Privacy Policy
1. Privacy at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is all data with which you can be personally identified.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the legal notice (Impressum) of this website.
How do we collect your data?
Your data is collected on the one hand by you providing it to us, e.g. via the contact form. Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system or time of page view).
2. Hosting
This website is hosted on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. For details, please refer to Cloudflare's privacy policy:https://www.cloudflare.com/privacypolicy/.
When you access the website, Cloudflare processes technically necessary data such as your IP address, the time of access and the page requested in order to deliver the website and protect it against attacks. The legal basis is my legitimate interest in secure and stable provision (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission's adequacy decision (Art. 45 GDPR).
3. General Information and Mandatory Disclosures
Data Protection
The operator of these pages takes the protection of your personal data very seriously. I treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Responsible Party
The responsible party for data processing on this website is:
Marc Schraepler von Gerlach
Tagwerkerstraße 32
4813 Altmünster, Austria
Email: mail [at] marcschraepler [dot] com
Storage Duration
Unless a specific storage period has been stated in this privacy policy, your personal data will remain with me until the purpose for data processing no longer applies. If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless I have other legally permissible reasons for storing your personal data.
4. Analytics
Umami Analytics
This website uses Umami Analytics, a privacy-friendly web analytics tool. The service is self-hosted on my own server at stats.msvg.eu. Umami does not use cookies. The IP address is processed to create an anonymous session and determine an approximate location, but it is not stored. Data such as page views, referrers and device type is collected. The browser's “Do Not Track” setting is respected.
The legal basis is my legitimate interest in a data-minimising analysis of how this website is used (Art. 6(1)(f) GDPR).
5. Contact Form
If you send me inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored for the purpose of processing the request and in the event of follow-up questions. I will not share this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry relates to the performance of a contract or is necessary to take pre-contractual measures. In all other cases, the processing is based on my legitimate interest in handling the inquiries addressed to me effectively (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this was requested.
Technical processing
The contact form is transmitted via a self-hosted automation platform on my own servers. Your entries are stored there, forwarded to me by email, and you receive an automatic acknowledgement at the address you provided. No external form service is involved. I use Google Workspace for email delivery. Google processes the email address and the content of the message for this purpose. Further information is available inGoogle's Privacy Policy. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework (Art. 45 GDPR).
6. Branchen-Radar Test Issue
On the “Branchen-Radar” page you can request a one-off test issue of the industry briefing by email. The test issue is sent directly to the address you enter, without a separate confirmation step. Your email address is used solely to send this test issue and one follow-up question about it, and is stored to ensure that each address receives the test issue only once. It is not added to any mailing list and is not passed on to third parties. The processing is based on Art. 6(1)(b) GDPR (sending at your express request). Sending takes place via a self-hosted automation platform on my own servers. I will delete your address at any time on request; an informal email is sufficient.
7. Your Rights
You have the right at any time to:
- Information about your stored personal data
- Correction of inaccurate data
- Deletion of your data
- Restriction of data processing
- Data portability
- Objection to processing
You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
You can withdraw any consent you have given at any time with effect for the future. The competent supervisory authority in Austria is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna,www.dsb.gv.at.