Privacy Policy.

1. Data Controller

The data controller responsible for this website is:

2. What Data We Collect

We collect the following categories of personal data:

• Contact form data: Name, email address, and message content submitted via the contact form on contact.php.
• Usage data: IP address, browser type, operating system, referring URLs, pages visited, and time spent on pages. This data is collected automatically when you visit the website.
• Cookie data: Technical identifiers stored in browser cookies. See our Cookie Policy for full details.

We do not collect special category data (health data, biometric data, or financial data) through this website.

3. Legal Basis for Processing

Personal data is processed on the following legal bases under GDPR Article 6:

• Consent (Art. 6(1)(a)): For non-essential cookies and analytics, where you have given explicit consent via the cookie banner.
• Legitimate interests (Art. 6(1)(f)): For website security, server log data, and fraud prevention where our legitimate interest in maintaining a secure website overrides individual privacy interests.
• Performance of a contract / pre-contractual steps (Art. 6(1)(b)): For contact form submissions where you have requested a response or information from us.

4. How We Use Your Data

Personal data collected via this website is used exclusively for the following purposes:

• Responding to enquiries submitted via the contact form.
• Maintaining the technical security and availability of this website.
• Analysing aggregate website usage to improve content and navigation (where consent has been given).
• Complying with applicable legal obligations.

We do not use personal data for automated decision-making or profiling as defined under GDPR Article 22.

5. Data Retention

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected:

• Contact form data: Retained for a maximum of 24 months from the date of the last communication, unless a longer retention period is required by applicable law.
• Server log data: Retained for a maximum of 90 days for security and debugging purposes.
• Cookie data: Retention periods vary by cookie type and are detailed in the Cookie Policy.

6. Data Sharing and Third Parties

We do not sell, rent, or trade personal data. Data may be shared with the following categories of third parties where technically necessary:

• Hosting providers: Server infrastructure and hosting services that process data on our behalf under a data processing agreement.
• Analytics services: Where consent has been provided, anonymised usage data may be processed by analytics providers. No personally identifiable information is shared with analytics providers.
• Legal authorities: Where required by applicable Austrian or EU law, data may be disclosed to competent authorities.

All third-party processors are subject to data processing agreements ensuring compliance with GDPR requirements.

7. International Data Transfers

Where personal data is processed by third-party service providers operating outside the European Economic Area (EEA), such handling is governed by appropriate safeguards as required by GDPR Chapter V — including Standard Contractual Clauses (SCCs) where applicable.

8. Your Rights Under GDPR

Under GDPR, you have the following rights regarding personal data held about you:

• Right of access (Art. 15): The right to receive a copy of personal data we hold about you.
• Right to rectification (Art. 16): The right to have inaccurate data corrected.
• Right to erasure (Art. 17): The right to request deletion of personal data in certain circumstances.
• Right to restriction of processing (Art. 18): The right to limit how we use your data in certain circumstances.
• Right to data portability (Art. 20): The right to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): The right to object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days in accordance with GDPR Article 12.

9. Right to Lodge a Complaint

If you believe your rights under GDPR have been infringed, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde — DSB), Barichgasse 40-42, 1030 Vienna, Austria. Website: dsb.gv.at.

10. Security

We implement appropriate technical and organisational measures to protect personal data against accidental loss, destruction, alteration, unauthorised disclosure, or access. This website uses HTTPS encryption for all data in transit. Access to personal data is restricted to authorised personnel only.

11. Changes to This Policy

This Privacy Policy may be updated from time to time. The date at the top of this page reflects the most recent revision. Continued use of this website following a policy update constitutes acceptance of the revised policy. We recommend reviewing this page periodically.

12. Editorial Position

Tamrelo is an independent wellness resource focused on everyday nutrition and active lifestyle practices for men. The content is not affiliated with any governmental or institutional body.