This English text is provided for your convenience. The legally binding version is the German original.
Ing. Thomas Postl, sole trader (Einzelunternehmer), Neusiedlerstraße 18, 2763 Pernitz, Österreich. E-mail: [email protected]
No data protection officer has been appointed (no obligation under Art 37 GDPR).
On registration: e-mail address, name (optional), password (stored only as a hash), the chosen federal province (Bundesland) and the name of the hunting ground. For paid bookings, payment is processed by Paddle (Paddle.com Market Limited, Dublin, Ireland) acting as Merchant of Record. Paddle processes the data required for the purchase and for billing (e-mail, invoice and payment data) under its own responsibility; this may involve transfers to Paddle group companies in the United Kingdom and the USA (adequacy decision or EU-US Data Privacy Framework / Standard Contractual Clauses). Details: https://www.paddle.com/legal/privacy Legal basis: Art 6 (1)(b) GDPR (contract).
Sign-in with Google (optional): Anyone who registers or signs in with their Google account thereby transmits to us the e-mail address, the name and the technical Google account identifier; in that case no password is stored. Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) learns on sign-in that you use Revier3D. This processing of data takes place only if you actively choose this sign-in method; registration with e-mail address and password always remains available as an alternative. Legal basis: Art 6 (1)(b) GDPR (contract). Details: policies.google.com/privacy
Content entered by the user: the hunting ground boundary (geodata), ground facilities, paths, the cull plan, the cull list and other hunting records, as well as optionally shared live locations within the ground team. These data are visible only within the respective hunting ground (account members and persons in possession of the ground link and ground password). Legal basis: Art 6 (1)(b) GDPR. For the live location: active sharing by the user, which can be ended at any time (Art 6 (1)(a) GDPR).
Hunting ground accounting (Pro): Bookings (amount, date, category, payment method, business partner, note) and receipt photos are stored within the respective ground and are visible there only to the hunting ground manager (Revierleitung), not to other members or guests. Text recognition on receipt photos runs entirely in the browser on your device; no image is transmitted to our server or to any third party for the purpose of recognition. The ground manager can create read-only access for their tax advisor: whoever receives this link can retrieve the journal, the receipt images and the exports of the ground; every retrieval is recorded in the ground's change log, and the access can be revoked at any time. The recipient of these data is the tax advisory firm commissioned by the customer themselves. Legal basis: Art 6 (1)(b) GDPR (contract). Accounting data is subject to the retention rules of item 6; for the customer's statutory tax retention obligations (7 years, § 132 BAO, the Austrian Federal Fiscal Code) a complete export is available which remains accessible even after the end of a Pro subscription.
Photos and videos: Photos and videos can be attached to markers, records and receipts. On upload we read the time of capture and, where stored in the file, the capture coordinates, and assign them to the respective entry. In the case of photos, the stored and delivered file itself thereafter contains no EXIF data. Photos and videos can be retrieved only within the respective ground and are not publicly delivered. Legal basis: Art 6 (1)(b) GDPR (contract).
When the website is accessed: IP address, time, the address requested, user agent. Purpose: operation, troubleshooting, defence against attacks (including the throttling of repeated password attempts). Retention period: 14 days. Legal basis: Art 6 (1)(f) GDPR (legitimate interest in secure operation).
Revier3D sets only two own cookies: the technically necessary session cookie for signing in, and a cookie named lang which remembers your chosen display language (valid for 30 days; it contains only the language code and no personal data). There are no tracking, analytics or advertising cookies. Consent is not required for the session cookie (§ 165 Abs 3 TKG 2021, the Austrian Telecommunications Act). The language cookie can be changed at any time via the language setting or deleted in the browser.
For enquiries submitted via the contact form or by e-mail, we process the data you provide in order to deal with the enquiry. Legal basis: Art 6 (1)(b) or (f) GDPR.
Transactional e-mails (for example for resetting the password) are sent via the service provider Brevo (Sendinblue SAS, Paris, France); only the e-mail address and the content of the e-mail are transmitted.
If the hunting ground manager (Revierleitung) connects wildlife cameras, we store per image: the image file, the time of receipt, the time of capture stored in the image, the camera's name and location, and the sender address of the transmitting e-mail. The images reach us by one of two routes: either via a dedicated receiving address per camera (of the form [email protected]) to which the camera itself sends, or via retrieval from the manufacturer's camera portal. Mail from a sender address that has not been registered is not accepted; it is merely recorded as a log line.
Credentials which the ground manager stores for a camera portal are stored by us in encrypted form (the key is kept separately on the server) and are used exclusively for that retrieval. It is our server that logs into the portal; your IP address is not transmitted in the process.
Persons may be recognisable on wildlife camera images. The positioning and operation of the cameras is decided by the ground manager, who is responsible for the choice of location, for signage and for the legal basis (item 6.4 of the General Terms and Conditions [AGB]). We store and show the images exclusively within the respective ground, do not pass them on to third parties and do not evaluate them for any other purpose. Legal basis in the relationship with the customer: Art 6 (1)(b) GDPR (contract).
Deleted camera images remain in the ground's recycle bin for 30 days and are then permanently removed. If the ground's storage is full, the system automatically deletes the oldest camera images permanently in order to make room for new ones (item 6). If a ground switches to a plan without wildlife camera integration, it no longer accepts new camera images.
Revier3D runs on a server of Alpenhost e.U. (server location: Austria). All connections are TLS-encrypted.
For acceleration and protection against overload, the CDN and security network of Cloudflare (Cloudflare Germany GmbH, Munich) is placed in front. Cloudflare thereby processes IP addresses, connection times and requested addresses as technical connection data, but stores these only briefly and does not use them for tracking or advertising. During registration and when creating a hunting ground, Cloudflare Turnstile is also used as bot protection (a user-friendly alternative to CAPTCHAs). Legal basis: Art 6 (1)(f) GDPR (secure and available operation). Details: cloudflare.com/privacypolicy
Receipt of wildlife camera images by e-mail runs via Mailgun (Sinch Sweden AB, Stockholm) as an inbound service: the sender address, the image and the metadata of the respective e-mail are transmitted. Legal basis: Art 6 (1)(b) GDPR (contract), only where the feature is actively used by the ground manager.
In order to detect faults and security problems during live operation (open beta), we collect anonymous technical error and security reports: if a JavaScript error occurs in your browser or a resource prohibited by our Content Security Policy is blocked, the browser automatically sends a report to our server. These reports contain exclusively technical information (error message, file, line number, user agent), but no account data, account IDs, ground contents or IP addresses in the log line. We use these data exclusively for troubleshooting and do not store them with any personal reference. Legal basis: Art 6 (1)(f) GDPR (legitimate interest in stable and secure operation).
For maps, the elevation model, the cadastre, weather and place search, the Revier3D server obtains data from external sources. These queries are carried out by the server; your IP address is NOT transmitted to the third-party sources — the providers see only the requests of our server:
What is transmitted in the process are exclusively the geographical coordinates of the respective map section — no account or personal data.
Personal data are disclosed to third parties only insofar as this is necessary for the performance of the contract (payment provider, hosting), is prescribed by law or you have consented. There is no sale of data and no advertising by third parties.
We store account and hunting ground data for as long as the account exists. You can permanently delete your account together with all its ground data yourself at any time in the account management; the deletion also covers the 3D data generated for the ground. If a paid contract ends, the ground remains stored for a further 6 months in accordance with item 5.3 of the General Terms and Conditions and can be reactivated by concluding a new contract; after that we may delete the data.
Individually deleted entries (for example markers, photos, videos, camera images) remain in the ground's recycle bin for 30 days and are then permanently removed; the ground manager can empty the recycle bin at any time. If the ground's storage is full, the system additionally deletes the oldest wildlife camera images permanently (item 2.6). Server logfiles are retained for 14 days (item 2.3). Invoice-related data are retained in accordance with the statutory tax periods (as a rule 7 years, § 132 BAO).
Backups: To guard against data loss, we back up the database daily in encrypted form (retention: 14 days) and the ground data weekly (retention: 14 weeks). For photos, videos and camera images we additionally maintain a separate backup copy, because these files are never overwritten during operation; a copy deposited there may still exist after the file has been deleted in live operation. At your request we will remove that copy as well. All backups are held on the provider's systems in Austria and are transmitted only in encrypted form.
You have the right of access (Art 15), rectification (Art 16), erasure (Art 17), restriction (Art 18), data portability (Art 20) and objection (Art 21 GDPR), as well as the right to revoke consent given at any time. For this purpose, please contact [email protected].
You may also lodge a complaint with the Austrian supervisory authority: Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40-42, 1030 Wien, https://www.dsb.gv.at.
Passwords are stored only as salted hashes. Access to ground data is strictly separated by tenant and is tied to the account or the ground password. Write access without sign-in is blocked at the server. Credentials that you store for retrieval from a camera portal are stored by us in encrypted form (item 2.6). Photos, videos and camera images are delivered only after the authorisation has been checked and are excluded from shared caches (CDN).
We adapt this privacy policy whenever the processing changes: for example when a further service provider is added or removed, when new functions require additional data, or when purposes, recipients or retention periods change. The version respectively published on the website applies.
As of: 17 August 2026