The protection of your personal data is important to us. This Privacy Policy explains what personal data is processed when you visit goodfastwebsites.com and use our services, the purposes for which such data is processed, and the rights available to you.
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
RCS – Resource Connect Services e.U.
trading under the brand Good Fast Websites
Schanzstraße 55/3
1140 Vienna
Austria
Company Register Number: FN 628787 m
VAT ID: ATU82689707
Email: hello@goodfastwebsites.com
Website: goodfastwebsites.com
Good Fast Websites is a brand of RCS – Resource Connect Services e.U.
We process personal data only to the extent necessary to operate this website, respond to enquiries, provide our services, comply with legal obligations, or where you have consented to the relevant processing.
Depending on the processing activity, we rely in particular on the following legal bases:
Where information is accessed on or stored on your device, we also take into account the applicable provisions of the Austrian Telecommunications Act 2021 (TKG 2021), in particular Section 165(3) TKG 2021.
Our website and the email infrastructure used for Good Fast Websites are hosted by Verpex on servers in the United Kingdom.
When you access our website, technically necessary data may be processed. This may include, in particular:
This processing is carried out to provide the website technically, ensure its stability and security, and detect technical errors and abusive access.
The legal basis is our legitimate interest pursuant to Article 6(1)(f) GDPR in the secure and reliable operation of our website.
Under the current configuration, server and access logs are generally retained for 30 days.
Daily incremental backups of the website are also created and are generally retained for up to 90 days.
The United Kingdom is currently covered by an adequacy decision of the European Commission pursuant to Article 45 GDPR.
If you contact us by contact form or email, we process the information you provide in order to respond to your enquiry.
This may include, in particular:
Information entered through our contact form is transmitted to our business email address.
Under our current technical configuration, contact-form submissions are not additionally stored in the WordPress database.
The email infrastructure used by Good Fast Websites is provided by Verpex.
Where your contact relates to a specific enquiry about our services or a potential business relationship, processing is carried out in particular on the basis of Article 6(1)(b) GDPR.
For other enquiries, processing is based on our legitimate interest in handling business communications pursuant to Article 6(1)(f) GDPR.
The information is retained only for as long as necessary to deal with your enquiry, manage any resulting business relationship, or comply with applicable legal retention and documentation requirements.
Our website uses cookies and similar technologies.
Cookies are small pieces of information that may be stored in your browser or on your device.
We distinguish in particular between:
Technically necessary cookies may be used without prior consent where they are strictly necessary to provide a function expressly requested by you or for the secure technical operation of the website.
Non-essential cookies and similar technologies are generally activated only after you have provided the relevant consent through our cookie banner.
You can reject non-essential cookies and subsequently change your selection or withdraw consent through the cookie settings.
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
We use CookieYes, a service provided by CookieYes Limited, United Kingdom, to manage your cookie preferences.
CookieYes allows us to store and document your choices regarding the different cookie categories.
For this purpose, a technically necessary cookie is used in particular to store your consent or rejection decision.
As part of consent management, information concerning your consent decision may be processed, including, for example:
Where strictly necessary to manage your consent decision, the storage of cookie preferences on your device is carried out in accordance with Section 165(3) TKG 2021.
The related processing of personal data is carried out in particular to manage and document your consent decision and to comply with applicable data-protection accountability requirements.
We use Google reCAPTCHA v2, a service provided by Google, to protect our contact form against automated access, spam, fraud and other forms of abuse.
Technically necessary information may be processed in order to identify automated or abusive access. This may include, in particular, IP-related information, browser and device information, and interaction data required for the security check.
Under our current technical configuration, reCAPTCHA is used as a security feature of the contact form. The contact form can therefore also be used if you reject optional functional, analytics or marketing cookies.
Under our current configuration, the use of reCAPTCHA does not activate optional YouTube, analytics or marketing services.
Under the current contractual framework, Google processes reCAPTCHA customer data as a processor for the relevant reCAPTCHA customer.
The processing is carried out to protect our contact form and systems against spam, fraud and automated abuse. The legal basis for the processing of personal data is our legitimate interest pursuant to Article 6(1)(f) GDPR in securely providing our contact form and protecting our systems.
Our website may contain embedded videos from YouTube, a service provided by Google.
Under our current technical configuration, we use YouTube embeds in privacy-enhanced mode.
YouTube content is not loaded merely by visiting the relevant page without the required consent.
If you reject the relevant optional services, the embedded YouTube video will not be loaded and, under our current technical configuration, the corresponding connection to YouTube for the video will not be established.
Only after you have provided the relevant consent can YouTube content be loaded and data transmitted to Google or YouTube.
This may include technical data, your IP address, browser and device information, and information relating to your use of the embedded video. Depending on the relevant Google/YouTube configuration, cookies or similar technologies may also be used for functional, analytics or advertising purposes.
The legal basis for activating non-essential YouTube content and the related processing is your consent pursuant to Article 6(1)(a) GDPR, together with the applicable provisions of the TKG 2021.
You can withdraw your consent at any time with effect for the future through the cookie settings.
The Google fonts used on our website are, under our current technical configuration, hosted locally on our web server.
Simply loading these fonts therefore does not establish a connection to Google Fonts.
Our website contains an external link to WhatsApp and may contain links to other external websites or social-media platforms.
The WhatsApp link used on our website is an external link. A connection to WhatsApp through this link is established only when you actively click it.
If you subsequently contact us through WhatsApp, WhatsApp may process information including your telephone number, profile name, the content of your message and other information you provide.
Using WhatsApp to contact us is voluntary. You may alternatively contact us by email or through our contact form.
When you follow other external links, the privacy policies of the respective external providers apply.
The use of certain technical service providers may involve the processing of personal data outside Austria or outside the European Economic Area (EEA).
Under our current configuration, our hosting and email provider Verpex processes the relevant data in the United Kingdom. The United Kingdom is currently covered by an adequacy decision of the European Commission pursuant to Article 45 GDPR.
In connection with services provided by internationally operating providers, particularly Google reCAPTCHA or YouTube, processing of personal data in other countries cannot be completely excluded.
Where personal data is transferred to a country outside the EEA, such transfers are carried out in accordance with the requirements of Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision or other safeguards or transfer mechanisms permitted under the GDPR
.
We generally retain personal data only for as long as necessary for the relevant processing purpose or for as long as statutory retention obligations apply.
Under our current technical configuration, the following applies in particular:
Once the relevant purpose no longer applies and applicable statutory retention periods have expired, the relevant data is deleted or removed as part of the regular deletion and backup cycles, unless there is another legal basis for continued processing.
We use external service providers to operate our website and provide its associated functions.
Under the current technical configuration, these include in particular:
Where a service provider processes personal data on our behalf and the applicable legal requirements are met, processing is carried out on the basis of an appropriate agreement pursuant to Article 28 GDPR.
We do not sell personal data to third parties or disclose it for third-party advertising purposes without an appropriate legal basis.
Subject to the conditions set out in the GDPR, you have in particular the following rights:
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
Where processing is based on our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to such processing under the conditions set out in Article 21 GDPR.
To exercise your rights, please contact us at:
If you believe that the processing of your personal data infringes the GDPR or other applicable data-protection legislation, you have the right to lodge a complaint with a data-protection supervisory authority.
The Austrian data-protection supervisory authority is:
Austrian Data Protection Authority
(Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria
Website: www.dsb.gv.at
We implement appropriate technical and organisational measures to protect personal data, taking into account the relevant risks, against loss, unauthorised access, alteration or unauthorised disclosure.
These measures include appropriate technical access restrictions and measures designed to protect our website and contact form against automated abuse.
Please note that, despite appropriate security measures, no transmission of data over the internet can be completely protected against all risks.
We may update this Privacy Policy if our website, the services we use or applicable legal requirements change.
The current version published on goodfastwebsites.com applies.
Last updated: September 2026
RCS – Resource Connect Services e.U.
GLN: 9110036105684
UID : ATU82689707
FN: FN 628787 m
FB Gericht: HG Wien
Sitz:
GESCHÄFTSANSCHRIFT: Schanzstraße 55/3, 1140, Wien
Tel: +43 660 962 6910
E-Mail: ranil@rcsaustria.com
Geschäftsführer: Ranil Samarawickrema BSc MA MA