data policy.

Controller

Anna Rettenbacher
Vienna, Austria
Rettenbacher.anna@gmx.at

The short version

This is a static portfolio site. It sets no cookies, uses no analytics or tracking tools, embeds no third-party content, and loads all fonts from its own server. The only personal data processed is what your browser transmits automatically when it requests a page — and whatever you choose to send me by email.

Hosting and server log files

This website is hosted by Vercel Inc. (USA). When you visit the site, your browser automatically transmits data that is recorded in server log files: your IP address, the date and time of the request, the page requested, browser type and version, operating system, and the referring URL, if any.

This data is processed to deliver the website, ensure its stability and security, and defend against attacks. The legal basis is Art. 6(1)(f) GDPR — my legitimate interest in operating a functional and secure website. The data is not merged with other sources and is not used to identify you. It is deleted once it is no longer needed for these purposes.

Vercel acts as a processor under Art. 28 GDPR on the basis of a data processing agreement. As Vercel is based in the United States, personal data may be transferred to a third country; such transfers are safeguarded by Standard Contractual Clauses and/or the EU–U.S. Data Privacy Framework. See Vercel's privacy policy at vercel.com/legal/privacy-policy.

Contacting me by email

If you write to me, the data you send (your email address, your name if given, and the content of your message) is processed solely to handle your enquiry. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where the exchange concerns a potential working relationship. I keep such correspondence only as long as it is needed, and delete it once the matter is closed and no retention obligations apply.

Cookies, tracking and fonts

This site sets no cookies and uses no analytics, tracking or profiling tools. All fonts are hosted on this server; no font, script or media files are loaded from external providers, so no data is passed to third parties when the page renders.

Your rights

Under the GDPR you have the right to request access to the personal data I hold about you, and to request its rectification, erasure or the restriction of its processing. You also have the right to data portability and the right to object to processing based on legitimate interests. To exercise any of these rights, simply email me at the address above.

If you believe the processing of your data infringes data protection law, you may lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

See also the Imprint.