Privacy Policy
1. General Information
The protection of your personal data is important to me. This website is operated as an artistic information site. Personal data is processed only to the extent necessary and in accordance with applicable data protection regulations (in particular GDPR and Austrian Data Protection Law).
2. Controller
Responsible for data processing on this website is:
Mag. art. Harald Grünauer
Rennweg 71/4
1030 Wien
Austria
Email: haraldgruenauer@yahoo.de
3. Access Data / Server Log Files
When visiting this website, certain data is automatically transmitted by your browser for technical reasons and stored by the hosting provider in so-called server log files. This may include, in particular:
- IP address and IP location (in shortened/abbreviated form)
- Date and time of access
- Accessed pages / files
- Browser type and version
- Operating system used
- Referrer URL (previously visited page)
This data is generally processed by the hosting provider for the purpose of technical operation, security (e.g., to defend against attacks), and error analysis. I do not carry out any personal evaluation of this data.
This website is operated with hosttech GmbH, Vienna; the server is located in Austria. The server log files are stored there, and the messages from the contact form are sent via that provider’s mail server.
The log files are additionally analysed using the Webalizer software. This analysis takes place exclusively on the hosting provider’s server and reads the log files including the IP addresses they contain. The resulting reports, which I consult, contain only aggregated figures – visits, pages requested, origin of requests – and no individual user profiles. The reports are password-protected, accessible only to me, and are not transmitted to third parties. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest lies in assessing statistically how my information offering is used.
The legal basis for processing this log data is Art. 6(1)(f) GDPR. My legitimate interest lies in the secure, stable and technically sound operation of the website and in defending against attacks. The log files contain personal data, in particular IP addresses. They are rotated daily and no more than seven files are retained, which means data older than seven days is deleted automatically.
4. Cookies and Tracking
This website sets no cookies of its own and stores no information in your browser’s local storage or session storage. No cookies are used for analytics, tracking or advertising purposes. A consent banner is therefore not required.
No third-party analytics or advertising services are embedded, in particular no Google Analytics. The fonts used are loaded exclusively from this server; there is no connection to Google Fonts or other external providers, so your IP address is not transmitted to third parties.
The fonts used on this website are loaded exclusively from this server. There is no connection to Google Fonts or other external providers, so your IP address is not transmitted to third parties.
5. Contact Form and Contact via Email
You can reach me via the form on the contact page or directly by email. In both cases I process the data you provide solely in order to answer your enquiry.
The form collects name, email address and message. These three details are required: without them the form cannot be submitted and the enquiry cannot be answered. No further details are requested. The entries are transmitted to this website’s web server and forwarded from there to my mailbox by email over an encrypted connection. They are not stored in a database.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in being able to answer enquiries about my artistic work. Enquiries are deleted once they have been dealt with and no further questions are expected. Only correspondence required for an ongoing collaboration or for asserting legal claims is kept longer.
Personal data is never sold and never passed on for advertising purposes. Data is transmitted only to the technically necessary service providers: to the hosting provider named above for operation and mail delivery, and to the provider of my email mailbox.
My mailbox is hosted with Yahoo (Yahoo EMEA Limited, Ireland); the same address is given in the legal notice. Messages from the contact form and direct emails are therefore stored there and processed by that provider as operator of the email service. According to the provider, processing may also take place outside the European Economic Area; it relies on the safeguards provided for this, in particular standard contractual clauses. If you wish to avoid this, you can reach me by post or telephone using the details in the legal notice.
6. External Links / Instagram
This website contains links to external websites and platforms, e.g., to Instagram. The respective operators are solely responsible for the content and data processing there. Please note the applicable privacy policies there.
7. Legal Basis for Processing
The processing of access data and log files is based on the legitimate interest in the security and stable operation of the website (Art. 6(1)(f) GDPR). The statistical analysis of these logs likewise rests on Art. 6(1)(f) GDPR. Enquiries sent via the contact form or by email are processed on the basis of the legitimate interest in answering enquiries about my artistic work (Art. 6(1)(f) GDPR).
8. Rights of Data Subjects
Within the framework of the legal provisions, you have the right to information about your processed personal data, as well as to rectification, deletion, restriction of processing, data portability, and objection to processing.
You can contact the address given above at any time for this purpose. Furthermore, you have the right to lodge a complaint with the competent supervisory authority (Data Protection Authority in Austria).
9. Updates to this Privacy Policy
This privacy policy may be adjusted as needed to reflect legal or technical changes. The version currently published on this website applies.