1. Controller

Name

Andreas Langa

Address

Schubertgasse 14 Top 27, 1090 Vienna, Austria

Email

andreas@suture-kit.com

Data processing on this website is governed by the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

2. Hosting (Cloudflare Pages)

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you visit the site, Cloudflare processes technically necessary connection data, in particular your IP address, date and time of access, the page requested, browser type and operating system (server logs). This data is required to deliver the website and to ensure stability and security (e.g. mitigating attacks) and is not combined with other data sources.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing the website securely and efficiently). Cloudflare retains log data only for a limited period before deletion.

Cloudflare is a US company, so data may be transferred to the United States. Cloudflare is certified under the EU-US Data Privacy Framework, which is covered by an adequacy decision of the European Commission under Art. 45 GDPR; standard contractual clauses are in place in addition. For details, see the Cloudflare privacy policy.

3. Contact by email and inquiry form

The inquiry form for institutions does not store or transmit any data itself: it merely opens your own email client with a prefilled draft. We only receive the information it contains (e.g. name, institution, email address, message) once you actually send that email.

We process this data solely to handle your inquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in answering inquiries). Emails are deleted once they are no longer needed for the inquiry, unless statutory retention periods (e.g. under tax or commercial law) require us to keep them.

4. Purchases via Etsy

Our products are sold through the Etsy platform. When you follow our shop link, you leave this website; from that point on, Etsy processes your data under its own responsibility (Etsy, Inc., or for EU users Etsy Ireland UC). The Etsy privacy policy applies. When you place an order, Etsy provides us with the data needed to fulfil it (name, shipping address, order details); we process this data to perform the contract (Art. 6(1)(b) GDPR) and retain it as required by statutory record-keeping obligations.

5. No cookies, no tracking

This website sets no cookies, uses no analytics or marketing tools and embeds no content from third-party servers. The fonts used (Noto Sans KR, IBM Plex Mono) are served locally by our hosting; no connection to Google servers takes place. This is also why no cookie banner is needed.

6. Your rights

Under the GDPR you have the right to access the personal data we hold about you (Art. 15), and to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). An informal email to andreas@suture-kit.com is sufficient to exercise these rights.

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

7. Notice for visitors from the United States

We do not sell personal information, do not share it for advertising purposes ("sale" or "sharing" within the meaning of the California Consumer Privacy Act) and do not engage in targeted advertising or profiling. We do not meet the thresholds at which US state privacy laws such as the CCPA/CPRA apply to businesses. Regardless, we extend the rights listed in section 6 to all visitors, wherever they live.

8. Changes

We will update this privacy policy if the website or the legal situation changes. The version published here applies.