Privacy policy

Controller

Michael David Guggenbichler Linzerstraße 17, 4100 Ottensheim, Austria [email protected]

No obligation to provide data

You are not required to provide personal data to browse this website. Technical data (such as IP address and request metadata) are processed automatically when your browser loads pages, as is standard on the internet.

Legal bases (including legitimate interests)

For delivering the site via CDN, security, and abuse prevention (Cloudflare), and for aggregate web statistics (Umami), we rely on Article 6(1)(f) GDPR (legitimate interests): running a secure, available site and understanding usage in the aggregate. We consider your rights and expectations; data use is limited to what is necessary. Where we rely on legitimate interests, you have the right to object under Article 21(1) GDPR to processing of your personal data, including to analytics—see Analytics below for how you can limit the analytics script. Providing the pages without edge hosting and security processing is not technically practical.

Data collected

International transfers

Cloudflare Inc. is based in the United States. We use their services under a Data Processing Agreement that incorporates Standard Contractual Clauses (SCCs) approved by the EU Commission, which provide appropriate safeguards for transfers under Chapter V GDPR. Umami analytics data is processed on self-hosted infrastructure under our control (see below); we do not send analytics to a separate US analytics SaaS.

Processors

Cloudflare Inc. provides infrastructure and CDN; a Data Processing Agreement and Standard Contractual Clauses apply—see Cloudflare customer DPA . How Cloudflare processes personal data in connection with their services is described in their privacy policy . Umami is self-hosted at umami.mdg-labs.dev; analytics events are not processed by a separate commercial analytics provider.

Analytics storage and location

Umami runs on infrastructure in the European Economic Area (EEA). Event and statistics data are stored in a database controlled by MDG Labs. Access is restricted; we delete or aggregate data when it is no longer needed for the purposes above, and in any case you may request erasure where applicable under Articles 17 and 21 GDPR.

Your rights

Under Articles 15–21 GDPR you may request access, rectification, erasure, restriction of processing, data portability, and object to processing (including to processing based on legitimate interests, Article 21). You also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR—in Austria, the Datenschutzbehörde (DSB), see above. Contact: [email protected]. To protect personal data, we may ask you to verify your identity before responding to requests that concern your information.

Automated decision-making

We do not use automated decision-making, including profiling within the meaning of Article 22 GDPR, in connection with this website.

Supervisory authority

Datenschutzbehörde (DSB) Barichgasse 40–42, 1030 Vienna, Austria dsb.gv.at

No cookies; self-hosted fonts

This site sets no tracking or analytics cookies. Fonts are self-hosted (Fontsource); there are no Google Fonts or third-party font CDN requests.

Analytics

We use Umami, self-hosted at umami.mdg-labs.dev, to measure aggregate traffic (e.g. page views, referrers, and coarse location). Umami is configured for privacy-friendly measurement; it does not use analytics cookies for this site. You can use standard browser controls (block scripts, ad blockers, or private browsing) to limit loading of the analytics script; objecting under Article 21 GDPR to analytics based on legitimate interests can also be exercised by contacting [email protected].