Privacy policy

Controller

Dominik Nussbaumer, Feldgasse 22, 3422 Hadersfeld, Austria

Email: [email protected]

What this site is

This is a static website. There is no user account, no login, no comment function, and no contact form. Comparison filters run entirely in your browser; no filter input is transmitted to us.

Hosting and server logs (Cloudflare)

This site is served by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, via Cloudflare Pages. In doing so Cloudflare processes technically necessary connection data, in particular your IP address, the page requested, the timestamp, the referrer, and the user agent. Legal basis: Art. 6 (1)(f) GDPR, our legitimate interest in operating the site securely and reliably.

Cloudflare acts as a processor under Art. 28 GDPR; for self-serve plans the data processing addendum is already incorporated into the subscription agreement.

We have not enabled HTTP request log retention, which is off by default at Cloudflare. No personal server logs are therefore available to us. Cloudflare itself states that it stores network metadata only for a limited period, without publishing a fixed retention period.

Transfers to the USA

Cloudflare is a US company, so a transfer to a third country may take place. Cloudflare is certified under the EU-U.S. Data Privacy Framework and additionally relies on the European Commission's Standard Contractual Clauses (Art. 45 and Art. 46 GDPR respectively).

The site is served primarily from data centres in Europe, but processing outside the EU cannot be entirely ruled out.

Analytics (Umami)

We use Umami, self-hosted at stats.home.nussbaumer.dev, for aggregate visitor statistics. Umami sets no cookies, stores no data on your device, and does not create cross-site profiles. Do Not Track is honoured: if your browser sends a DNT signal, no measurement takes place.

Legal basis: Art. 6 (1)(f) GDPR, our legitimate interest in understanding which pages are useful. Because no information is stored on or read from your device, no consent under § 165 (3) TKG 2021 is required.

Theme preference

If you switch the colour theme, your choice is stored in your browser's local storage so the site does not flash the wrong theme on your next visit. Because this serves only the function you explicitly requested, no consent under § 165 (3) TKG 2021 is required. The value stays on your device and is never transmitted to us; you can clear it at any time through your browser settings.

Affiliate links

Some links to providers are affiliate links and are marked as such. If you follow one, the provider may set cookies or record a referral identifier in order to attribute a purchase to us. That processing happens on the provider's side and under the provider's privacy policy, which we recommend reading before you buy.

We receive only aggregate commission reporting. We do not receive your name, email address, or payment details.

Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21) under the GDPR. To exercise them, contact us at the address above.

You also have the right to lodge a complaint with the supervisory authority. The competent authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, phone +43 1 52 152-0, email [email protected], https://www.dsb.gv.at. It is Austria's single data protection authority, so the same body is competent regardless of province.