Privacy policy

This is a translation for your convenience. The German version is the legally binding one.

This page explains which data we process when you visit this website and sign up for the Re:Fuel newsletter, why we do so and what rights you have. It is based on the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).

1. Who is responsible?

The controller is the media owner named in our legal notice (Impressum), with the postal address and email address given there. We are not required to appoint a data protection officer. If you have any questions about data protection, just email us.

2. The key points

3. Visiting the website (hosting)

This website is hosted on Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). When you open the website, Google processes technically necessary data so that the page reaches you and is protected against abuse: your IP address, date and time, the requested address and information about your browser and operating system.

The legal basis is our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). Google processes this data on our behalf (data processing under Art. 28 GDPR) and, according to Google, keeps IP addresses for a few months. We do not analyse this data ourselves.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which there is an adequacy decision of the European Commission (Art. 45 GDPR). More information: Privacy and Security in Firebase.

4. Newsletter

What we store

When you sign up, we store your email address and the language in which you want to receive the newsletter (German, English or Polish; there is a separate mailing list for each language). So that we can prove that you really signed up yourself, the date, time and IP address of your sign-up and of your confirmation are also stored.

Double opt-in

After signing up, you receive an email with a confirmation link. Only when you click it are you added to the mailing list. This way nobody can sign up someone else’s address.

Purpose and legal basis

We send you news and offers about Re:Fuel by email. The legal basis is your consent (Art. 6(1)(a) GDPR, § 174(3) TKG 2021). The confirmation email itself contains no advertising. Storing the proof of sign-up is based on our legitimate interest in being able to prove your consent (Art. 6(1)(f) GDPR, Art. 7(1) GDPR). Providing your email address is voluntary, but without it we cannot send you the newsletter.

Our newsletter service: Brevo

For sign-up and sending we use Brevo, a service of Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France, with its German branch Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. When you click “Sign up”, your browser sends your details directly to Brevo (address “sibforms.com”). For technical reasons, Brevo also receives your IP address and information about your browser. Brevo processes the data on our behalf (data processing under Art. 28 GDPR) and, according to Brevo, stores it on servers in the EU. More information: Brevo’s privacy policy.

Internal founder area

So that the Re:Fuel team can see the sign-ups without their own Brevo access, there is an internal founder area. When an individually approved team member with their own verified account (Firebase Authentication by Google) opens the lists there, the confirmed addresses (email address, date of sign-up and chosen language) are fetched directly from Brevo at that moment and only displayed, not stored. The request runs through a small service at Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA), which only passes the data through. Cloudflare processes it on our behalf (Art. 28 GDPR) and is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). The legal basis is our legitimate interest in managing the newsletter easily as a team (Art. 6(1)(f) GDPR).

Newsletter analytics

Brevo can record whether a newsletter was opened and which links in it were clicked. For this, the emails contain a small invisible image and links that briefly pass through Brevo. We only use this to see which content is of interest and to improve the newsletter. This analysis is part of your consent (Art. 6(1)(a) GDPR). If you do not want it, please unsubscribe; it cannot be switched off separately.

Unsubscribing and deletion

You can unsubscribe at any time, either via the link at the end of every email or by sending us a short email. This withdraws your consent for the future; anything that happened before remains unaffected. After that you will no longer receive the newsletter. Your address may remain on a block list at Brevo so that you are not contacted again by mistake (legitimate interest, Art. 6(1)(f) GDPR). If you want us to delete it completely, just email us.

5. If you email us

If you send us an email, we only use your details to answer your message (Art. 6(1)(b) or (f) GDPR) and delete them when they are no longer needed for this and there are no legal retention obligations.

6. Your rights

You have the right to

Just send us an email. If you believe that we are not handling your data correctly, you can also lodge a complaint with the supervisory authority (Art. 77 GDPR, § 24 DSG). In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

7. No automated decisions

We do not make automated decisions or carry out profiling within the meaning of Art. 22 GDPR.

Last updated: October 2026 · Legal notice