Controller

Dr. phil. Georg Harfensteller, BA MA
Dißlergasse 9/4
1030 Vienna, Austria
Email: georg.harfensteller@univie.ac.at

Hosting and server logs

This website runs on a server provided by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. When you access it, technically necessary data is processed, including your IP address, time of access, requested page, status and browser information. Server logs support secure operation and troubleshooting. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is the secure and reliable operation of the website. Nginx logs rotate daily and up to 14 rotated files are retained; depending on activity this is not necessarily exactly 14 days. System logs are managed according to available storage; no fixed time-based deletion period is currently configured.

Contact

When you use the contact form, we process your name, email address and message, together with the time and language of your enquiry, to handle and respond to it. The message is stored in the website database, and an email notification is forwarded to the operator through Hetzner Webhosting. The legal basis is Article 6(1)(f) GDPR (the legitimate interest in handling enquiries); Article 6(1)(b) GDPR may also apply to enquiries relating to a contract. The information is necessary to process a request through the form. Ordinary enquiries are intended to be deleted one year after resolution unless a legal retention obligation or another specific legitimate reason requires longer retention. Deletion is currently manual, not automatic. Backups and email mailboxes may contain further copies.

To protect against abuse, the IP address is processed for rate limiting when the contact form is used. The associated counter expires after one hour. The legal basis is Article 6(1)(f) GDPR (protecting the service against abuse).

Cookies and local storage

The website stores your language choice in the broadside_language cookie for up to one year and your display preference in your browser's local storage. A CSRF protection cookie secures the contact form; additional session cookies may be set when you sign in. The legal basis for the associated processing is Article 6(1)(f) GDPR (user-friendly and secure operation). You can delete cookies and local data in your browser; your preferences may be lost.

Google Fonts

To display typefaces, your browser loads Google Fonts from Google's servers. Technical connection data, including your IP address, is sent to Google. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google in the United States cannot be ruled out. For information on processing, recipients and possible international transfers, see Google's privacy policy. The operator must assess the legal basis and any required safeguards.

Your rights

Subject to the GDPR's conditions, you have rights of access, rectification, erasure, restriction and data portability, as well as a right to object. Where processing is based on consent, you can withdraw it at any time for the future. Contact the controller using the details above. You also have the right to complain to a data protection authority, for example the Austrian Data Protection Authority or the competent authority where you reside.