Privacy Policy
Your Data, Your Rights

Protecting your privacy is Riddle&Code's top priority. Learn how we collect, use, and secure your information.

Information pursuant to Articles 13 and 14 GDPR

Riddle&Code (also referred to as "Riddle&Code" or "we" in this Data Protection Notice), are committed to personal data protection. As a rule, the use of our website and our business activities involve the processing of personal data. In order to make these data processing operations comprehensible, we would like to inform you in our data protection notice about how we process personal data and what rights you have. Should you have any further questions, please find our contact details below.

I. Who we are and how you can contact us

The controller responsible within the meaning of the General Data Protection Regulation (GDPR) is: Riddle & Code GmbH, c/o Spaces Icon Central Station, Gertrude-Fröhlich-Sandner-Straße 2-4/Tower 9, 1100 Vienna, Austria, Europe, E-Mail: privacy@riddleandcode.com

II. Our data processing

General: We process personal data in compliance with the relevant data protection regulations, in particular the General Data Protection Regulation (GDPR, Regulation [EU] 2016/679) and the Austrian Data Protection Act (DSG). Any data processing by us will therefore only take place within the scope of a legal basis (in particular pursuant to Art. 6 Para. 1 lit a - f GDPR), which will be stated below for the individual data processing operations.

Operation of our website: Every time you access our website (www.riddleandcode.com), your computer (device) or browser automatically transmits certain information to enable you to visit our website. The website is hosted on GitHub Pages, a service provided by GitHub, Inc. As the hosting provider, GitHub may collect technical data from visitors (such as access logs containing IP addresses) necessary to maintain the security, integrity, and operational efficiency of the service. GitHub’s processing of this data is governed by their Privacy Statement. The legal basis for the processing of data is Art 6 Paragraph 1 lit f GDPR.

Use of cookies: Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's system. We use cookies that are technically necessary and remain stored on your end-user device. The purpose of using technically necessary cookies is to simplify the use of websites for users.

Social Media: We use social media to present our work through widely used communications channels. Each social media channel has its own policy on the way they process your personal data when you access their sites, including LinkedIn, X, and others.

Customer care and services: We process personal data for the purpose of providing our services, customer support and information including internal documentation and administration. The legal basis for the processing of the data is the fulfilment of the contract or the implementation of pre-contractual measures (Art 6 Paragraph 1 lit b GDPR).

Contact forms: When contacting us (e.g. via contact form or e-mail), the information provided by the inquirer will be processed for documentation, processing and answering the enquiry. The basis for this is our legitimate interest in the proper documentation, processing and answering of the enquiry (Art 6 Paragraph 1 lit f GDPR).

Job applications: We process the data of applicants on the basis of Art 6 Paragraph 1 lit b GDPR (pre-contractual measures) for the purpose of carrying out the application procedure and contacting the applicant.

Website Analytics: This website uses Google Analytics, a web analytics service provided by Google LLC. We process your data on the basis of our overriding legitimate interest to cost-efficiently generate easy to use website access statistics (Article 6(1)(f) General Data Protection Regulation). You can refuse the use of cookies by selecting the appropriate settings on your browser or by downloading and installing the browser plug-in available at https://tools.google.com/dlpage/gaoptout.

Webshop: In the course of your visit of our webshop and the processing of your orders we will collect personal data including names, contact data, delivery address, payment method, and related information. We process this data to make the webshop available to you and to offer goods and services.

III. How long do we store personal data?

Unless otherwise specified, we store personal data for as long as it is necessary to ensure the fulfillment of the aforementioned purposes or as long as we are legally obliged to do so. For business letters, contracts, bookings, orders etc.: Until the end of the business relationship or until the expiry of the statutory retention periods (in particular at least 7 years).

IV. Rights of the data subject

Provided that the respective legal requirements are met, you can assert the following rights:

  • Right to information: Request confirmation and information about your data (Art 15 GDPR)
  • Right of rectification: Correct incorrect or incomplete data (Art 16 GDPR)
  • Right to erasure: Have your data deleted if conditions are met (Art 17 GDPR)
  • Right to limit processing: Restrict processing of your data (Art 18 GDPR)
  • Right to data portability: Transfer your data (Art 20 GDPR)
  • Right to object: Object to processing based on legitimate interests (Art 21 GDPR)
  • Right to withdraw consent: Revoke consent at any time
  • Right of complaint: Complain to a supervisory authority (in Austria: Data Protection Authority, Barichgasse 40-42, 1030 Wien, www.dsb.gv.at)

V. Changes to our Data Protection Notice

We keep our privacy policy up to date and therefore adapt it when necessary. The current version of our data protection notice is available at https://www.riddleandcode.com/privacy-policy

Last update: 10.12.2025

Questions About Your Data?

Contact us for any privacy-related inquiries or to exercise your data rights.