Privacy
Policy.

About this policy

This Privacy Policy applies to IskraCore and the website available at iskracore.com. IskraCore is an English-language editorial publication covering technology, gaming and artificial intelligence.

It describes how personal data may be processed when you browse the website, contact us, use interactive features or consent to optional services. Separate third-party websites and services linked from our pages operate under their own privacy policies.

Who is responsible

The data controller is the person or legal entity identified in the IskraCore Imprint. The Imprint forms part of this policy for controller identity and postal contact details.

How and why we process data

We process personal data only where there is a valid purpose and legal basis. Depending on the situation, the relevant basis under Article 6 GDPR may be:

• Consent for optional analytics, marketing or other consent-based features.
• Contract or pre-contractual steps when you ask us to provide information or discuss a service or partnership.
• Legal obligation where applicable law requires processing or retention.
• Legitimate interests in operating, securing, improving and defending the website, provided those interests are not overridden by your rights.

We follow the principles of purpose limitation, data minimisation, accuracy, limited retention, integrity and confidentiality.

Hosting and server logs

IskraCore is hosted using Hostinger infrastructure. When you request a page, the hosting environment may automatically record technical data needed to deliver and protect the website. This may include:

• IP address and approximate network information;
• date, time, requested URL and referring page;
• browser, operating system and device information;
• response status, transferred data volume and error information; and
• security events used to detect abuse, attacks or service disruption.

The purpose is reliable website delivery, troubleshooting, fraud and abuse prevention, and system security. The usual legal basis is our legitimate interest under Article 6(1)(f) GDPR. Logs are retained only for the period reasonably required for these purposes, unless a security incident or legal obligation requires longer retention.

Cookies and local storage

Cookies are small files stored on your device. Similar technologies, such as local storage, may retain settings or identifiers in your browser. IskraCore may use two general categories:

• Strictly necessary technologies required to provide a requested service, remember privacy choices, protect forms or maintain website security.
• Optional technologies used for analytics, personalisation, advertising or consent-based third-party content.

Optional technologies are used only after valid consent where Austrian and EU law requires it. The legal basis for the related personal-data processing is Article 6(1)(a) GDPR. You may refuse optional cookies or withdraw consent at any time through the cookie banner or cookie settings. Withdrawal does not affect processing carried out before it.

Your browser can also delete or block cookies. Blocking strictly necessary technologies may affect website functions that depend on them.

Google Analytics 4

Where enabled, and only after you consent, IskraCore may use Google Analytics 4 (GA4), provided in Europe by Google Ireland Limited, to understand how readers use the website. Analytics helps us evaluate page performance, audience patterns and technical issues without needing to identify individual readers by name.

Depending on configuration and your consent, GA4 may process:

• page views, sessions, navigation paths and interaction events;
• browser, device category, operating system and screen information;
• approximate location derived from network information;
• campaign or referring-source information; and
• consent status and pseudonymous online identifiers.

Google states that raw IP addresses are used at collection for purposes such as coarse location and protection against spam, and are then discarded rather than associated with Analytics user identifiers. We configure GA4 user and event data retention to no longer than 14 months where that setting applies. Aggregated reports may remain available for longer.

The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw it at any time in the cookie settings. You can also review Google’s Privacy Policy and the optional Google Analytics opt-out tool.

Contact forms and email

If you contact IskraCore, we process the information you provide, such as your name, email address, organisation, message, attachments and relevant technical metadata. Required form fields should be marked as such.

We use this information to answer your request, assess editorial or partnership proposals, prevent form abuse and maintain a record of the conversation. The legal basis is Article 6(1)(b) GDPR where the message concerns a contract or pre-contractual request, and otherwise our legitimate interest under Article 6(1)(f) GDPR in handling relevant communications and protecting our forms.

Routine correspondence is generally deleted or anonymised within 12 months after the matter is resolved. We may retain it longer where necessary for contractual records, legal claims, tax or other statutory duties.

Email subscriptions

If IskraCore offers a newsletter and you subscribe, we process your email address, subscription status, consent timestamp and technical confirmation data. We may use a double-opt-in process to verify the subscription and document consent.

The legal basis is your consent under Article 6(1)(a) GDPR. Every marketing email will provide an unsubscribe option. After withdrawal, we may retain a minimal suppression record to ensure that the address is not added again by mistake and to demonstrate compliance.

Comments and community features

If comments or similar community features are enabled, we may process the name or alias you choose, email address, comment content, IP address, timestamp and anti-spam information. Public fields and comment content may be visible to other visitors.

Processing is based on our legitimate interests in providing moderated discussion, preventing abuse and protecting the publication. Do not include sensitive personal information in a public comment. We may remove content that violates our rules or legal obligations.

Embedded and external content

Articles may contain video, social-media posts, audio, maps or other content supplied by third parties. Where required, these embeds should remain blocked until you consent. Loading an embed can disclose your IP address, device data, requested page and existing third-party cookies to its provider.

Third-party providers process data under their own privacy terms. You can read an article without activating optional embedded content unless that content is essential to the specific service you request.

External and affiliate links

IskraCore may link to retailers, developers, publishers and other external services. Some links may be affiliate links, meaning IskraCore can receive a commission if you complete a qualifying action after clicking. The destination service may record the referral and process data under its own policy.

IskraCore does not receive your payment-card details merely because you follow an external link. Transactions are handled directly by the relevant retailer or payment provider.

Who may receive data

We share personal data only where necessary for the purposes described in this policy. Possible recipients include:

• Hostinger and other hosting, content-delivery or infrastructure providers;
• email, contact-form, anti-spam and newsletter service providers;
• analytics, consent-management and embedded-content providers, where enabled;
• professional IT, security, accounting or legal advisers bound by appropriate duties; and
• public authorities or courts where disclosure is legally required.

Service providers acting on our behalf receive only the data needed for their task and are required to protect it through contractual and organisational safeguards.

International data transfers

Some providers may process data outside Austria or the European Economic Area. Where this occurs, we rely on a lawful transfer mechanism, such as an adequacy decision, approved Standard Contractual Clauses or another safeguard recognised by Chapter V GDPR. Additional technical or organisational safeguards are used where appropriate.

You may contact us for more information about the safeguard relevant to a particular service.

How long data is kept

We do not keep personal data longer than necessary for its original purpose. The exact period depends on the data, legal duties, security needs and whether information is required to establish or defend a legal claim.

Data may be deleted, anonymised or aggregated at the end of the applicable period.

Your privacy rights

Subject to the conditions and exceptions in the GDPR, you may have the right to:

• receive information about how your data is processed;
• request access to and a copy of your personal data;
• correct inaccurate or incomplete data;
• request erasure of data;
• restrict processing in certain circumstances;
• receive portable data where the right to portability applies;
• object to processing based on legitimate interests; and
• withdraw consent at any time for future processing.

Where processing is based on legitimate interests, you can object on grounds relating to your particular situation. We do not make decisions about readers based solely on automated processing that produce legal or similarly significant effects.

Right to complain

If you believe your personal data has been processed unlawfully, you may lodge a complaint with the Austrian Data Protection Authority or the competent supervisory authority in your country of residence, workplace or the place of the alleged infringement.

How data is protected

We use proportionate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures may include encrypted transmission, access controls, software updates, backups, security monitoring and carefully selected service providers.

No internet service can guarantee absolute security. If you believe you have found a security issue affecting IskraCore, please contact us promptly and avoid publicly disclosing details before we can investigate.

Children’s privacy

IskraCore is a general-audience technology publication and is not directed specifically at children. We do not knowingly ask children to provide personal data for targeted marketing. If you believe a child has submitted personal data inappropriately, contact us so that we can review and, where required, delete it.

Changes to this policy

We may update this Privacy Policy when our services, providers or legal obligations change. The effective date at the top of the page identifies the current version. Material changes will be communicated through an appropriate notice on the website where required.