Privacy policy

Controller & scope

This policy describes how we process personal data when you use our website. The legal framework includes the GDPR and, where applicable, the Austrian Telecommunications Act 2021 (TKG 2021) for cookies and similar technologies on your device.

When you access the site, technical data such as your IP address and server logs may be processed for security and operation (legitimate interests under Art. 6 (1) lit. f GDPR).

Images & self-hosted content

Photos and graphics (including the portfolio) are served from our own hosting. No extra third-party tracking cookies are required for that content. Optional embedded social content (Instagram) is loaded only after you consent separately (see below). We do not name business partners or customers in public text where unnecessary; identifiable persons in images are published only with a valid legal basis.

Local storage & consent banner

We store your privacy choice and language preference in your browser's local storage. Legal basis for the language setting is Art. 6 (1) (f) GDPR (user-friendly operation); for consent to optional content, Art. 6 (1) (a) GDPR together with applicable ePrivacy rules. Retention until you clear site data or use “Cookie settings” in the footer to withdraw consent.

Required: site operation, security, language. Optional (only with consent): Google Maps (contact page) and Instagram (home). Without consent, no data is sent to Google or Meta for those embeds.

Google Maps

With consent, maps may be provided by Google Ireland Limited. Personal data (e.g. IP address) may be transferred to Google and processed in third countries. Google provides standard contractual clauses and other safeguards; see Google's privacy policy.

• Google Privacy Policy

Instagram (embedded profile)

On the home page we may show an embedded Instagram profile. Provider is Meta Platforms Ireland Limited (Ireland). Loading may transfer personal data (e.g. IP address) to Meta and process it in third countries. The embed is shown only after your consent under Art. 6 (1) (a) GDPR and applicable ePrivacy rules. Without consent, the embed is not loaded; you can still use a direct link to our public profile.

• Meta / Instagram privacy policy

Contact form & email

If you contact us via the form or email, we process the data you send to handle your request, typically for up to six months, unless longer retention is required by law. We do not share your message with third parties without legal basis or consent.

Form delivery uses Resend (Resend Inc., USA). Legal basis: Art. 6 (1) (b) GDPR (responding to your enquiry). Appropriate safeguards apply for transfers to the UK/US. See resend.com/legal/privacy-policy.

Fonts

We use Montserrat from Google Fonts. Fonts are bundled at build time via Next.js and served from our site, so regular page views do not load fonts directly from Google servers.

Server logs

Our host may log technical data (IP, browser, timestamps, pages visited, etc.) for security and stability. Data is not used for profiling or marketing by us.

Your rights

You may have rights including access, rectification, erasure, restriction, portability, and objection.

If you believe processing violates privacy law, you may contact us at plesnicaroffice@gmail.com or lodge a complaint with a supervisory authority.

Contact

Operator: Plesnicar Solutions / Boris Plesnicar e.U.
Landline: 02734/32048
Email: plesnicaroffice@gmail.com