Last updated: 16 October 2026
This notice explains how Lightport processes personal data when you visit this website, contact us, book an appointment or receive our newsletter. Additional product-specific information is available in the SwissFeed / SwizzFeed privacy notice (German).
Who is responsible
Lightport – DI (FH) Stefan Spindler
Ritter von Mertensstraße 16
5111 Bürmoos, Austria
Email: office@lightporthq.com
Phone: +43 676 612 60 14
Further details: legal notice.
Hosting and website security
Our hosting provider is Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4–6, 32339 Espelkamp, Germany. Website requests involve processing technical connection data, including IP address, date and time, requested URL, transferred data, response status, browser, operating system and, where supplied, referring page. The purposes are website delivery, troubleshooting and protection against misuse. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a secure, functioning website.
According to Mittwald’s published information, IP addresses in web access logs are shortened and those logs are retained for 60 days; error logs are deleted after seven days. Application security records and necessary backups are separate. Information about specific incidents may be needed longer to investigate them or establish legal claims. See Mittwald’s data protection information.
We use Wordfence by Defiant, Inc., USA, to protect WordPress. Security functions process IP addresses, requested URLs, timestamps and information about suspicious requests or login attempts. Depending on the function, technical security data may be transferred to Defiant. The legal basis is Article 6(1)(f) GDPR, particularly protection against attacks and unauthorized access. Retention is determined by what is needed to detect, prevent and investigate security incidents. See the Wordfence privacy policy and terms, including data processing provisions.
Cookies and privacy choices
Cookies and similar technologies may be necessary to provide a requested function or remember your privacy choices. Non-essential storage on or access to your device generally requires prior consent under section 165(3) of the Austrian Telecommunications Act 2021 (TKG); related personal data processing relies on Article 6(1)(a) GDPR. Strictly necessary functions fall under the statutory exception and the legal basis stated for their respective purpose.
We use consentmanager, provided by consentmanager AB, Sweden, to manage privacy choices. Technical connection data and information about consent or refusal are processed to store and demonstrate your choice. The bases are Article 6(1)(c) GDPR and our legitimate interest in verifiable consent management under Article 6(1)(f) GDPR. See consentmanager’s privacy policy.
You can change or withdraw consent with effect for the future using the privacy settings offered on this website. Your browser can also delete or block cookies, which may affect functionality. If the settings are unavailable, contact office@lightporthq.com.
Google Analytics and external content
Google Analytics is currently disabled on our WordPress website. This is separate from the Mailchimp newsletter measurement described below.
Images: Images on this website are delivered through our web hosting service. The information about hosting and server logs above applies to these requests.
Video: Some pages embed Vimeo or YouTube content. Loading an external player connects to the provider, which may process IP address, device and usage information and cookie identifiers. If you are signed into that provider’s account, the provider may associate the visit with your account. Non-essential tracking requires consent. See the privacy policies of Vimeo and Google / YouTube. Watching a video is not required to use our consultancy services.
Fonts: Website font files are served locally. External embeds, such as booking calendars or video players, may request their own resources, including fonts, from other providers.
External links and social media: Links to partners, clients or social networks lead to independent websites with their own privacy notices. If you message our social profiles, we process your message and contact details to respond; the platform also processes data under its own terms.
Enquiries and client work
When you contact us by email, phone or form, we process the contact information and message you provide to handle your enquiry. Our website-check form requires a website address and email address; your name is optional. We need a suitable means of contacting you to reply.
Contractual and pre-contractual enquiries are processed under Article 6(1)(b) GDPR. Other enquiries and communication with business representatives rely on Article 6(1)(f) GDPR, our legitimate interest in handling the matter. Statutory documentation obligations are covered by Article 6(1)(c) GDPR.
Client work also involves necessary customer, contract, service and billing data. Recipients may include IT service providers needed for the work, tax advisers, banks and competent authorities where necessary or legally required. Customer data entrusted to us for work in their systems is handled according to the agreed assignment and any applicable data processing agreement.
Enquiries are retained while needed for handling the matter, follow-up questions or legal claims. Tax-relevant books, records and supporting documents are generally subject to seven-year retention under section 132 of the Austrian Federal Fiscal Code (BAO); pending proceedings can require longer retention.
Appointment booking with zcal
Our appointment page embeds a calendar from zcal, Inc., USA. Loading the calendar sends technical connection data to zcal. Booking involves the contact details you enter, appointment time, time zone and any message needed to organize the meeting and provide confirmations. Please only include information necessary for the meeting in free-text fields.
Processing for a consultation or pre-contractual request relies on Article 6(1)(b) GDPR; other business appointments rely on Article 6(1)(f) GDPR. Non-essential analytics or device storage by the embedded service require appropriate consent. Alternatively, arrange an appointment by email or phone.
zcal also processes data in the USA. Its published Data Processing Addendum includes EU Standard Contractual Clauses. See the zcal privacy policy. Appointment data is retained for preparation, the meeting and necessary follow-up; data forming part of a client relationship follows the retention criteria above.
Mailchimp newsletters
We send newsletters using Mailchimp (The Rocket Science Group LLC, USA, part of Intuit). Data includes your email address, any name provided, subscription status and subscription or unsubscription records. The newsletter form configured in WordPress uses an email confirmation step (double opt-in). This describes that form, rather than all historical or otherwise acquired contacts.
Marketing emails require consent under Article 6(1)(a) GDPR and section 174 TKG 2021, unless the narrow statutory exception for existing customers applies. Consent and unsubscription records are processed to fulfil evidence obligations and defend legal claims under Article 6(1)(c) and (f) GDPR.
Open and click measurement: Our Mailchimp campaigns have open and click tracking enabled. Small external images and tracked links allow Mailchimp to record the time, technical device information, IP address and whether an email was opened or a link clicked. These events can be associated with an individual recipient. They help evaluate and improve content and may be used to select recipients for repeat mailings based on opening behaviour. Measurement can be inaccurate, for example when email software preloads images.
Personalized measurement requires consent sufficiently covering that purpose; subscribing to a newsletter does not automatically replace any separately required tracking consent. You can withdraw consent for the future and unsubscribe using the link in each newsletter or by emailing office@lightporthq.com. Unsubscribing does not remove previously delivered messages or their links from your mailbox.
Mailchimp processes the delivery, error and unsubscription information required for sending. Subscriber data is processed for the duration of the subscription. Necessary consent records and suppression records may remain to respect your opt-out and defend legal claims, limited to those purposes and applicable statutory evidence requirements.
The additional Mailchimp website integration from chimpstatic.com is currently disabled. This does not affect newsletter delivery or the open and click measurement described above.
For provider and transfer information, see Mailchimp’s privacy policy, data processing terms and Standard Contractual Clauses, and information on European data transfers.
Comments
Where a post allows comments, we process the comment, contact details provided and technical security information for publication, moderation and abuse prevention. The basis is Article 6(1)(f) GDPR: our interest in a constructive and secure discussion. Your email address is not displayed publicly. Comments may remain as part of the discussion. Contact office@lightporthq.com for correction or deletion requests; evidence of infringements may be retained separately where necessary.
Recipients outside the EEA
The US services mentioned above may process data outside the European Economic Area. In addition to the processing basis, the requirements of Articles 44 onward GDPR apply. Depending on the provider, an applicable adequacy decision or appropriate safeguards such as EU Standard Contractual Clauses may apply. Provider information and published contractual terms are linked above; you can request information about the safeguards used for your data. The former EU-US Privacy Shield is not a valid transfer basis.
Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Consent may be withdrawn at any time for the future, without affecting the lawfulness of prior processing.
Objection: Where processing relies on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to direct marketing and related profiling at any time without providing a reason.
Contact: office@lightporthq.com. You may complain to a competent supervisory authority, including the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.