Privacy Policy

This website and the GoClearBalance platform are operated by Stefan Wölflinger (hereinafter "HoTechOlution" or "we" or "us"). Protecting your privacy and processing your personal data in compliance with the law (EU Regulation No. 679/2016 (GDPR), DSG 2000, DSG 2018, and TKG 2003) is important to us. As the data controller, we want to make the processing transparent and inform you in the following privacy policy about how your personal data is processed in connection with this website and the GoClearBalance service.

Personal data includes all information relating to an identified or identifiable person, meaning information that can be individually assigned to you. Examples include your name, address, phone number, email address, or IP address.

Consent

By using our services and granting consent within the meaning of this statement, you confirm that you are at least 14 years old and capable of giving valid consent, or that effective consent has already been given by your legal guardian or your custodian.

Data Controller

The controller for your personal data is:

Contacting Us

By entering your personal data in one of our contact forms, you consent to its transmission, storage, and processing by us for the duration of the handling of your specific request. This particularly applies to inquiries via contact form and emails sent to us. We need this data to process your request and will store your IP address for evidence purposes (GDPR Art 17 Sec 3 lit e). The data will be stored as long as necessary to handle any supplementary or subsequent questions from you or us.

Processing Within the GoClearBalance Service

GoClearBalance is a SaaS platform for automated dunning management in the hospitality industry. In the course of using the service, the following categories of data are processed:

• Contact details of users (name, email address, role within the business)
• Hotel operational and booking data retrieved via the Apaleo interface
• Guest data (name, contact details, outstanding amounts) within the dunning process
• Log data on completed dunning steps and communications

This data is processed on the basis of the usage agreement concluded between you and us (Art 6 Sec 1 lit b GDPR) and our legitimate interest in proper service delivery (Art 6 Sec 1 lit f GDPR). Where personal data of hotel guests is processed, we conclude a data processing agreement with the customer.

Waitlist ("Launch notification")

Visitors to our website can join a waitlist to be notified when GoClearBalance opens to new customers. The personal data collected is used solely to send you a single one-time email notification at public launch.

We process the following categories of data for this purpose:

• Email address
• Language preference (e.g., en, de)
• Submission source (auto-opened modal on the landing page, or registration page)
• Timestamp of consent
• IP address and user agent at the time of sign-up (for audit purposes)

The legal basis is your explicit consent under Art. 6(1)(a) GDPR, given by ticking the consent checkbox on the waitlist form. The data is not shared with any third party and is stored on the same infrastructure as the rest of the service (see the "Data Controller" section above).

Data is deleted when you withdraw your consent or — at the latest — 30 days after the public launch email has been sent, whichever is earlier. You may withdraw your consent at any time by contacting the data controller at the email address given in the "Data Controller" section above.

General Information on Processing Your Personal Data

When you visit our website, your IP address, the start and end of your session, and other technical data about the visit are recorded for the duration of the session. This is necessary for technical reasons and thus constitutes a legitimate interest (Art 6 Sec 1 lit f GDPR).

Where our website provides the option to enter personal data, this is done on an explicitly voluntary basis with your consent. Any consent given to us can be revoked at any time without reason.

Cookies

Our website uses cookies. Only cookies that are strictly necessary for the functionality of the website are set when visiting our website (session cookies for authentication and CSRF protection). Otherwise, we process your personal data by setting cookies only after your explicit consent.

You can prevent the setting of cookies at any time through an appropriate setting in your browser. However, please note that disabling necessary cookies may prevent you from using all features of our website.

Your Rights Regarding Personal Data

You have the right to obtain information about your personal data, as well as to request the correction, deletion, restriction of processing, and data portability of your specified personal data. You can also object to the processing of your personal data in certain circumstances or revoke the previously given consent for processing, provided that no legal retention obligation on our part stands in the way.

You can direct these requests to the contact details provided above, stating your request. If you believe that the processing of your personal data is unlawful, please contact the competent supervisory authority. In Austria, this is the Austrian Data Protection Authority (DSB), Wickenburggasse 8-10, 1080 Vienna.

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are: browser type and version, operating system used, referrer URL, IP address, time of server request. This is necessary for technical reasons (Art 6 Sec 1 lit f GDPR) and serves evidence purposes (GDPR Art 17 Sec 3 lit e).

Storage Location and Duration

When you contact us, the data you provide will be stored for six months for the purpose of processing the request and in case of follow-up questions. We do not pass on this data without your consent. The data stored by our hosting provider Hetzner Online GmbH is retained for 14 days. We use third-party providers for backups where data is stored for up to five years.

Cloudflare

We use the Content Delivery Network (CDN) and security services provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare protects our website from attacks (DDoS protection, Web Application Firewall) and optimizes loading times. Traffic between your browser and our server is routed through Cloudflare's servers. In this process, Cloudflare may process your IP address, security protocols, and technical connection data.

The use of Cloudflare is based on our legitimate interest in providing our website securely and efficiently (Art. 6(1)(f) GDPR). For more information about data protection at Cloudflare, please visit: https://www.cloudflare.com/privacypolicy/.

Analytics on Our Marketing Pages (Cookie-Free)

On our public marketing pages (homepage, About, Privacy, Terms, Imprint) we operate a self-hosted, cookie-free analytics layer to understand how those pages are used. No cookies are set, no LocalStorage or SessionStorage is used, and no data is transmitted to any third party.

Per pageview we collect only the following:

• the requested URL path (e.g., /about)
• the hostname of the referring page (e.g., linkedin.com), without the full URL and without query parameters
• the country of origin derived from Cloudflare's CF-IPCountry header (two-letter ISO code). Your IP address itself is not stored for analytics purposes
• your browser language (en or de)
• a coarse classification of browser and device class (e.g., "Chrome", "Desktop")
• whether you reached certain scroll milestones on the page (25 %, 50 %, 75 %, 100 %)
• whether you stayed on the page for certain time thresholds (5 s, 30 s, 60 s, 120 s)
• which links and call-to-action buttons you clicked

Events on a page are correlated via a randomly generated identifier that exists only in your browser's memory for the duration of the pageview; it is neither stored as a cookie nor written to any browser storage. No cross-page tracking takes place, and no profile is built.

The legal basis is our legitimate interest in understanding how our marketing pages perform (Art. 6(1)(f) GDPR). Raw data (the fields above, per pageview) is retained for 14 days and then deleted. From the raw data we derive daily aggregates (counts only, with no personal reference) which are retained for up to 12 months to identify seasonal trends.

In the same way, we additionally log when and by which crawler our public technical files (sitemap.xml, llms.txt) are accessed. These records contain no personal data — only the crawler name (e.g., Googlebot, GPTBot, ClaudeBot), the country of origin as reported by Cloudflare, and the timestamp.

External Resources / Services

To design and display certain content on our website, we may incorporate resources and services from third parties (e.g., fonts). It is technically necessary for your IP address to be transmitted to the server of such a provider. We try to keep such access to a minimum (Art 6 Sec 1 lit f GDPR).

Last updated: April 2026