed on your end device. A cookie consent banner is therefore not required.
• Special Note on Using the Gemini API ("Bring Your Own Key"): The web application provides a user interface for creating text and layout content for TikTok slides using Google's artificial intelligence (Gemini API). The Google Gemini API key you enter is saved exclusively locally in your web browser's storage (LocalStorage). Your API key and the data you enter (prompts) are never transmitted to or stored on our servers at any time. Communication to generate the content takes place encrypted (via HTTPS) directly from your browser to Google's application programming interfaces (API). For further processing by Google, the privacy policy of the Google Cloud Platform or the Google Gemini API applies.
• Payment Processing via Lemon Squeezy: For the sale of premium features or one-time unlocks, we use the external service provider Lemon Squeezy (Lemon Squeezy, LLC). Lemon Squeezy acts as a "Merchant of Record". This means that when you make a purchase, you enter into a contract directly with Lemon Squeezy. For the purpose of payment processing, Lemon Squeezy independently collects personal data (such as name, email address, billing address, and payment data). Following a successful purchase, we only receive an encrypted confirmation and your email address from Lemon Squeezy to unlock the premium features in your browser. We never have access to your credit card or bank details at any time. The legal basis for this processing is the performance of a contract pursuant to Art. 6(1)(b) GDPR. Further information can be found in Lemon Squeezy's privacy policy at: https://www.lemonsqueezy.com/privacy

3. Data Processing within the iOS App "SkipToTrip"

• Use of the Apple App Store: When downloading the mobile app, Apple processes personal data (such as your Apple ID and transaction data). We have no influence on this data processing; the data controller for this is Apple Inc.
• In-App Purchases and Subscription Management via RevenueCat: To manage and verify in-app purchases within the iOS app, we use the service provider RevenueCat (RevenueCat, Inc.). In this process, anonymized or pseudonymized transaction IDs and receipt data are transmitted from Apple to RevenueCat to verify the status of your unlocks. No direct real names or bank details are transmitted to RevenueCat or to us. The legal basis is the performance of a contract pursuant to Art. 6(1)(b) GDPR.

4. Your Rights as a Data Subject

You generally have the rights to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection (Art. 21 GDPR) regarding your data processed by us.

Note: Since we do not maintain user accounts, do not store IP addresses permanently, and do not possess API keys within the web application, we do not hold any data in the web area that we could assign to a specific person.

If you believe that the processing of your data violates data protection law or your data protection claims have been violated in any way, you can lodge a complaint with the competent supervisory authority. In Austria, this is the:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde - DSB)
Barichgasse 40-42
1030 Vienna
Email: dsb@dsb.gv.at