Privacy notice

Effective: September 2026

1. Controller

Christoph Linimayer
Edeltraud-Hofer-Straße 22
4020 Linz
Austria

2. Provision of the website

When this website is accessed, technically necessary connection data is processed. This may include, in particular, the IP address, time of access, page or file requested, browser and device information, and technical error and security information.

Processing takes place to provide the website securely and reliably, to analyse errors, and to prevent abusive access on the basis of the legitimate interest in a secure and functional website pursuant to Article 6(1)(f) GDPR.

Server and security logs are stored only for as long as necessary for operation, error analysis, and abuse prevention.

3. Contact

When you contact us through the contact form or by email, we process the information you provide. The contact form in particular processes the request category, your name, email address, subject, and message. The message may contain up to three URLs. When you contact us by email, we also process the information contained in that email.

Processing takes place to handle and respond to your enquiry. For pre-contractual or contract-related enquiries, processing is based on Article 6(1)(b) GDPR; for other enquiries, it is based on the legitimate interest in handling communications pursuant to Article 6(1)(f) GDPR.

Contact enquiries are forwarded to the operator’s address for handling. After successful delivery, an acknowledgement is also attempted to the email address provided. It confirms receipt only and does not promise a response or processing time. The data is stored only for as long as necessary to process the enquiry or as required by statutory retention obligations.

Technically necessary data may be processed and temporarily stored to protect the contact form against abuse. The form is processed by a dedicated Contact API service. Emails required to deliver enquiries are sent through mailbox.org using SMTP. The visitor’s IP address is not included in email; a keyed verification value used for abuse prevention may be held temporarily in the Contact API service’s memory for no more than two days. Technical delivery metadata is retained for no more than seven days. Message content is not stored in a contact database or mail outbox. Once delivered, the emails are subject to the retention practices of the mailboxes involved.

4. Cookies and audience measurement

This website does not use tracking or marketing cookies or comparable technologies for tracking users across services.

To improve our offering, we use a self-hosted Matomo installation for anonymised audience measurement. The analysis uses no tracking cookies and serves statistical purposes only.

Processing is based on our legitimate interest in statistically evaluating and improving our website pursuant to Article 6(1)(f) GDPR.

Fonts and images are provided locally. Merely accessing the website therefore does not establish a connection to external font or image providers.

5. Recipients

Personal data is transferred to technical service providers only to the extent necessary to operate the website and handle enquiries. These include, in particular:

netcup GmbH for hosting the website;
Heinlein Hosting GmbH (mailbox.org) for sending emails.

Any further disclosure takes place only where there is a legal obligation or another valid legal basis.

6. Retention

Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention obligations.

Technical log data is stored only for the period necessary for operation, security, error analysis, and abuse prevention. Technical delivery metadata from the Contact API service is retained for no more than seven days. Data from contact enquiries is deleted once it is no longer needed to handle the enquiry and there are no statutory or other legitimate grounds for further storage.

Temporary abuse-prevention values are deleted after no more than two days, and technical delivery metadata after no more than seven days. Emails delivered to mailboxes are handled there under the applicable retention practices.

7. Your rights

Subject to the statutory requirements, you have rights including access, rectification, erasure, restriction of processing, data portability, and objection.

You can send requests to prosapia@mailbox.org.

You also have the right to lodge a complaint with the competent data protection supervisory authority:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
www.dsb.gv.at

8. Security

This website is transmitted using encrypted HTTPS. Appropriate technical and organisational measures are taken to protect personal data against loss, misuse, and unauthorised access.

9. Changes

This privacy notice will be updated if data processing on this website or the legal requirements change.