Privacy policy
Protecting your personal data is important to me. I process your data exclusively on the basis of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). This page explains which data is processed when you visit this website and when you contact me. The German version is legally authoritative.
1. Controller
Eduard Bodan – Web Design & Development
Rotenmühlgasse 64/10/2+3
1120 Vienna, Austria
Email: kontakt@eduardbodan.at
2. Hosting and server log data
This website is hosted by Cloudflare, Inc. (USA) using the Cloudflare Pages service. Cloudflare also provides the domain's DNS and the network that delivers the website. When you visit the website, Cloudflare processes technically necessary data, in particular IP address, date and time of access, requested address, amount of data transferred and browser and system information. This data is required to deliver the website and to ensure its security and stability (e.g. defending against attacks).
The legal basis is my legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR). Cloudflare processes the data as a processor on the basis of Cloudflare's Data Processing Addendum.
Transfer to the USA: According to Cloudflare, Cloudflare, Inc. is certified under the EU-US Data Privacy Framework (list on dataprivacyframework.gov). The transfer is based on the European Commission's adequacy decision (Art. 45 GDPR); in addition, Cloudflare's agreement provides for the European Commission's standard contractual clauses (Art. 46 GDPR).
3. Contact form
If you use the contact form, I process the data you enter: name, company (optional), email address, requested service, budget (optional), message and the selected website language. Providing this data is voluntary; however, I cannot handle your enquiry without the required fields.
The form data is checked by a function of this website (Cloudflare Pages Functions, see section 2) and is not stored in a database; instead, it is sent as an email to my mailbox via the email delivery service Resend (USA) (see section 4). Resend processes the data as a processor and, according to Resend, keeps delivery logs of the emails for a limited period. According to Resend, it is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
To protect against spam, the form contains a field that is invisible to humans; submissions in which this field is filled in are discarded.
The legal basis is the performance of pre-contractual measures at your request (Art. 6(1)(b) GDPR) or my legitimate interest in answering enquiries and protecting against spam (Art. 6(1)(f) GDPR).
Storage period: Enquiries that do not lead to a contract are deleted from my mailbox no later than twelve months after the last communication. If a contract results, I keep the tax-relevant documents (in particular records and receipts) for seven years in accordance with § 132 of the Austrian Federal Fiscal Code (BAO); the period starts at the end of the relevant calendar year.
4. Contact by email
If you email me or I am notified via the contact form, your details are stored in my mailbox to handle the enquiry. My mailbox is operated by easyname GmbH (Vienna, Austria). I also handle incoming emails and form notifications in Gmail, a Google service (for users in the EEA: Google Ireland Limited, Ireland); processing in the USA cannot be ruled out. The legal basis is Art. 6(1)(b) or (f) GDPR.
5. No cookies, no tracking, local fonts
This website does not set cookies and does not use analytics, tracking or advertising services. Fonts are loaded from this website itself; there is no connection to Google Fonts or other font providers. Links to external websites (e.g. RIS or the Data Protection Authority) only connect to those sites after you click them.
6. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Please contact kontakt@eduardbodan.at.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
No automated decision-making, including profiling, takes place.
Last updated: 10/2026