Privacy Policy

1. Data Controller & Overview

The data controller responsible for processing data on this website under the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz – DSG) is the operator identified in our Legal Notice / Impressum.

We respect your privacy. This website is engineered to operate without tracking cookies, meaning no cookie consent banner is required under Austrian telecommunications law (§ 165 (3) TKG 2021).

2. Web Hosting & Server Log Files

When you visit our website, our web server (hosted via dedicated server infrastructure / WordOps) automatically logs standard technical connection data sent by your browser:

  • IP address of the accessing device
  • Date and time of request
  • Requested URL/file
  • Volume of data transferred
  • Browser type/version and operating system

Purpose & Legal Basis: This processing is based on our legitimate interest (Art. 6(1)(f) GDPR) in ensuring server security, system stability, and defending against malicious traffic or cyberattacks.

Retention: Server log files are stored for a maximum of 14 to 21 days for security purposes and are automatically deleted thereafter.

3. Content Delivery & Security (Cloudflare)

To optimize loading times and protect our infrastructure against cyberattacks (such as DDoS attacks), we use services provided by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare acts as a reverse proxy/CDN. Data transfers to third countries are safeguarded using EU Standard Contractual Clauses (SCCs).

  • Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) in maintaining a fast, reliable, and secure online presence.

4. Contact Form & Abuse Prevention (Cloudflare Turnstile)

When you submit an inquiry via our contact form or email, the provided information (e.g., name, email address, message contents) is processed strictly to handle and respond to your request.

By checking the consent box and submitting the form, you explicitly consent to the processing of your data (Art. 6(1)(a) GDPR) for the purpose of handling your inquiry and discussing your project.

Bot Protection (Turnstile):
To prevent automated spam submissions, we use Cloudflare Turnstile. The Turnstile script is dynamically loaded only when you navigate near or interact with the contact form (Lazy Loading). Turnstile evaluates browser environment signals to distinguish human visitors from automated bots without setting tracking cookies in your browser.

  • Legal Basis: Art. 6(1)(a) GDPR (Consent) & Art. 6(1)(b) GDPR (Pre-contractual measures), as well as Art. 6(1)(f) GDPR (Legitimate interest in protecting our contact channels from spam and abuse).
  • Retention: Contact inquiry data is deleted once your request has been fully resolved, unless statutory record-keeping obligations require longer retention.

5. Website Analytics (Umami Analytics)

We use the open-source analytics platform Umami to collect anonymous usage statistics for performance optimization.

  • Privacy by Design: Umami is self-hosted on our own servers. It sets no cookies and does not store personal data or persistent identifiers.
  • IP addresses are processed in an aggregated, fully anonymized manner, ensuring individual visitors cannot be tracked across sessions or websites.
  • Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR) in evaluating basic website metrics to improve our services.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure / "Right to be forgotten" (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

If you believe that the processing of your data violates data protection legislation, you have the right to lodge a complaint with a supervisory authority. In Austria, the responsible authority is:

Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna, Austria
Phone: +43 1 52 152-0 | Email: [email protected] | Website: https://www.dsb.gv.at