Privacy Policy
Last updated: May 2026
1. Data Controller
The data controller for this website is:
GOLDENWING Creative Studios e.U.
Mag. Deni Khachukaev
Czeikestrasse 4/21
1100 Vienna, Austria
Email: deni@goldenwing.at
Phone: +43 664 543 96 81
2. Data Collection on This Website
Contact Form
When you submit inquiries via the contact form, the following data is collected:
- Name
- Email address
- Phone number (optional)
- Desired service
- Your message
- Budget (optional)
Legal basis: Art. 6(1)(b) GDPR (contract initiation) and Art. 6(1)(f) GDPR (legitimate interest).
Server Log Files
The hosting provider automatically collects information in so-called server log files:
- IP address (anonymized)
- Date and time of request
- Page accessed
- Referrer URL
- Browser and operating system
This data is automatically deleted after 7 days.
3. Analytics, Tracking and AI Services
We use the following external services:
Google Calendar Appointment Booking
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent: Google LLC, USA)
Purpose: An embedded Google Calendar widget lets you book an initial consultation online. The widget only loads after your active click (two-click solution) — no data is sent to Google before that.
Data processed: On loading: IP address, browser data. On booking: name, email address and the appointment details you provide.
Legal basis: Art. 6(1)(a) GDPR (consent by actively loading) and Art. 6(1)(b) GDPR (appointment arrangement).
Opt-Out: Alternatively: book via email to office@goldenwing.at or by phone.
Hotjar
Provider: Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta
Purpose: Hotjar creates heatmaps, session recordings and feedback surveys to analyze user behavior and improve user experience.
Data processed: Anonymized click and scroll data, device information, screen size. IP addresses are automatically anonymized.
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).
Ahrefs Analytics
Provider: Ahrefs Pte. Ltd., 16 Raffles Quay, #33-03 Hong Leong Building, Singapore 048581
Purpose: Ahrefs Analytics collects aggregated website statistics such as page views, visitor sources and technical information.
Data processed: Anonymized page view data, referrer URLs, device information. No personally identifiable data.
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner). Loaded only after active user consent.
Anthropic (AI chat „Goldie")
Provider: Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA
Purpose: Processing of chat inputs to generate the AI responses of our digital assistant Goldie. No model training is performed on your inputs.
Data processed: Content of your chat messages. Anthropic stores API data for abuse detection for a maximum of 30 days, then deletes it.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in automated inquiry pre-qualification). Data Processing Agreement (DPA) with Anthropic in place. Data transfer to the USA based on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework.
Opt-Out: https://goldenwing.at/en/kontakt — simply send your inquiry by email or contact form instead of chat.
4. Cookies
Our website uses cookies, small text files stored on your device.
We use the following types of cookies:
- Technically necessary cookies: Required for website operation
- Analytics cookies: To improve our website (only with consent)
Cookie Overview
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| _hjSessionUser_* | Hotjar | Unique visitor ID for Hotjar | 1 year | Analytics |
| _hjSession_* | Hotjar | Current session data | Session | Analytics |
| _hjIncludedInSessionSample | Hotjar | Session sampling | 2 minutes | Analytics |
| ahrefs_analytics_* | Ahrefs | Website usage statistics | 1 year | Analytics |
| __next_* | Next.js | Technical website functionality | Session | Necessary |
| sb-* | Supabase | Authentication (Cockpit) | Session | Necessary |
4. Your Rights
You have the following rights regarding your personal data:
- Access: You may request information about your stored data.
- Rectification: You may request the correction of inaccurate data.
- Erasure: You may request the deletion of your data.
- Restriction: You may request restriction of processing.
- Data portability: You may request the transfer of your data.
- Objection: You may object to the processing of your data.
6. Data Transfer to Third Countries
A transfer to third countries (outside the EU/EEA) takes place only to a limited extent within the external services listed above — in particular Anthropic (USA) for our AI chat. The transfer is based exclusively on Standard Contractual Clauses (SCCs), Data Processing Agreements (DPAs) and — where certified — the EU-US Data Privacy Framework. Hosting, lead data and contact-form inquiries remain on our servers in Austria.
6. Storage Duration
We only store your personal data for as long as is necessary for the respective purposes or as required by statutory retention periods.
8. Right to Complain
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
dsb@dsb.gv.at
9. Contact
If you have questions about data protection, you can contact us:
Email: deni@goldenwing.at
Phone: +43 664 543 96 81