Privacy Policy

Protecting your personal data is important to me. I process your data solely on the basis of the statutory provisions of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). In this policy I inform you about the key aspects of data processing on my website.

1. Controller

2. Getting in touch

When you contact me via the contact form, email, phone or social media, your details (name, contact data, content of the enquiry) are stored by me in order to process the enquiry and in case of any follow-up questions.

Legal basis: Art. 6 Abs. 1 lit. b GDPR (contract or pre-contractual measures) and Art. 6 Abs. 1 lit. f GDPR (legitimate interest in efficient processing).

Retention period: Until the enquiry has been dealt with, and beyond that insofar as statutory retention obligations apply (e.g. 7 years under the UGB/BAO for business correspondence).

3. Hosting & server log files

This website is hosted by Netlify (Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA). When the website is accessed, data is automatically recorded in what are known as server log files: IP address, date and time, page accessed, referrer URL, browser type, operating system. This data serves technical operational security, error analysis and protection against misuse. On this basis, anonymous, server-side statistics on website usage may also be produced that do not identify individual visitors.

Netlify is a US-based provider. Insofar as personal data is transferred to the USA in this context, the transfer relies on appropriate safeguards within the meaning of Art. 44 ff. GDPR (in particular EU standard contractual clauses or a certification under the EU-US Data Privacy Framework).

Legal basis: Art. 6 Abs. 1 lit. f GDPR (legitimate interest in a secure and stable operation of the website).

4. Cookies & local storage

This website uses exclusively technically necessary cookies that are required for the operation of the site. No tracking or marketing cookies are used.

In addition, a functional entry is stored in your browser's local storage to remember your display preferences – the selected language (German/English) and the light or dark theme. This entry is only set when you actively choose it, remains solely on your device and contains no personal data. No consent is required for these technically necessary or functional storage operations under § 165 Abs. 3 TKG or Art. 5 Abs. 3 of the ePrivacy Directive.

5. Fonts

To display fonts consistently, this website uses the „Jost" typeface, which is stored and served locally from this website's server. No connection to third-party servers (such as Google) is established and no personal data is transferred to third parties.

Legal basis: Art. 6 Abs. 1 lit. f GDPR (consistent and appealing presentation of my content).

6. External links

My website contains links to profiles on social networks (LinkedIn, Instagram) as well as to WhatsApp. Data is only transferred to these third-party providers when you actively click one of these links. I have no influence over how these providers subsequently handle your data.

7. Your rights

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent given (Art. 7 Abs. 3 GDPR)

To exercise your rights, an informal message to info@gvic.at is sufficient.

8. Right to lodge a complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority if you believe that the processing of your data infringes data protection law.

9. Status & changes

This privacy policy is current as of May 2026. I reserve the right to amend this privacy policy in order to bring it into line with changes in the legal situation or changes to my services. You can always find the latest version at gvic.at/datenschutz.html.