Privacy Policy

When you visit our website, the server automatically collects the following information: browser type and version, operating system used, referrer URL, time of the server request and the IP address (stored in shortened or anonymised form).

This data serves technical operation, security, error analysis and optimisation. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

We only use technically necessary cookies that are required to operate the website. We do not use tracking or analytics cookies and no web tracking. A cookie consent banner is therefore not required. Only the spam protection used (see reCAPTCHA) may set cookies from Google.

To protect our contact form against spam and automated access, we use Google reCAPTCHA v3 (Google Ireland Limited / Google LLC). reCAPTCHA analyses user behaviour based on various characteristics (including IP address, time spent, mouse and keyboard input) to distinguish whether input originates from humans or automated programs.

In doing so, data is transmitted to Google (including to the USA). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against spam). For more information see the Google Privacy Policy.

If you contact us via the contact form or by email, we process the data you provide (name, email address, optional phone number and your message) to handle your request and any follow-up questions. The data is stored for a maximum of six months, unless statutory retention obligations apply. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or (f) (legitimate interest in communication).

To send the form message we use the service Resend (Resend, Inc., USA) as a processor. The data entered in the form is transmitted to Resend and processed on our behalf. The transfer to the USA is safeguarded by the EU Standard Contractual Clauses (SCC) or the EU-US Data Privacy Framework. Details: Resend Privacy Policy.

Our website is operated by Hetzner Online GmbH (Germany, EU). The data is processed exclusively in data centres within the EU; no transfer to third countries takes place. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

We use the "Geist" font, which is served locally from our own server (self-hosted). No connections to Google servers are established and no personal data is transmitted to Google.

Our blog content is managed via a headless CMS (Strapi, hosted at strapi.webse.at within the EU). Simply reading blog content does not collect any additional personal data from you.

With regard to your personal data, you have the following rights:

• Access to the stored data
• Rectification of inaccurate data
• Erasure (unless a retention obligation exists)
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent given

To exercise your rights, a message to info@webse.at is sufficient.

You have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority, www.dsb.gv.at.