Privacy policy

Controller

Michael David Guggenbichler Linzerstraße 17, 4100 Ottensheim, Austria hello@mdg-labs.dev

No obligation to provide data

You are not required to provide personal data to browse this website. Technical data (such as IP address and request metadata) are processed automatically when your browser loads pages, as is standard on the internet.

Legal bases (including legitimate interests)

For delivering the site via CDN and hosting, security, and abuse prevention (Bunny, netcup), and for aggregate web statistics (Umami), we rely on Article 6(1)(f) GDPR (legitimate interests): running a secure, available site and understanding usage in the aggregate. We consider your rights and expectations; data use is limited to what is necessary. Where we rely on legitimate interests, you have the right to object under Article 21(1) GDPR to processing of your personal data, including to analytics—see Analytics below for how you can limit the analytics script. Providing the pages without CDN, hosting and security processing is not technically practical.

Data collected

International transfers

Both processors named below, BunnyWay d.o.o. (Slovenia) and netcup GmbH (Germany), are based in the European Union. Bunny may answer requests from CDN edge locations outside the EU; Bunny covers this under its GDPR terms (see the processor section below). Umami analytics data is processed on self-hosted infrastructure under our control (see below); we do not send analytics to a separate US analytics SaaS.

Processors

BunnyWay d.o.o. (Slovenia, EU), which operates bunny.net, provides the CDN and DNS for mdg-labs.dev and processes connection data on our behalf when you request pages. See its GDPR information and privacy policy.

netcup GmbH (Germany) hosts the servers that run the site and our self-hosted Umami, and processes connection data on our behalf. See its privacy policy. Umami is self-hosted at umami.mdg-labs.dev; analytics events are not processed by a separate commercial analytics provider.

Analytics storage and location

Umami runs on a netcup GmbH server in the EU. Event and statistics data are stored in a database controlled by MDG Labs. Access is restricted; we delete or aggregate data when it is no longer needed for the purposes above, and in any case you may request erasure where applicable under Articles 17 and 21 GDPR.

Your rights

Under Articles 15–21 GDPR you may request access, rectification, erasure, restriction of processing, data portability, and object to processing (including to processing based on legitimate interests, Article 21). You also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR—in Austria, the Datenschutzbehörde (DSB), see above. Contact: hello@mdg-labs.dev. To protect personal data, we may ask you to verify your identity before responding to requests that concern your information.

Automated decision-making

We do not use automated decision-making, including profiling within the meaning of Article 22 GDPR, in connection with this website.

Supervisory authority

Datenschutzbehörde (DSB) Barichgasse 40–42, 1030 Vienna, Austria dsb.gv.at

No cookies; self-hosted fonts

This site sets no tracking or analytics cookies. Fonts are self-hosted (Fontsource); there are no Google Fonts or third-party font CDN requests.

Analytics

We use Umami, self-hosted at umami.mdg-labs.dev, to measure aggregate traffic (e.g. page views, referrers, and coarse location). Umami is configured for privacy-friendly measurement; it does not use analytics cookies for this site. You can use standard browser controls (block scripts, ad blockers, or private browsing) to limit loading of the analytics script; objecting under Article 21 GDPR to analytics based on legitimate interests can also be exercised by contacting hello@mdg-labs.dev.