A. Controller
B. General data processing
Personal data is processed only where necessary for operating this website, ensuring its security, handling communication, or initiating and performing pre-contractual or contractual services.
No profiling takes place.
No automated decision-making takes place.
C. Hosting and server log files
This website is hosted on a VPS of Contabo GmbH, Welfenstraße 22, 81541 Munich, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with Contabo.
When the website is accessed, technical request data may be processed.
Processing takes place for technical delivery of the website, stable and secure operation, abuse prevention, and error analysis.
The legal basis is Art. 6(1)(f) GDPR.
Server log data is stored only for as long as necessary for these purposes and is then deleted or anonymized unless statutory retention duties or a security-related review require otherwise.
- IP address
- date and time of the request
- requested URL or file
- referrer URL, if transmitted
- user agent and browser information
- HTTP status code
- transferred data volume
D. Contact requests / contact form
When the contact form is used, the website processes name, reply email, an optional project or inquiry category, and the message.
The technical field "company" is used as a honeypot for spam prevention. It is not intended for regular users and should remain empty.
Processing takes place to answer the inquiry, handle project communication, and, where applicable, initiate or perform pre-contractual or contractual steps.
The legal basis is Art. 6(1)(b) GDPR where the inquiry relates to pre-contractual or contractual steps. Otherwise, processing is based on Art. 6(1)(f) GDPR for general communication, spam prevention, abuse prevention, and technical security.
Contact form inquiries are forwarded for processing by email to the configured recipient address.
Transmission takes place via the technical infrastructure used for website and email operations.
Inquiry data is deleted when it is no longer required for handling the request unless statutory retention duties apply.
E. Functional cookies / preferences
The website currently uses functional preferences only to retain the selected language and theme between page loads.
For this purpose, the cookies "site-language" and "site-theme" are used with a storage duration of up to 12 months.
Processing is based on Art. 6(1)(f) GDPR and on the technical necessity of providing this function.
No analytics, marketing, or tracking cookies are currently used.
No cookie banner is displayed because only necessary or functional preferences are currently used.
F. No analytics or marketing services
No analytics, tracking, or marketing services are currently integrated into this website.
No third-party embeds such as maps or video services are loaded without prior user interaction.
If such services are added later, this privacy notice and any required consent handling must be updated before activation.
G. Data subject rights
Subject to the statutory requirements, data subjects have the following rights in particular:
- access to processed personal data
- rectification of inaccurate data
- erasure of personal data
- restriction of processing
- data portability, where applicable
- objection to processing based on legitimate interests
- withdrawal of consent with future effect where processing is based on consent
- complaint to a supervisory authority
H. Supervisory authority
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Austria
Website: dsb.gv.at
I. No automated decision-making
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.