Privacy Policy

1. Hosting and server log files

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes technical access data as a processor on my behalf, under a data processing agreement. Any transfer of data to the USA is safeguarded by the EU Standard Contractual Clauses.

Each time the website is accessed, access data (server log files) is recorded automatically: IP address, date and time of access, the page/file requested, the amount of data transferred, the browser and operating system used, and the previously visited page (referrer). This data is technically necessary to deliver the site and to ensure its stability, security and protection against misuse.

The legal basis is my legitimate interest in the secure and reliable operation of the website pursuant to Art. 6(1)(f) GDPR. Log data is stored only for as long as necessary for these purposes and then deleted.

2. Cookies, local storage and web analytics

Strictly necessary: to remember your cookie choice, an entry is stored in your browser's local storage. It contains no personal data, serves solely to remember your selection, and never leaves your browser. The legal basis is Art. 6(1)(f) GDPR.

Web analytics: after your explicit consent ("Accept all" in the cookie banner) I use Google Analytics 4, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It sets cookies (e.g. _ga, _ga_<ID>) and processes usage data (e.g. pages viewed, time on site, approximate location based on the truncated IP address). The IP address is truncated (anonymised). Data may be transferred to Google LLC servers in the USA, safeguarded by the EU Standard Contractual Clauses.

The legal basis for web analytics is your consent pursuant to Art. 6(1)(a) GDPR. Before your consent, no analytics cookies are set; Google Analytics then transmits only anonymous, cookie-less signals (Google Consent Mode) that cannot be linked to you personally. Cookies are set only after your consent. You can withdraw your consent at any time with effect for the future by choosing "Essential only" in the cookie banner or deleting the cookies in your browser. More information: https://policies.google.com/privacy. Details of the cookies used are in the cookie policy.

3. Contact and the contact form

If you use the contact form or send me an email, I process the data you provide in order to handle and respond to your enquiry. The form processes the following data: name, business email address, company, phone number (optional), your area of interest and your message.

The legal basis is the performance of pre-contractual measures or a contract pursuant to Art. 6(1)(b) GDPR and, where you explicitly consent (consent checkbox), Art. 6(1)(a) GDPR. You may withdraw any consent given at any time with effect for the future.

Your data is deleted once your enquiry has been fully handled and no statutory retention obligations apply. It is not passed on to third parties, except to technical service providers (e.g. email/hosting providers) acting on my behalf and on my instructions.

4. Fonts

This website uses fonts (Google Fonts) that are embedded and served locally, i.e. from the server itself. When the site is loaded, no connection is made to Google's servers and no personal data is transmitted to Google.

5. External links and social networks

This website contains links to external services, in particular to my LinkedIn profile. Data is only transmitted to the respective provider once you actively click such a link. LinkedIn's own privacy terms apply to processing by LinkedIn (LinkedIn Ireland Unlimited Company). I have no control over the processing carried out by these providers.

The video embedded on the home page is served directly from this website; no content is loaded from third-party platforms (e.g. YouTube).

6. Your rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

7. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with a supervisory authority, in particular the Austrian Data Protection Authority (dsb.gv.at) and, in Romania, the National Supervisory Authority for Personal Data Processing (ANSPDCP, dataprotection.ro).

8. Data security

Your data is transmitted encrypted over a TLS/SSL connection (indicated by the padlock symbol and "https" in the address bar). I take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

9. Changes to this privacy policy

I update this privacy policy whenever changes to data processing or the legal situation make it necessary. The current version published on this page applies.