Privacy

1. Scope of this privacy notice

This notice covers the public pages at vioneto.com, the magazine and our own waiting list at mailing.vioneto.com. The waiting list is separate from customer accounts and optional tutorial emails.

The separate development and test environment is covered by the Beta privacy notice.

Last updated: 28 October 2026

2. Controller

3. Website, magazine and technical operation

The website, magazine, mailing application and contact mailbox are hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Requests involve processing your IP address, time, requested address, response status, amount of data transferred and connection information sent by your browser.

We need this data to deliver content, investigate errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure and reliable operation. Technical logs are handled separately from editorial or marketing analysis.

In the access logs provided by our host, IP addresses are replaced with 0.0.0.0. The host is configured to retain these logs for 190 days. Other log details, such as requested addresses and timestamps, may still relate to a person. We do not use the host's optional visitor statistics.

The website uses no external advertising or analytics tools and does not create personal browsing profiles. Magazine images come from our website server. Text uses locally available fonts; no external font service is contacted. When you follow an external link, the destination provider’s privacy notice applies.

Website and magazine statistics

Minimal server-side base counts

When a known public HTML page is successfully requested, our website server adds one view to that page and language's daily total. Only the calendar day, public page path, language, page section and count are stored. Repeated requests count again; these are not unique people. This creates no personal browsing history or link to accounts, consent receipts or additional browser reports.

Base counts set no cookies, read no browser storage and trigger no additional measurement requests from your browser. URL parameters, IP addresses, referring addresses, browser identifiers, duration and clicks are not stored in these daily totals. Automatically supplied browser information is used only during the request to exclude known bots and preloads. Supplied Do Not Track and Global Privacy Control signals are respected as an objection. Private pages, errors, redirects, files and background requests do not count. Hosting logs described separately remain independent.

This limited reporting helps us understand interest in public content and improve the website. Where personal connection information is temporarily processed, we rely on our legitimate interest under Article 6(1)(f) GDPR. You can object through the contact options above; corresponding browser signals are respected automatically. Daily totals older than 90 days are deleted in bounded batches through the protected server schedule. Backlogs and failures require operational attention. Figures before this series started are not reconstructed.

Additional browser measurement with your consent

With your consent, we record views of our public website and published magazine articles, visible time per page and clicks to the trial. We use only our own application on our website server, with no external analytics service. Without consent, no such additional browser reports are sent and the website remains fully usable.

Statistics contain the public page reference, language, calendar day, a broad referral category such as a search engine or direct visit, a broad device class, and the time and click values above. Search terms, external page titles, full referring addresses, IP addresses, account names and email addresses are not saved in these statistics records. Technical connection data and hosting logs are processed separately as explained above.

For a permitted view, the loaded page generates a random view identifier held in memory. It associates time and click reports with that document only and is not used to recognise you across pages or devices. We use no analytics cookies. Persistent browser storage (localStorage) remembers only your choice and its version, without a visitor identifier or timestamp. Your choice remains for later visits in this browser until you change it or clear the website data. A changed consent version requires a new choice. Clearing only the file and image cache does not usually remove this setting. If storage is unavailable, your choice applies only to the currently open page.

You can choose equally between “Allow” and “Do not allow”, and withdraw consent at any time through “Statistics settings” in the website footer. The page then stops further reports and aborts requests still in progress. This does not retrospectively remove reports already received by the server. After allowing again, measurement begins from the next newly loaded page at the latest. Do Not Track and Global Privacy Control browser signals are respected as an objection; known bots and preloads are excluded.

The processing and optional access to information on your device rely on your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Withdrawal applies to future processing. Storage required for your privacy choice serves only to respect that choice.

View receipts can associate retries and time or click reports for up to 24 hours. They are then due for deletion, as are daily totals older than 90 days. Cleanup runs in bounded batches through our protected server schedule; we can see backlogs and failures and must resolve them. Figures represent permitted measurements that were actually received, not unique people or a complete visitor count. Older figures using another method remain labelled accordingly; comparisons across that change are not calculated. Existing account and registration records are used for separate account reporting and are not personally linked to page views.

Hosting provider information: ALL-INKL.COM privacy information.

4. Our videos and the Vioneto player

We show our product videos in the Vioneto player. We use Bunny Stream, provided by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia, to store and deliver video versions. Requests for video files or posters disclose technically necessary data such as your IP address, time, requested file and browser information to the delivery infrastructure.

This processing provides the video presentation you requested and reliable delivery. The basis is Article 6(1)(f) GDPR; our legitimate interest is explaining our product clearly. The standalone player demo loads its sample video directly from our website server.

Bunny keeps technical access logs for video delivery. They help us investigate delivery errors and misuse. The CDN access logs available to us cover up to three days and use shortened IP addresses. We do not use additional permanent log storage or automatic forwarding to a separate log server. Shortened log entries may still relate to a person.

The Bunny network delivers content worldwide. Its Slovenian headquarters therefore do not mean that every request is processed exclusively in Germany or the European Union. Bunny provides information about its processing and service providers.

Bunny privacy information · Bunny data processing information · Bunny sub-processors

5. Preferences and technically necessary cookies

When you switch between light and dark mode, your browser remembers the choice in local website storage. When you deliberately enter the app, your selected language may also be saved for that entry. These preferences support your use of the service and are not advertising identifiers. You can remove them in your browser’s website-data settings.

If you deliberately choose to stay signed in, the application uses an encrypted technical cookie on this device. It allows you to sign in again for up to 30 days; a shorter automatic sign-out setting you have chosen still applies. Your password is not stored in this cookie. Signing out ends access through the cookie. Changes to your password or sign-in address, and withdrawal of account access, invalidate existing sign-in permissions. The cookie is not used for advertising or visitor statistics.

Our mail application uses a technical session and protection against forged form submissions. The associated cookies may already be set when you open the mail application. They protect forms and preserve notices during your interaction; they are not used for advertising or recognition across websites.

Section 25(2) TDDDG applies to storing or accessing strictly necessary information. Where this involves personal data, our legitimate interest in securely providing the requested function is the basis under Article 6(1)(f) GDPR.

6. Waiting list and email confirmation

You can register your interest through the waiting-list form when it is offered. We process your email address, selected language, any name you optionally provide, and your registration, confirmation and withdrawal. Your consent under Article 6(1)(a) GDPR is the legal basis for the availability notification.

You first receive a confirmation link. Only your deliberate confirmation adds you to the active waiting list. The confirmation link is valid for 24 hours; this is not a retention period for an already confirmed waiting-list entry. Registration creates no customer account, starts no trial and does not subscribe you to tutorial emails.

We record the purpose and version of the consent text, relevant timestamps and confirmation status. Registration and confirmation also produce a protected verification value derived from the IP address. Such a value is not anonymous information. These records document consent and help prevent abusive registrations.

Waiting-list emails include an unsubscribe link. You can withdraw consent at any time for the future, or write to support@vioneto.com. After confirmed unsubscription we remove you from active delivery and stop pending messages for this waiting list. Any existing customer account or other services you expressly chose remain unaffected.

A confirmed entry does not automatically expire after 90 days. We use it for the requested availability notification while that purpose remains and you have not withdrawn consent. Once the purpose ends or consent is withdrawn, we no longer use it for these messages. Necessary records and suppression entries are handled separately insofar as needed to document a transaction, respect your unsubscription or defend legal claims.

7. Email delivery and delivery reports

Our own mailing application is hosted at ALL-INKL.COM. We use Amazon Simple Email Service (SES) in the Frankfurt region (eu-central-1), an Amazon Web Services service, for delivery. SES receives the recipient details and message content needed to send the email. This does not authorise the delivery provider to advertise to you.

We process reports of undeliverable messages and emails reported as spam so that we do not continue sending unwanted messages to those addresses. This involves message identifiers, timestamps, recipient references and delivery status. Article 6(1)(f) GDPR applies to this security and delivery control; our interest is reliable delivery that respects your unsubscription.

Processing on our behalf is governed by the AWS Data Processing Addendum and the supplementary data protection provisions in the AWS Service Terms. Where personal data is transferred to a country outside the EU/EEA without an adequacy decision, those terms incorporate the European Commission's Standard Contractual Clauses (2021/914). Selecting Frankfurt does not fully rule out possible access or transfers outside the EU/EEA.

AWS privacy information · AWS Service Terms and data processing (section 1.14)

8. Contact

If you email us, we process your contact details, message and any attachments to answer your enquiry. Article 6(1)(b) GDPR applies to enquiries about a possible or existing contract. Other enquiries are handled on the basis of our legitimate interest in communication under Article 6(1)(f) GDPR.

Contact messages are retained for as long as needed to handle the enquiry, meet applicable record-keeping duties or protect legal claims. Clicking an email link opens your own email application; the website does not send a message merely because you click it.

9. Retention and recipients

The retention period described in section 3 applies to hosting logs. Otherwise, we limit processing to its purpose. Technical operational and security data is deleted or anonymised when no longer needed for delivery, error investigation and misuse prevention. Where legal duties or a specific need to resolve legal claims apply, the necessary data is retained only for those purposes.

Access is limited to people and service providers who need it for the relevant purpose. Hosting, video and email providers are named in their respective sections. Disclosure to authorities or other recipients takes place where required by law or necessary and permissible to establish or defend legal claims.

10. Your rights

Subject to the legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You can withdraw consent at any time for the future. This does not affect the lawfulness of processing before withdrawal.

Where processing is based on legitimate interests, you may object on grounds relating to your particular situation (Article 21 GDPR).

For privacy enquiries, contact us at support@vioneto.com. We do not make automated decisions on this website that have legal or similarly significant effects.

You may lodge a complaint with a data protection supervisory authority. For our establishment in Baden-Württemberg, this includes the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.