Important Updates to Our Privacy Policy and Website Privacy Policy Requirements

At Markegy, we take your privacy (and your customers’ privacy) seriously. We’ve recently updated our Privacy Policy and Data Processing Agreement (DPA) to make things even clearer, more transparent, and fully aligned with GDPR requirements. Having a comprehensive website privacy policy is essential for legal compliance and transparency, as it helps build trust with users and demonstrates our commitment to protecting personal data. Our privacy policy is a legal document that outlines how personal data is collected, used, and managed.

If you’re one of our hosting clients, these updates also make your life easier, less legal worry, no unnecessary cookie banners, and easy‑to‑use text to update your own privacy policy if you choose. Maintaining an up-to-date privacy policy page is essential to meet legal requirements and ensure your website remains compliant.

1. What’s New in Our Privacy Policy

We’ve added new sections to explain how we handle data across our services. Here’s the quick version:

• Plausible Analytics – Privacy‑Friendly Insights
  • We use Plausible Analytics, which is completely cookie‑free. Plausible collects only minimal, anonymized data (such as truncated IP addresses for statistical purposes) and does not collect directly identifying personal data like names or phone numbers.
  • You get visitor stats without invading anyone’s privacy—and your website does not need a cookie banner for analytics.
• Hosting on SiteGround
  • Our sites are hosted on SiteGround, including EU‑based hosting.
  • We’ve clearly outlined how server logs are handled and how international data access is protected using Standard Contractual Clauses (SCCs).
• Data Processing on Behalf of Our Customers
  • During maintenance or troubleshooting, we may temporarily access form submissions or site data—but only as needed and only to support you.
  • This process is now explained in plain language, so you know exactly how your data is handled.

A dedicated privacy notice has been added to the updated policy to inform users about what personal data is collected, including IP addresses and, where applicable, phone numbers, and how this information is managed.

Tip: We’ve also prepared a ready‑to‑use snippet you can copy into your own Privacy Policy to reflect these updates. If you need help, a privacy policy template or sample privacy policy template is available to help you create a compliant privacy policy for your website.

Note: These snippets and templates are a starting point and must be tailored to reflect your website’s actual data processing activities.

The updated policy provides more detailed information about how we collect personal data, process it, and keep you informed about any changes.

2. Updates to Our Data Processing Agreement (DPA)

Our updated DPA now includes:

• Clear coverage of hosting, maintenance, and support activities; the DPA is a legal document that outlines the processes and legal obligations related to data processing.
• Explicit listing of sub‑processors (currently SiteGround), ensuring that all third party services are disclosed as part of legal compliance.
• Confirmation of international data transfer compliance under SCCs

You can review the full DPA here: Markegy.at DPA Page

Maintaining a compliant privacy policy is essential for meeting your legal obligations under the GDPR and the Austrian Data Protection Act (DSG), and works together with your DPA to ensure lawful data processing.

3. GDPR Support for Hosting Clients

If you’re hosting with Markegy, your hosting is covered by our Data Processing Agreement (DPA), meaning we process personal data (such as server logs) in accordance with the GDPR and the Austrian Data Protection Act (DSG). No additional setup is required for our hosting‑related processing activities.

Please note that full GDPR compliance requires more than hosting:

• Website owners (data controllers) must maintain an up‑to‑date privacy policy and comply with other GDPR obligations, such as handling data subject requests and providing lawful consent for cookies or analytics.
• Our DPA ensures GDPR‑compliant hosting, but website owners remain responsible for their own privacy policies, consent management, and data subject rights.

Our hosting and DPA help you meet your GDPR obligations as a processor, but you remain responsible for GDPR compliance as the data controller for your website.

4. No Cookie Banner Required for Hosting & Analytics

Good news for your website’s design:

• Our SiteGround hosting and Plausible Analytics setup means:
• ✅ No tracking cookies
• ✅ No annoying cookie banners needed
• ✅ Clear, privacy‑friendly compliance with data privacy laws and data protection principles

Note: No cookie banner is required if you only use our hosting and Plausible Analytics. If you add other cookies or tracking services, a banner may still be necessary under Austrian law.

We’ve even updated our own privacy statement and privacy policies to reflect this cookie‑free approach.

Data Subject Rights: Your Privacy Choices

As a data subject, you have important rights regarding your personal data under the General Data Protection Regulation (GDPR) and other relevant data protection laws. You have the right to access the personal data we have collected about you, request corrections to any inaccuracies, and ask for your data to be erased when it is no longer needed for the purposes for which it was collected. You can also restrict or object to the processing of your data, and request data portability, allowing you to receive your personal data in a commonly used format or have it transferred to another service provider.

To exercise any of these rights, simply contact our Data Protection Officer using the contact details provided below. Our Data Protection Officer is dedicated to ensuring our compliance with all applicable data protection laws and will respond to your request promptly, providing you with the information and support you need to manage your privacy choices.

How We Retain and Protect Your Data

We only retain your personal data for as long as it is necessary to fulfill the purposes for which it was collected, in line with our data protection policies and the principles set out in the GDPR. Our approach to data retention is guided by data minimization, accuracy, and storage limitation, ensuring that we do not keep your information longer than required.

To protect your data, we have implemented robust security measures, including encryption, firewalls, and strict access controls. We regularly review and update these measures to keep your personal data safe and secure. Additionally, any third-party service providers we work with are required to meet the same high standards of data protection that we uphold. This ensures that your personal data remains confidential and protected throughout its lifecycle.

Security Measures to Safeguard Your Information

Your privacy and the security of your personal data are our top priorities. We use a range of industry-standard security measures to safeguard your information, including encryption, secure socket layer (SSL) technology, and regular security audits. Our team, as well as any third-party service providers, receive ongoing training in data protection and confidentiality to ensure your data is handled with care.

We also use secure protocols like HTTPS to protect your data during transmission and have strict procedures in place to prevent unauthorized access, disclosure, alteration, or destruction of your personal data. Our Data Protection Officer continuously reviews and enhances our security practices to ensure they remain effective and up to date with the latest industry standards.

Copy‑and‑Paste Privacy Snippet for Your Site

This snippet is based on a sample privacy policy and a free privacy policy template. Privacy policy businesses can use this ready-to-use text to update their privacy policy page and ensure compliance. Including a privacy notice and a privacy statement is recommended for transparency, as these outline how personal data is collected, protected, and managed.

To make this easy for you, we’ve provided ready‑to‑use text that you can add to your Privacy Policy. This helps communicate to your visitors that:

1. You’re using privacy‑friendly Plausible Analytics
2. Hosting is managed securely via SiteGround

(Contact us if you would like us to email you the text snippet)

Company Contact Information

If you have any questions or concerns about our privacy policy, data collection, or how your personal data is processed, we encourage you to reach out to us. We are committed to providing clear and plain language information about our data protection practices and ensuring our privacy policy remains transparent and accessible.

Questions? We’re Here to Help

We know privacy rules can be tricky—but we’ve done the heavy lifting for you. It is good practice to inform users about privacy policy updates and provide more detailed information upon request to ensure transparency and compliance.

If you want to:

• Confirm your site is fully GDPR‑ready
• Get help updating your privacy policy
• Or just understand what these updates mean for your business

Markegy can provide examples and highlight key points to help you understand privacy requirements and best practices.

Contact Markegy and we’ll make it simple.