Short Version

• No tracking, analytics, or advertising of any kind.
• All resources (fonts, scripts, images) are hosted locally — no requests to external domains, except for hCaptcha, which is loaded only on pages with a comment form.
• IP addresses in server logs are stored anonymized (last parts removed) and deleted after 10 days.
• Cookies are only used where technically necessary (e.g. for the comment function), or — for the optional comment convenience cookies — with your explicit consent via a checkbox. No consent banner is needed.

Long Version

This website processes personal data exclusively in accordance with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (Datenschutzgesetz – DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).

I. Data Controller

Data controller within the meaning of Art. 4(7) GDPR:

Ing. Marc Wallinger
1160 Vienna, Austria
Phone: +43 1 29 5 4444 23
Email: hey@encrypted.at

II. Your Rights

Regarding your personal data, you have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), objection (Art. 21 GDPR), and to withdraw any consent you have given (Art. 7(3) GDPR). To exercise these rights, contact hey@encrypted.at.

If you believe that the processing of your data violates data protection law, you may lodge a complaint with me directly or with the Austrian data protection authority:

Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at, www.dsb.gv.at

III. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes all data arising from the operation of this website (such as the server logs described below) on my behalf as a processor pursuant to Art. 28 GDPR; a data processing agreement is in place. All servers are located within the European Union. The legal basis is my legitimate interest in the secure and reliable provision of this website (Art. 6(1)(f) GDPR). See also Hetzner’s privacy policy.

IV. Server Logs

The web server automatically stores information about each access for security purposes (detection and mitigation of attacks, error analysis). The legal basis is my legitimate interest in the security and stability of this website (Art. 6(1)(f) GDPR). Logs are automatically deleted after 10 days, unless a specific security incident requires longer retention; in that case, the affected log entries are deleted as soon as the incident has been resolved.

The collected information comprises:

• IP address (anonymized — the last parts are removed)
• User-agent header (browser, version, operating system)
• Requested page/file
• Date and time of access
• Referrer (page visited before the request)

V. Comments

If you post a comment, the comment text, the name/pseudonym you provide and, if given, your email address are stored, and the comment text is published together with the name. You are welcome to use a pseudonym. The legal basis is your consent given by submitting the form (Art. 6(1)(a) GDPR); you can withdraw it at any time with effect for the future by requesting deletion of your comment via hey@encrypted.at.

In addition, the IP address from which a comment is submitted is stored. This serves the prevention and tracing of abuse (e.g. spam or unlawful content) and the defense of legal claims — as the person who published a comment, I may be held responsible for its content and must be able to trace its origin. The legal basis is my legitimate interest pursuant to Art. 6(1)(f) GDPR. The IP address is never published and is deleted together with the comment.

Comments remain published as long as the corresponding blog post exists, or until you request their deletion — whichever comes first. Email addresses provided with comments are never published and are deleted together with the comment.

If you tick the checkbox “Save my name, email, and website in this browser for the next time I comment”, cookies are stored on your device so that these fields are pre-filled on your next visit — see Section VIII for details.

VI. Contact by Email or Phone

If you contact me, the data you provide (email address, name, content of your message) is processed solely to handle your inquiry. The legal basis is my legitimate interest in answering inquiries (Art. 6(1)(f) GDPR) or, where the inquiry relates to a contract, Art. 6(1)(b) GDPR.

Correspondence is deleted no later than six months after the conversation has concluded, unless statutory retention obligations require longer storage or the correspondence is needed to establish, exercise or defend legal claims.

VII. hCaptcha

To protect forms on this site against abuse by automated programs (spam bots), I use hCaptcha, a service of Intuition Machines, Inc., Miami, FL, USA. hCaptcha is loaded only on pages containing a form. It analyzes characteristics such as your IP address and your interaction with the page to distinguish humans from bots, and may set cookies for this purpose. Data processed by hCaptcha is retained by Intuition Machines according to its own retention policy; details are available in the hCaptcha privacy policy.

The legal basis is my legitimate interest in protecting this website against abuse and spam (Art. 6(1)(f) GDPR).

Since Intuition Machines, Inc. is based in the USA, data is transferred to a third country. Intuition Machines holds an active certification under the EU–U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision pursuant to Art. 45 GDPR (verify on dataprivacyframework.gov). Further information: hcaptcha.com/privacy and hcaptcha.com/terms.

VIII. Cookies

This website does not use cookies for analytics, tracking or advertising.

Strictly necessary cookies. Cookies required to process comment submissions and to protect forms (hCaptcha) are set without consent, as they are strictly necessary to provide the service you explicitly request (§ 165(3) TKG 2021). Session cookies are deleted when you close your browser.

Optional comment convenience cookies. If — and only if — you tick the checkbox “Save my name, email, and website in this browser for the next time I comment” when posting a comment, the following cookies are stored so that the comment form is pre-filled on your next visit:

Name (pattern)	Purpose	Retention
comment_author_<id>	Stores the name you entered	12 months
comment_author_email_<id>	Stores the email address you entered	12 months
comment_author_url_<id>	Stores the website address you entered	12 months

These cookies are stored only on your device and are not used for any other purpose. The legal basis is your consent given via the checkbox (Art. 6(1)(a) GDPR, § 165(1) TKG 2021). You can withdraw it at any time by deleting the cookies in your browser; if you leave the checkbox unticked, no such cookies are set.

You can block or delete cookies at any time in your browser settings; note that the affected functions (e.g. commenting) may then no longer work.

IX. Storage Locations

Except for the hCaptcha service described above, all personal data is processed and stored exclusively within the European Union.

X. External Links

I am not responsible for the content or data processing of external websites linked from this blog. The privacy policies of the respective sites apply.