This is an English overview for international visitors. The binding legal text under EU/Austrian law is the German privacy policy.
Privacy policy
Controller & scope
This policy describes how we process personal data when you use our website. The legal framework includes the GDPR and, where applicable, the Austrian Telecommunications Act 2021 (TKG 2021) for cookies and similar technologies on your device.
When you access the site, technical data such as your IP address and server logs may be processed for security and operation (legitimate interests under Art. 6 (1) lit. f GDPR).
Images & self-hosted content
Photos and graphics (including the portfolio) are served from our own hosting. No extra third-party tracking cookies are required for that content. Optional embedded social content (Instagram) is loaded only after you consent separately (see below). We do not name business partners or customers in public text where unnecessary; identifiable persons in images are published only with a valid legal basis.
Local storage & consent banner
We store your privacy choice and language preference in your browser's local storage. Legal basis for the language setting is Art. 6 (1) (f) GDPR (user-friendly operation); for consent to optional content, Art. 6 (1) (a) GDPR together with applicable ePrivacy rules. Retention until you clear site data or use “Cookie settings” in the footer to withdraw consent.
Required: site operation, security, language. Optional (only with consent): Google Maps (contact page) and Instagram (home). Without consent, no data is sent to Google or Meta for those embeds.
Google Maps
With consent, maps may be provided by Google Ireland Limited. Personal data (e.g. IP address) may be transferred to Google and processed in third countries. Google provides standard contractual clauses and other safeguards; see Google's privacy policy.
Instagram (embedded profile)
On the home page we may show an embedded Instagram profile. Provider is Meta Platforms Ireland Limited (Ireland). Loading may transfer personal data (e.g. IP address) to Meta and process it in third countries. The embed is shown only after your consent under Art. 6 (1) (a) GDPR and applicable ePrivacy rules. Without consent, the embed is not loaded; you can still use a direct link to our public profile.
Contact form & email
If you contact us via the form or email, we process the data you send (name, email address, message text and technical delivery metadata as needed) to handle your request. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual steps / responding to your enquiry) or Art. 6 (1) (f) GDPR for general enquiries.
We do not disclose your data to third parties for their own purposes. For technical delivery we use processors, in particular Resend (Resend Inc., USA). Name, email address and message text are transmitted to Resend so your enquiry can reach us. Resend is therefore a recipient / processor for GDPR information purposes. Whether a data processing agreement and third-country transfer safeguards are in place must be verified outside this codebase and is not asserted here as a fact. See resend.com/legal/privacy-policy.
Retention: usually until your enquiry is fully handled and thereafter as long as legal retention or documentation interests apply (typically up to six months for pure enquiries, unless longer retention is required).
Fonts
We use Montserrat and Syne via next/font (Next.js). Font files are bundled at build time and served from our site, so regular page views do not request fonts.googleapis.com or fonts.gstatic.com.
Server logs
Our host (project status: Vercel Inc.) may process technical log data including IP address, browser data, timestamps and requested URLs for security and stability. The IP address is personal data. We do not use these logs for profiling or marketing. Retention follows the host’s technical settings and security needs.
Your rights
You may have rights including access, rectification, erasure, restriction, portability, and objection.
If you believe processing violates privacy law, you may contact us at plesnicaroffice@gmail.com or lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).
Contact
Operator: Boris Plesnicar – Plesnicar Solutions
Landline: 02734/32048
Email: plesnicaroffice@gmail.com
