kids don’t smoke.

this website and the instagram tool described below are run by kids don’t smoke, vienna, austria. contact for anything privacy-related: mgmt@gezua.com

no cookies, no analytics, no tracking.

hosting: the site is served by netlify, inc. (usa). to deliver pages, netlify processes technical request data (ip address, time, requested page, browser) in its server logs. basis: legitimate interest in running the site (art. 6(1)(f) gdpr).

fonts: the ibm plex fonts are loaded from google fonts (google ireland ltd.), which receives your ip address when a page loads. basis: art. 6(1)(f) gdpr.

spotify: the homepage embeds a spotify player (spotify ab, sweden). spotify receives your ip address and may set its own cookies when the player loads, under spotify’s own privacy policy.

contact form: if you use the form, your name, email address and message are stored by netlify and sent to us, only to answer you. deleted when the conversation is finished, at the latest after 12 months. basis: art. 6(1)(b) and (f) gdpr.

“kds reels poster” is a private app used only to manage the instagram account @kidsdontsmokeee↗︎. it is not offered to anyone else. it uses the instagram api to:

publish the account’s own reels
read view counts of the account’s own reels
read comments on the account’s own reels and post short replies to some of them
read direct messages sent to the account and send a short reply to some of them

when it reads a comment, it sees the comment text, the commenter’s username and the time. when it reads a direct message, it sees the message, the sender’s instagram id and the time. it does not keep any of these. it stores only the id of the comment or message and which reply was sent, so nothing is answered twice. no names, profile data, message texts or email addresses are stored.

storage: a private github repository (github, inc., usa), kept for at most 12 months. nothing is sold, shared or used for advertising. basis: legitimate interest in managing our own account and answering comments and messages (art. 6(1)(f) gdpr).

to have your data removed, see data deletion.

netlify and github are in the usa. transfers rely on the eu–us data privacy framework and standard contractual clauses.

you can ask for access, correction, deletion, restriction or a copy of your data, and object to processing, by email to mgmt@gezua.com. you can also complain to the austrian data protection authority, dsb.gv.at↗︎.