Privacy policy

This policy explains which personal data we process when you visit this website or contact us, why we do it, and what rights you have under the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

1. Who is responsible

Mamoru Lab GmbH
Hadikgasse 64, 1140 Wien, Austria
info@mamorulab.com

We have not appointed a data protection officer, as we are not required to. For any question about your data, write to info@mamorulab.com.

2. In short

• We do not use cookies, analytics or tracking tools.
• We process only the data needed to deliver this website and to answer your messages.
• We do not sell personal data or use it for advertising.

3. Visiting this website

This website is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA. When you open a page, your browser automatically sends technical data to GitHub’s servers, such as your IP address, the date and time of the request, the page requested, the referring page, and your browser and operating system. GitHub logs the IP addresses of visitors for security purposes.

We need this data to deliver the website, keep it stable and secure, and detect misuse. The legal basis is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). GitHub processes this data as an independent controller, under the GitHub General Privacy Statement. GitHub may process data in the USA; transfers are based on the EU adequacy decision for the EU-U.S. Data Privacy Framework, under which GitHub is certified (Art. 45 GDPR). We have no access to these logs and do not use them to identify you.

4. Email

When you write to us at info@mamorulab.com, we process your email address, your name or company name if you give it, the content of your message and any other information you choose to include. This website has no contact form.

We use this data only to answer your enquiry and, where it relates to our services, to prepare or carry out a contract. The legal basis is Art. 6(1)(b) GDPR for enquiries about a contract, and otherwise our legitimate interest in replying to messages addressed to us (Art. 6(1)(f) GDPR).

Our email is hosted by Proton Mail, a service of Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland, which processes it on our behalf under a data processing agreement (Art. 28 GDPR). The European Commission recognises Switzerland as providing an adequate level of data protection (Art. 45 GDPR).

We delete enquiries once they are resolved and no follow-up is expected, at the latest 24 months after our last contact. If an enquiry leads to a business relationship, the related correspondence is kept for the statutory retention period, generally seven years (§ 212 UGB, § 132 BAO).

5. Security reports

If you report a vulnerability through the contact listed in our security.txt, we use your report and contact details to investigate and fix the issue and to keep you informed. The legal basis is our legitimate interest in securing our systems (Art. 6(1)(f) GDPR). We keep reports as long as needed to resolve and document the issue, and we name you publicly only with your permission.

6. Links to other websites

Our pages contain plain links to other websites, such as those of public authorities. No data is sent to those websites until you click a link. After that, the other website’s own privacy policy applies.

7. Who receives your data

Your data is processed by us and by the service providers named above. We disclose data to authorities only where the law requires it.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data erased (Art. 17)
• restrict how we process it (Art. 18)
• receive your data in a portable format (Art. 20)
• object at any time to processing based on our legitimate interests, on grounds relating to your particular situation (Art. 21)

To exercise these rights, write to info@mamorulab.com. You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb@dsb.gv.at, www.dsb.gv.at.

9. Other information

You are not obliged to give us any personal data, but without your contact details we cannot reply to you. We do not use automated decision-making or profiling. This website is delivered only over encrypted connections (HTTPS).

We update this policy when our website or our processing changes. Legal details about the company are in our legal notice.

Last updated: 2 November 2026