Legal

Privacy Policy

1. Data Controller

The data controller responsible for data processing on this website under the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz — DSG) is:

Marcel Kießlich
Einsiedlergasse 35/2/6
1050 Vienna, Austria
Email: MarcelKMedia@gmail.com

2. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses state-of-the-art TLS/SSL encryption (Art. 32 GDPR). You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.

3. Data Collected and Processing Purposes

Server Logs

When you visit this website, the hosting provider (Vercel) automatically collects technical data in server log files. This includes your IP address, browser type, operating system, referrer URL, and timestamps.

  • Purpose: To ensure the stability, security, and functionality of this website (e.g., investigating and defending against cyberattacks such as DDoS).
  • Legal Basis: Legitimate interest pursuant to Art. 6(1)(f) GDPR. Processing is strictly limited to ensuring network safety and system security.
  • Retention: Server log data is automatically deleted after 30 days.

Web Analytics (Vercel Web Analytics)

I use Vercel Web Analytics to analyze aggregate usage of this website. This service does not use any cookies or local browser storage, collects no personal identifiers, and does not track users across other websites. Visitors are distinguished using a transient hash generated from the request headers, which is automatically deleted after 24 hours.

  • Purpose: To understand general usage patterns, optimize the web presentation, and ensure website stability.
  • Legal Basis: Legitimate interest pursuant to Art. 6(1)(f) GDPR in optimizing the web presentation.
  • Data Collected: Page URL, referrer, browser type, operating system, device type, and country-level geo-location. No IP addresses or personal identifiers are stored.

Beyond server logs and anonymous web analytics, this website does not currently collect any personal data from visitors. There are no contact forms, newsletter sign-ups, or tracking cookies in use. Should this change in the future, this privacy policy will be updated accordingly before any new data processing begins.

4. Cookies

This website does not use cookies for analytics, advertising, or tracking purposes. Only technically necessary cookies may be set by the hosting provider (Vercel) to deliver the website. These do not require consent under Art. 5(3) of the E-Privacy Directive as implemented by § 165 TKG 2021.

5. Retention Periods

Personal data is retained only as long as necessary for the purpose for which it was collected, or as required by law:

  • Server log files (IP address, browser data, timestamps): automatically deleted after 30 days.
  • Web analytics transient hash: automatically deleted after 24 hours. Aggregated, non-personal statistics (e.g., page view counts) are retained indefinitely.

No other personal data is stored. If additional data categories are introduced in the future, this section will be updated with specific retention periods before processing begins.

6. Categories of Recipients

Personal data processed through this website may be shared with the following categories of recipients:

  • Hosting provider (data processor): Vercel Inc. (USA) — processes server logs and web analytics data on my behalf under a Data Processing Addendum (Art. 28 GDPR).

No personal data is sold to, shared with, or disclosed to any other third parties. Data is not transferred to countries outside the EU/EEA except to Vercel Inc. under the EU-US Data Privacy Framework and Standard Contractual Clauses (see Section 7).

7. Hosting and Third-Party Services

Vercel (Hosting & Analytics)

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). Vercel acts as a data processor (Auftragsverarbeiter) on my behalf pursuant to Art. 28 GDPR and processes server log data and web analytics data as described in Section 3. Vercel Inc. is certified under the EU-US Data Privacy Framework (DPF), ensuring an adequate level of data protection for data processed in the United States. Additionally, a Data Processing Addendum incorporating the European Commission's Standard Contractual Clauses (SCCs) is in place.

External Links (YouTube, LinkedIn, Amazon, GitLab)

This website contains outbound links to the following external services. These are standard hyperlinks — no content from these platforms is embedded on this website, and no data is transmitted to them until you actively click a link and leave this site:

Since these are outbound links only (no iframes, no embeds, no tracking pixels), no personal data is transferred to these providers through this website. Once you leave this site, their respective privacy policies apply.

8. Your Rights (GDPR & DSG)

Under the GDPR and the Austrian Data Protection Act (DSG), you have the following rights as a data subject:

  • Right of Access (Art. 15 GDPR)
  • Right to Rectification (Art. 16 GDPR)
  • Right to Erasure — "Right to be Forgotten" (Art. 17 GDPR)
  • Right to Restriction of Processing (Art. 18 GDPR)
  • Right to Data Portability (Art. 20 GDPR)
  • Right to Object (Art. 21 GDPR)
  • Right to Withdraw Consent at any time (Art. 7(3) GDPR)

To exercise any of these rights, please contact me at MarcelKMedia@gmail.com.

9. Privacy Contact

For all privacy-related enquiries, including requests to exercise your data subject rights, please contact:

Marcel Kießlich
Email: MarcelKMedia@gmail.com
Subject line: "Privacy Request"

I will respond to your request within 30 days in accordance with Art. 12(3) GDPR.

10. Supervisory Authority

If you believe that the processing of your personal data violates data protection laws, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is:

Österreichische Datenschutzbehörde (DSB)
Barichgasse 40-42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at

11. Changes to This Policy

I may update this privacy policy periodically to reflect legal or technical changes. The latest version is always available on this page.

Last updated: June 13, 2026