Privacy Policy
Datenschutzerklärung
1. Data controller
KOMMA Genossenschaft
In der Specki 3
9494 Schaan
Liechtenstein
Email: contact@komma.systems
2. Data we collect
Site hosting
When you visit this site, our hosting platform (Vercel, Inc., United States) processes technical data needed to deliver the site, including IP addresses and standard request metadata in server and edge logs. This processing is for operating, securing, and troubleshooting the service only. We do not use analytics or marketing tracking on this site. Further detail on how Vercel handles data is available in Vercel's privacy policy.
Contact form
When you use the contact form, we collect your email address and the message you send. Messages are delivered using Resend (Resend, Inc., United States), which acts as a processor on our instructions. We use this information only to read and respond to your enquiry.
3. Legal basis
Applicable law is the Liechtenstein Data Protection Act (Datenschutzgesetz, DSG) of 2018, which transposes Liechtenstein's EEA obligations and is materially aligned with the EU General Data Protection Regulation (GDPR). References below to articles of the GDPR are to the equivalent bases under the DSG 2018.
Processing of contact form data is based on Art. 6(1)(b) GDPR / DSG 2018 (steps prior to entering into a contract or handling your request) and, where applicable, Art. 6(1)(f) GDPR / DSG 2018 (our legitimate interest in responding to enquiries). Processing of hosting and log data is based on Art. 6(1)(f) GDPR / DSG 2018 (legitimate interest in providing a secure, available website).
4. Data retention
Hosting and infrastructure logs are retained for the periods described by Vercel and only as long as necessary for the purposes above. Contact submissions are kept for as long as needed to handle your enquiry and for a reasonable follow-up period, and in any case typically no longer than 24 months, unless a longer retention is required by law.
5. Your rights
Under the Liechtenstein DSG 2018 you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object where applicable (these correspond to the rights familiar from the GDPR). To exercise these rights, contact us at contact@komma.systems. We will respond within one calendar month. If a request is complex or numerous, we may extend that period by up to two further months where permitted by law; we will inform you within the first month if an extension applies. You also have the right to lodge a complaint with a supervisory authority:
Datenschutzstelle Liechtenstein
Städtle 38
FL-9490 Vaduz
6. International transfers
Vercel and Resend are US companies. Using their services can involve transfers of personal data to the United States and other countries. Liechtenstein is part of the EEA; where data is transferred to countries not covered by an adequacy decision, applicable law (DSG 2018) requires appropriate safeguards.
For these processors, safeguards are typically set out in their customer agreements and, where offered, in a data processing agreement (DPA). Those instruments often incorporate the EU Commission's standard contractual clauses (SCCs) or another approved transfer mechanism for processor processing. The exact tool that governs your relationship depends on the terms and DPA (if any) accepted between KOMMA Genossenschaft and each provider. We recommend reviewing Vercel's and Resend's current DPA and privacy materials and confirming that you have accepted the processing terms that apply to your account.
7. Third-party processors
We do not sell your personal data and do not share it with third parties for their marketing purposes. We use the processors described in this policy only to operate this website and the contact channel.
8. Cookies
This site does not use tracking or marketing cookies. Only technically necessary mechanisms required for basic site function may apply (for example session or security-related cookies from the hosting platform).