Privacy policy
Protecting your personal data is important to me. I process your data exclusively on the basis of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This page explains which data is processed when you visit this website and when you contact me. The German version is legally authoritative.
1. Controller
Eduard Bodan – Web Design & Development
Rotenmühlgasse 64/10/2+3
1120 Vienna, Austria
Email: kontakt@eduardbodan.at
2. Hosting and server log data
This website is hosted by Netlify, Inc. (USA). When you visit the website, Netlify processes technically necessary data, in particular IP address, date and time of access, requested address, amount of data transferred and browser and system information. This data is required to deliver the website and to ensure its security and stability.
The legal basis is my legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR). Netlify processes the data as a processor; according to Netlify, its Data Processing Agreement forms part of its terms (Self-Serve Subscription Agreement).
Transfer to the USA: Netlify, Inc. is certified under the EU-US Data Privacy Framework (listing on dataprivacyframework.gov, status “Active”, checked 10/2026). The transfer is based on the European Commission's adequacy decision (Art. 45 GDPR).
3. Contact form
If you use the contact form, I process the data you enter: name, company (optional), email address, requested service, budget (optional), message and the selected website language. Providing this data is voluntary; however, I cannot handle your enquiry without the required fields.
The form is transmitted via the Netlify Forms service (Netlify, Inc., USA) and stored in my Netlify account. Netlify automatically checks all form submissions for spam using the Akismet service (Automattic Inc., USA); for this purpose, the form content is transmitted to Akismet. I also receive a notification of the enquiry by email (see section 4).
The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR) or my legitimate interest in answering enquiries and protecting against spam (Art. 6(1)(f) GDPR).
Storage period: Enquiries that do not lead to a contract are deleted no later than twelve months after the last communication – in Netlify Forms and in my mailbox. If a contract results, I keep the tax-relevant documents (in particular records and receipts) for seven years in accordance with § 132 of the Austrian Federal Fiscal Code (BAO); the period starts at the end of the relevant calendar year.
According to Akismet, spam-related data is generally retained for between two weeks and 90 days. According to Akismet, transfers to the USA are based on the European Commission's standard contractual clauses (Art. 46 GDPR).
4. Contact by email
If you email me or I am notified via the contact form, your details are stored in my mailbox to handle the enquiry. My mailbox is operated by easyname GmbH (Vienna, Austria). I also handle incoming emails and form notifications in Gmail, a Google service (for users in the EEA: Google Ireland Limited, Ireland); processing in the USA cannot be ruled out. The legal basis is Art. 6(1)(b) or (f) GDPR.
5. No cookies, no tracking, local fonts
This website does not set cookies and does not use analytics, tracking or advertising services. Fonts are loaded from this website itself; there is no connection to Google Fonts or other font providers. Links to external websites (e.g. RIS or the Data Protection Authority) only connect to those sites after you click them.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Please contact kontakt@eduardbodan.at.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
No automated decision-making, including profiling, takes place.
Last updated: 10/2026