Privacy policy
This is a courtesy translation. Only the German version is legally binding.
The controller responsible for processing is BlackStage GmbH, address as above, email office@lyrena.at.
No cookies, no tracking. This site sets no cookies and uses no analytics or advertising services. Fonts, images and scripts are loaded from our own storage; no content is loaded from Google or other third parties.
Visiting the site: The site is hosted on a server of Hetzner Online GmbH in the Falkenstein data centre, Germany. Images and scripts come from our storage at Supabase Inc. in the Frankfurt am Main data centre. When you visit, these servers process technically necessary data (IP address, time, requested address, browser identifier) to deliver the site and protect it against misuse. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Both providers act as processors on our behalf.
Contact form: We store your name, company, email, phone, country, interest and message in our customer database (Frankfurt data centre) and forward them to our management in order to answer your enquiry. The legal basis is taking steps prior to entering into a contract (Art. 6(1)(b) GDPR). We do not sell your data or pass it on for advertising purposes. We store the enquiry for as long as we need it for processing and a possible collaboration, and after that only to the extent that statutory retention obligations apply.
WhatsApp and email: If you write to us via the WhatsApp button, the terms of WhatsApp (Meta) also apply. The site does not load anything from WhatsApp for this; only your click opens the app.
“Questions?” assistant: The answers of the assistant on this site run entirely in your browser. What you type there is not sent to us or to third parties.
Your rights: Access, rectification, erasure, restriction, data portability and objection. Write to us at office@lyrena.at. You can lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).
Lyrena Studio: connecting social media accounts
If you allow us to manage your Facebook page or Instagram business account via our Lyrena Studio (login via Meta or partner access in Meta Business Suite), we receive from Meta Platforms Ireland Ltd. only what you explicitly approve in the process: name and identifier of the page or account, an access key (token) and, depending on the approval, posts, comments, messages and statistics of that page.
Purpose: to plan and publish posts on your behalf, reply to comments and messages and evaluate metrics. Every publication requires your approval unless otherwise agreed in writing. The legal basis is the contract with you (Art. 6(1)(b) GDPR).
Where and how long: Access keys are stored encrypted in our database at Supabase Inc. (Frankfurt am Main data centre); they are not visible in any interface. We do not store passwords. We keep data from your accounts for as long as the management service runs; after that we delete it within 30 days unless a statutory retention obligation applies. We do not sell data or pass it on for advertising purposes.
Ending access and deletion: You can remove the connection yourself at any time (Facebook: Settings → Apps and websites; Meta Business Suite: Settings → Partners) or write to us. How deletion works is described on the data deletion page.