Privacy Policy

Protecting personal data is important to me. This website is deliberately built to
collect as little data as possible: it embeds no external services – no
fonts, maps, videos, analytics or advertising. No cookies are set for
analytics or marketing purposes.

Controller

Server log files

When this website is accessed, the web server automatically records data transmitted
by your browser:

• IP address of the accessing device
• date and time of access
• address requested and volume of data transferred
• server status message
• referring page and browser identification

Purpose and legal basis: This processing serves to deliver the website
and to ensure the stability and security of the system. The legal basis is the legitimate
interest in secure and functional operation pursuant to Article 6(1)(f) GDPR.

Retention: Log files are deleted automatically after no more than
14 days, unless they are required to investigate a specific security incident.

Hosting

The website runs on a server operated by me in the data centre of Hetzner Online GmbH,
Industriestrasse 25, 91710 Gunzenhausen, Germany. The data remains within the European
Union. A data processing agreement pursuant to Article 28 GDPR is in place with the provider.

Contacting me

If you contact me by email or telephone, your details are processed in order to handle
your enquiry and any follow-up questions. The legal basis is Article 6(1)(b) GDPR for
contract-related enquiries, otherwise the legitimate interest in responding pursuant to
Article 6(1)(f) GDPR. This data is deleted once it is no longer required and no statutory
retention obligations apply.

Technically necessary cookies

No cookies are set for visitors. Only when logging into the protected administration
area does the underlying system (WordPress) set technically necessary session cookies.
These concern the website operator only.

Disclosure of data

Your data is not passed on to third parties unless I am legally obliged to do so or
disclosure is necessary to enforce legal claims.

Your rights

You have the following rights in relation to the controller:

• access to the data processed (Article 15 GDPR)
• rectification of inaccurate data (Article 16 GDPR)
• erasure (Article 17 GDPR)
• restriction of processing (Article 18 GDPR)
• data portability (Article 20 GDPR)
• objection to processing (Article 21 GDPR)

An informal message to the email address above is sufficient to exercise these rights.

Right to lodge a complaint

If you believe that the processing of your data infringes data protection law, you may
lodge a complaint with the supervisory authority:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
www.dsb.gv.at