This Privacy Policy explains how personal data is processed when you visit this website, in accordance with the EU General Data Protection Regulation (GDPR / DSGVO) and the Austrian Data Protection Act (Datenschutzgesetz, DSG).
The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR is:
David Buchas
Nelkengasse 1/5, 1060 Vienna, Austria
Email: [email protected]
Phone: +43 699 18346418
No data protection officer is required or has been appointed, as the criteria of Art. 37 GDPR are not met.
This is a static website. It uses no cookies for tracking, no analytics, no advertising, no social media plugins, no embedded third-party content and no tracking technologies. We do not create user profiles. The only personal data processed is what is technically unavoidable to deliver the website (server logs) plus any data you actively provide by contacting us.
When you access this website, the web server and the content delivery network (see section 4) automatically process technical data your browser transmits, in particular: your IP address, date and time of the request, the page/file requested, the HTTP status code, the amount of data transferred, the referrer URL and your browser type/operating system.
Purpose: delivering the website, ensuring stability and security, and defending against attacks. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in secure, reliable operation. Retention: log data is stored for a maximum of 14 days and then automatically deleted, unless a specific security incident requires longer retention.
Hosting: This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers within the European Union. Hetzner processes data on our behalf as a processor under Art. 28 GDPR.
Content delivery / security (CDN): This website uses Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) as a reverse proxy and CDN to deliver content securely and mitigate attacks. Your IP address and request data are therefore processed by Cloudflare as our processor (Art. 28 GDPR). Where data is transferred to the USA, the transfer is safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR) and, where applicable, Cloudflare's certification under the EU–US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR.
This website stores a single value in your browser's local storage to remember your light/dark colour-mode preference. This data is strictly necessary to provide the function you requested, never leaves your device, is not transmitted to any server, and is not used for tracking. It therefore does not require consent under § 165 Abs. 3 Telekommunikationsgesetz 2021. You can delete it at any time by clearing your browser storage.
If you contact us by email or telephone, the data you provide is processed solely to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR for (pre-)contractual matters, otherwise Art. 6(1)(f) GDPR. This data is deleted once your enquiry has been dealt with and no statutory retention obligations apply.
Under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on Art. 6(1)(f) (Art. 21). To exercise these rights, contact us using the details in section 1.
You also have the right to lodge a complaint with a supervisory authority. The competent authority in Austria is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
We use TLS/SSL encryption for the transmission of this website. We may update this Privacy Policy to reflect changes in our processing or legal requirements. The current version always applies.
Last updated: 8 June 2026