Stefan Herndlbauer
Legal · Privacy

Privacy

Data Protection

The use of my website is possible without providing personal data. If personal data can be entered (for example: name, address, or email address), this is done on a voluntary basis. These data will not be disclosed to third parties without your explicit consent.

Data transmission over the Internet (e.g., email communication) can have security vulnerabilities. A complete protection of data from access by third parties is not possible. The use of contact data published in the imprint by third parties for sending unsolicited advertising and information materials is hereby prohibited. I reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.

Hosting

I host my website at DigitalOcean. The provider is DigitalOcean, LLC, 101 Avenue of the Americas, 10th Floor, New York, NY 10013, USA, hereinafter referred to as “DigitalOcean”.

The use of DigitalOcean is based on Article 6(1)(f) GDPR. I have a legitimate interest in ensuring that my website is available to visitors as reliably as possible. If consent was requested, data processing takes place exclusively based on Article 6(1)(a) GDPR. Consent can be revoked at any time.

I have signed a data processing agreement (DPA) with DigitalOcean. This contract is required by privacy law and guarantees that visitor data will be processed in compliance with GDPR.

Web Analytics — Google Analytics 4

This site uses Google Analytics 4 (provided by Google Ireland Ltd.) to understand how visitors use the site in aggregate. The integration is configured for privacy:

  • IP addresses are anonymized before storage (anonymize_ip).
  • The browser’s Do Not Track signal is respected — if you send DNT, no analytics request is made.
  • Session storage is used in place of long-lived cookies where possible.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in measuring reach). You can opt out at any time by enabling DNT in your browser or by installing the official Google Analytics opt-out add-on.

Fonts

Web fonts are loaded from Google Fonts (Google Ireland Ltd.). When the page loads, your browser requests font files from fonts.googleapis.com and fonts.gstatic.com; this transmits your IP address to Google. The fonts are required for the visual identity of the site.

If you prefer no third-party request, you can block Google Fonts at the browser level — the site degrades gracefully to your system fonts.

Responsible Controller

The person responsible for data processing on this website is the person named in the imprint.

Log Files on the Server

The web server stores standard request logs:

  • IP address of the client
  • Time of the request
  • URL of the requested page
  • HTTP status code
  • Referrer URL
  • User-agent string

This data cannot routinely be used to identify a specific person and is not merged with other data sources. It is retained only as long as needed for security and operational diagnostics.

SSL Encryption

This site uses TLS for all connections. You can recognize it by the https:// prefix and the lock icon in your browser.

Cookies & Consent Management

This site uses CookieYes (provided by CookieYes Limited, Ireland) to manage your cookie preferences. When you first visit the site, the consent banner records your choice in a first-party cookie (cookieyes-consent) so it doesn’t have to ask again on every page.

Beyond that:

  • Functional cookies are set only where strictly necessary — e.g. for the comments login flow on remark42.
  • Analytics cookies (Google Analytics 4) are governed by your consent choice in the CookieYes banner.
  • No advertising cookies are set.

You can change or withdraw your consent at any time using the small CookieYes icon that remains in the bottom corner of the page after the banner closes.

Legal basis: Article 6(1)(a) GDPR (consent) for analytics; Article 6(1)(f) GDPR (legitimate interest) for the consent management itself, since recording your “no” is required to honor it.

Your Rights

At any time you may request:

  • A copy of any personal data I hold about you
  • Correction of inaccurate data
  • Deletion of your data (subject to lawful retention obligations)
  • The complaint mechanisms provided by your local data-protection authority

To exercise these rights, contact me at the address in the imprint.

Embedded Content from Other Websites

Posts on this site may contain embedded content (videos, images, podcast players). Embedded third-party content behaves as if you had visited the external site directly, including any cookies or trackers those sites set.