Legal
Privacy
This website does not measure you at present. No analytics and no advertising services are running, and no fonts are loaded from foreign servers. What may be added in future is described below and will only load after your consent. The German version is the legally binding one.
Controller
Julian Wolfmayr
Dießenleitenweg 234, 4040 Neulichtenberg, Austria
Email: julian.wolfmayr (at) gmail.com
Easiest through the contact form.
Hosting and server log files
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When the page is retrieved, Netlify processes technically necessary access data as a processor, in particular IP address, date and time, the address requested, the amount of data transferred, the referrer and the browser and operating system identifier.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in the stable and secure operation of the website. A data processing agreement is in place with Netlify. Since processing may also take place in the United States, the transfer relies on the standard contractual clauses of the European Commission and on the certification of Netlify under the EU-US Data Privacy Framework. The agreed safeguards can be viewed in the Netlify Data Processing Addendum.
Storage period: the access data is kept by Netlify for a maximum of 30 days and deleted afterwards, unless it is needed for longer in an individual case to investigate a specific abuse or security incident.
Current state
At present no analytics, advertising or social media services are embedded. No cookies are set for these purposes and no profiling takes place.
The following section describes services that may be used in future. It is here already so that you know in advance what you would be agreeing to. As long as a service is not active, nothing of it is loaded, regardless of what you select in the notice.
Planned services
These services are prepared but not active. As soon as one of them is used, it will load exclusively after your explicit consent to the respective category. The legal basis is then Article 6(1)(a) GDPR, and for the storage on your device additionally section 165(3) of the Austrian Telecommunications Act 2021. Refusing costs you nothing, the website works fully either way.
Meta pixel and conversions API
MARKETING- Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland.
- Purpose: measuring which advertisement led to an enquiry, and showing advertisements to people who have already visited this website.
- Processed in the course of this: IP address, device and browser identifier, pages visited and events triggered, such as submitting the contact form.
- Meta also processes this data in the United States and acts as an independent controller in doing so. A joint controllership agreement under Article 26 GDPR covers the joint collection, and the transfer relies on standard contractual clauses and the EU-US Data Privacy Framework.
- Storage period of the cookies set: up to 90 days.
Google Analytics 4
STATISTICS- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
- Purpose: evaluating which pages are visited and through which route visitors arrive.
- The IP address is shortened by Google before it is stored. No merging with Google accounts takes place.
- Storage period: at most 14 months. Transfer to the United States on the basis of standard contractual clauses and the EU-US Data Privacy Framework.
Google Ads and Google Tag Manager
MARKETING- Provider: Google Ireland Limited, address as above.
- Purpose: measuring which advertisement led to an enquiry (conversion tracking) and addressing former visitors again (remarketing).
- The Tag Manager itself sets no cookies of its own, it only loads the services for which consent exists.
TikTok pixel
MARKETING- Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, Ireland.
- Purpose: measuring advertising performance on TikTok and showing advertisements to former visitors.
- Device and usage data as well as triggered events are processed. A transfer to third countries, among them the United States and Singapore, is possible and relies on standard contractual clauses.
Newsletter
MARKETING- Should a newsletter be offered in future, registration follows the double opt-in procedure: you receive a confirmation email and are only registered once you click the link inside it.
- Stored are the email address, the time of registration and of confirmation, and the IP address used, as evidence of consent.
- You can unsubscribe at any time through the link in every email. The data is then deleted, unless it has to be kept as evidence of the earlier consent.
For all of the services named that are based in the United States or have a US parent company, there is a risk that US authorities access the data and that no legal remedies comparable to those in the EU are available against this. With your consent you also agree to the transfer under these conditions (Article 49(1)(a) GDPR).
If a service not named here is added, this policy will be extended beforehand and consent will be obtained anew.
Consent
On your first visit a notice appears in which you decide about storage on your device. There are three categories: necessary, statistics and marketing. Necessary cannot be deselected, because it only covers what is needed to operate the site. Statistics and marketing are prepared and currently empty, that is where the services named above would be placed. Refusing is exactly as easy as agreeing and has no consequences for using the site. Your decision is stored locally in your browser and can be changed or withdrawn at any time through in the footer. The withdrawal takes effect for the future.
Local browser storage
For operating the site, values are stored in the local storage of your browser: the chosen colour scheme, the chosen language, in the UTM link builder the most recently used parameter set, and, once you have decided, your consent decision. The parameter set contains all fields of the form, including values you typed yourself such as campaign, content and keyword entries. The button "clear" in the tool deletes it again.
These values remain exclusively on your device, are not transmitted to this server or to third parties, and can be deleted at any time through your browser settings. Since the storage serves only to provide the service you requested as expected, it does not require consent under section 165(3) of the Austrian Telecommunications Act 2021. Under data protection law it relies on Article 6(1)(f) GDPR.
Tools on this website
All tools offered, currently the Q&A sticker generator, the UTM link builder and video to Live Photo, run entirely in the browser. Text entered and images or videos selected are transmitted neither to this server nor to third parties and are not stored. Graphics, videos and files produced are created exclusively on your device and stay there until you save them yourself.
Contact form
When you submit the form on the contact page, the data you entered is processed: name, email address and the content of your message, together with the date and time of sending. The purpose is exclusively to answer your enquiry. The legal basis is Article 6(1)(b) GDPR where it concerns the initiation of a contract, otherwise Article 6(1)(f) GDPR.
The transmission runs through Netlify Forms, operated by Netlify, Inc. as a processor. The message is stored there and additionally delivered to me by email. No captcha and no analytics service is used, spam is filtered through an additional field that is invisible to you. No cookies are set.
Storage period: messages are deleted once the enquiry has been dealt with and no statutory retention obligations stand against it, at the latest after 24 months. No transfer to third parties for advertising purposes takes place, and there is no newsletter.
Alternatively you can reach me by phone or Telegram, in which case no form processing occurs.
The Telegram link on this website is a plain reference. Only when you click it is a connection to Telegram FZ-LLC established, for whose data processing Telegram alone is responsible.
Your rights
You have the right to information, rectification, erasure, restriction of processing, data portability and objection to processing based on a legitimate interest. Please contact the address named above for this.
You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb.gv.at.
Status
September 2026. This policy is adjusted when the website changes.
Should analytics or newsletter services be added in future, they will be named here and only loaded after your explicit consent.