Data protection
Privacy Policy
Information about the processing of personal data on this website pursuant to Articles 13 and 14 GDPR and the Austrian Data Protection Act.
Last updated: June 11, 2026
Controller
- Name
- Oskar Walcher
- Address
- Rosenhang 28a, 8010 Graz, Austria
- oskar.walcher@hotmail.com
General information
Personal data is processed only where necessary to operate this website securely, understand aggregate website usage, answer inquiries, and initiate or manage professional relationships. No advertising or newsletter tracking is used.
Privacy-friendly analytics with Cloudflare
This website uses Cloudflare Web Analytics, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, to understand aggregate website usage and performance. Cloudflare states that Web Analytics does not use cookies, local storage, or fingerprinting and does not track individual users across websites.
- Country
- Website host and path
- Referring website
- Browser and operating system
- Device and navigation type
- Page views and performance metrics such as Core Web Vitals
Legal basis: Article 6(1)(f) GDPR. The legitimate interest is measuring aggregate website usage and improving performance and content without tracking identifiable individuals or using the data for advertising.
The Cloudflare beacon is not configured to send custom events or properties containing names, email addresses, message content, or other contact-form data. Contact-form fields are not included in analytics requests. Cloudflare may process analytics data outside the EEA and provides a Data Processing Addendum and transfer safeguards including EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
Cloudflare Web Analytics · Data collection · Cloudflare Data Processing Addendum
Website hosting and server logs
The hosting provider may process technical connection data to deliver the website, maintain security, and diagnose errors. This can include IP address, date and time, requested resource, referrer, browser, operating system, response status, and transferred data volume. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is secure and reliable website operation.
- Hosting provider
- Vercel
- Provider and processing location
- Vercel, Inc., 340 S. Lemon Ave Ste 4134, Walnut, CA 91788, USA
- Log retention
- 30 days
Contact form and correspondence
When you submit the contact form, the information you provide is used exclusively to review and answer your inquiry and, where applicable, to take steps before entering into a contract.
- Name
- Email address
- Inquiry type
- Message content
- Submission time and delivery metadata
Legal basis: Article 6(1)(b) GDPR for pre-contractual inquiries and Article 6(1)(f) GDPR for other professional correspondence.
Messages are generally deleted six months after the final response unless a business relationship, statutory retention duty, or need to establish, exercise, or defend legal claims requires longer storage.
Browser autofill is controlled by your browser. Autofilled values are not transmitted to this website until you submit the form.
Spam protection with Cloudflare Turnstile
The contact form uses Cloudflare Turnstile, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Turnstile distinguishes legitimate users from automated abuse. Cloudflare may process client-side security signals for this purpose.
- IP address
- TLS fingerprint
- User-Agent header
- Site key and associated website origin
- Challenge and validation data
Legal basis: Article 6(1)(f) GDPR. The legitimate interest is protecting the contact form and infrastructure against spam, bots, and misuse. Turnstile is treated as a technically necessary security service and is not used for advertising by this website.
Cloudflare may process data outside the EEA. Cloudflare provides a Data Processing Addendum and transfer safeguards including the EU Standard Contractual Clauses and, where applicable, the EU-U.S. Data Privacy Framework.
Cloudflare Turnstile Privacy Policy · Cloudflare Data Processing Addendum
Email delivery with Resend
Contact-form messages are delivered through Resend, a service of Plus Five Five, Inc., USA. Resend processes the submitted contact details and message content on behalf of the controller to transmit the email.
Legal basis: Article 6(1)(b) GDPR for pre-contractual communication and Article 6(1)(f) GDPR for reliable business correspondence.
Processing may take place outside the EEA. Resend offers a Data Processing Addendum incorporating the EU Standard Contractual Clauses.
Cookies and local storage
This website does not use analytics or advertising cookies. Security-related storage or technical identifiers may be used by integrated infrastructure where strictly necessary to provide and protect the service.
External links
Links to LinkedIn, GitHub, project websites, and other third-party sites do not transmit data to those providers merely by being displayed. Their privacy terms apply once you follow a link.
Recipients of personal data
- Hosting and infrastructure provider
- Cloudflare for Turnstile validation
- Resend for email delivery
- Public authorities or advisers where legally required
Your rights
Subject to the legal requirements, you have the following rights under the GDPR. Requests can be sent to the controller’s email address above.
- Access (Article 15)
- Rectification (Article 16)
- Erasure (Article 17)
- Restriction (Article 18)
- Data portability (Article 20)
- Objection (Article 21)
- Withdrawal of consent where processing relies on consent
Right to lodge a complaint
You may lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at, or another competent supervisory authority.
Automated decision-making
No automated decision-making producing legal or similarly significant effects and no profiling for advertising purposes takes place. Turnstile performs automated security assessment only to prevent abuse of the form.
Changes to this policy
This policy may be updated when services, processing activities, or legal requirements change. The current version is published on this page.
This page is a technical privacy-policy template based on the website’s current implementation. The final wording must match the actual hosting, contracts, retention practices, and business setup and does not replace individual legal advice.