Privacy policy

This is a translation for convenience. In case of doubt, the German version applies.

1. Controllers

Joint controllers within the meaning of the GDPR are:

Petra Kamper, [address to be added], [EMAIL]
Stefan Kirchsteiger, [address to be added], [EMAIL]

You may exercise your rights against either of us; we inform each other internally. Full details are in the imprint.

2. What this website does not do

• No cookies — not even "strictly necessary" ones.
• No analytics or tracking tools, no audience measurement.
• No external fonts, maps, videos or social media elements. Only files from our own server are loaded.
• No newsletter, no advertising profiles, no sharing for advertising purposes.

There is therefore no cookie banner: there is nothing to consent to.

3. Server log files

When you access this website, the hosting provider automatically stores data in log files: IP address, date and time, the file requested, the amount of data transferred, browser and operating system identifiers and, where applicable, the previously visited page.

The legal basis is Art. 6(1)(f) GDPR — our legitimate interest in the technically secure and trouble-free operation of the website. The data is deleted after [retention period of the hosting provider — typically 7–30 days] and is not merged with other data sources.

Hosting by: [name and address of the hosting provider to be added]. A data processing agreement pursuant to Art. 28 GDPR is in place.

4. Contact form and email

When you contact us via the form or by email, we process the details you provide — name, email address, and where applicable company, phone number, topic and the content of your message — solely in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). Providing this information is voluntary; without a name, email address and message, however, we cannot answer you.

To deliver form submissions we use [name of the form service, e.g. Web3Forms, including provider and registered office — to be added] as a processor. The service receives the form data and forwards it to us by email. [If the provider is based outside the EU: add the basis for the third-country transfer.]

We retain enquiries and the resulting correspondence for as long as necessary to handle them. If an engagement results, the statutory retention periods apply (in Austria generally seven years pursuant to § 132 BAO). Enquiries that do not lead to an engagement are deleted after twelve months at the latest.

5. Spam protection

The form contains a field invisible to humans that detects automated submissions. No additional personal data is collected and no cookies are set in the process.

6. Recipients of your data

Your data is received only by the controllers named above, the hosting provider and the form service. It is passed to other third parties only where we are legally obliged to do so.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Any consent given may be withdrawn at any time with effect for the future.

An informal message to either of the email addresses above is sufficient.

8. Right to lodge a complaint

If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the supervisory authority:

Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
dsb.gv.at

9. Changes

We update this policy when the website or the legal situation changes. Last updated: [date to be added].