Privacy Policy & Data Protection Architecture
Information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR / DSGVO) and the Austrian Data Protection Act (Datenschutzgesetz — DSG).
1. European Sovereign Infrastructure Pinning (europe-west3)
All stateless application containers (oxivel-api-stg, oxivel-worker-stg), asynchronous task queues (oxivel-queue-stg), and relational database persistence (PostgreSQL 16 logical database oxivel_stg on oxivel-pg16-shared) are strictly provisioned and executed inside the European Union within Google Cloud region europe-west3 (Frankfurt, Germany).
2. Client-Side Storage & Zero Tracking Cookies (oxivel_theme)
oxivel.com does not deploy third-party advertising trackers, behavioral fingerprinting scripts, or cross-site marketing cookies. To provide a zero-flicker visual interface across Daylight Lab (Light) and Night Run (OLED Dark) modes, your theme preference is stored locally in your browser under the localStorage key oxivel_theme (pursuant to § 165(3) Austrian TKG 2021 as strictly necessary for a user-requested interface state).
3. Ephemeral Server Telemetry & Affiliate Outbound Links
Operational Security & Readiness Logs (Art. 6(1)(f) GDPR): When accessing https://stg.oxivel.com, Cloud Run processes technical HTTP request metadata (status code, request latency in milliseconds, and TLS transport metadata) strictly to ensure service reliability, enforce the sub-200ms readiness smoke gate, and defend against automated abuse.
Affiliate Redirection: Outbound affiliate links to sports nutrition or endurance hardware merchants are clearly labeled. No personal data is transmitted to external affiliate merchants unless and until you actively click a marked outbound link.
4. Your Rights Under GDPR (Art. 15–22) & Supervisory Authority
You have the statutory right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection (Art. 21 GDPR). Requests may be directed to privacy@oxivel.com or legal@oxivel.com.
Competent Data Protection Supervisory Authority in Austria:
Österreichische Datenschutzbehörde (DSB), Barichgasse 40–42, 1030 Wien, Austria (https://www.dsb.gv.at, dsb@dsb.gv.at).