Last updated: October 2026

This Privacy Policy explains how we process personal data when you visit the Maany website (maany.io) or contact us through it.

1. Controller

The controller responsible for the processing of personal data in connection with this website is:

roc8 GmbH
Zollergasse 13/9
1070 Vienna
Austria
Email: weare@maany.io

2. General Information

We process personal data only where necessary to provide and secure our website, communicate with visitors, understand how our website is used, and comply with applicable legal obligations.

Depending on the relevant processing activity, processing is based on:

• steps taken at your request prior to entering into a contract pursuant to Art. 6(1)(b) GDPR;
• your consent pursuant to Art. 6(1)(a) GDPR;
• compliance with legal obligations pursuant to Art. 6(1)(c) GDPR; or
• our legitimate interests pursuant to Art. 6(1)(f) GDPR, in particular our interest in providing, securing, and improving our website and communicating with interested parties.

Where processing is based on your consent, you may withdraw your consent at any time with effect for the future.

3. Website Hosting and Webflow

Our website is created and hosted using services provided by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA ("Webflow").

When you access our website, technical information may be processed as necessary to deliver and secure the website. This may include:

• IP address;
• date and time of access;
• browser and device information;
• operating system;
• requested pages or resources;
• referring website; and
• technical connection and log data.

To deliver the website quickly and protect it against attacks and misuse, Webflow uses content delivery network and security services, including those of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare"), and Amazon CloudFront (Amazon Web Services). In this context, Cloudflare sets the strictly necessary session cookie _cfuvid, which is used to protect the website against excessive or abusive requests. It is deleted when you close your browser.

The legal basis for this processing is Art. 6(1)(f) GDPR, based on our legitimate interest in a secure, stable and fast website. Where information is stored on or accessed from your device, this is based on § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021), as it is strictly necessary to provide the website.

Webflow may process personal data in the United States. Where required, such transfers are based on applicable safeguards under data protection law, including the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.

4. Animation Library (jsDelivr)

The animated background on our home page uses the open-source library three.js, which is loaded from jsDelivr, a public content delivery network. When the library is loaded, your IP address and technical request data are transmitted to the operators of jsDelivr and their network partners (including Cloudflare and Fastly), which may process data outside the EU.

The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in a fast and reliable presentation of our website.

5. Contact Form

You may contact us using the contact form on this website.

When you submit the form, we process the information you provide: your name, email address, company or organization (optional), message content, and any other information you voluntarily provide. The form is processed through Webflow and forwarded to us by email.

We process this information to respond to your inquiry and, where applicable, to take steps requested by you in connection with a potential business relationship. Depending on the nature of your inquiry, the legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

We retain correspondence only for as long as necessary to process your inquiry and any resulting business relationship, or for as long as required by applicable legal retention obligations.

6. Google Analytics

Subject to your consent, we use Google Analytics 4 ("Google Analytics"), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), to understand how visitors use our website and to improve its content, performance, and user experience.

Google Analytics may process information such as:

• pages visited and interactions with the website;
• device and browser information;
• approximate geographic information;
• referring sources;
• session and timestamp information; and
• online identifiers.

Google Analytics is only loaded after you click "Accept all cookies" in our cookie banner. If you click "Reject all" or do not make a choice, no Google Analytics code is loaded and no Google Analytics cookies are set. Advertising and personalization features of Google are disabled.

After your consent, Google Analytics sets the cookies _ga and _ga_Z8BQFM2PF4, which are used to distinguish visitors and sessions and are stored for up to 2 years. According to Google, Google Analytics 4 does not log or store IP addresses. Analytics data is retained for 14 months and then deleted.

The legal basis for processing personal data is your consent pursuant to Art. 6(1)(a) GDPR. Where information is stored on or accessed from your device, this is based on your consent pursuant to § 165(3) TKG 2021.

You may refuse or withdraw your consent at any time through the Cookie Settings in the website footer. When you withdraw your consent, the Google Analytics cookies are deleted from your browser. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Google may also process data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Technologies that are strictly necessary for the operation, security, or functionality of the website are used without consent where permitted by law. Optional analytics technologies are activated only with your consent.

We use a custom consent mechanism that allows you to accept or reject analytics. We store your choice locally in your browser so that the website can remember your decision. You can change or withdraw your consent at any time through the Cookie Settings in the website footer.

8. International Data Transfers

Some service providers used in connection with our website — Webflow, Cloudflare, Amazon Web Services, jsDelivr and Google — are located in or may process personal data outside the European Union or European Economic Area, including in the United States.

Where required, we rely on legally recognized safeguards for such transfers, including the EU-U.S. Data Privacy Framework, where applicable, and/or the European Commission's Standard Contractual Clauses.

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected or as required by applicable law. The applicable retention period depends on the nature of the data, the purpose of processing, statutory retention obligations, and whether the data is required for the establishment, exercise, or defense of legal claims.

10. Your Rights

Subject to the requirements of applicable data protection law, you have the right to:

• request access to your personal data (Art. 15 GDPR);
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• receive certain personal data in a portable format;
• object to processing based on legitimate interests;
• withdraw consent at any time with effect for the future; and
• lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for us is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at.

To exercise your rights, please contact: weare@maany.io

11. Automated Decision-Making

We do not use personal data collected through this public website for decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Art. 22 GDPR.

12. Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

13. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to our website, technologies, processing activities, or applicable legal requirements. The current version is always available on this website.