Privacy Policy

Controller

ANGERMAYER e.U.
Owner: Oliver Angermayer
Rupertiweg 2/Top 8
5324 Faistenau
Austria
Email: oliver@angermayer.ai
Phone: +43 664 388 2188

Hosting and server logs

This website is delivered by Vercel. When you open a page, your browser transmits the connection data a web request necessarily carries, including your IP address, the date and time of the request, the address requested, the amount of data transferred, and details about your browser and operating system. That data is required to deliver the page to your device at all, and it also serves operational security and troubleshooting. We do not use this data for audience measurement, the creation of usage profiles or marketing purposes, and we do not combine it with other data. Where necessary, it may be examined for operational security and technical troubleshooting. Where Vercel processes this data on our behalf, that processing is governed by the applicable data processing agreement; separately, Vercel may process certain account, usage and security data under its own responsibility as a controller. We do not use Vercel Web Analytics or Vercel Speed Insights on this website for visitor or performance analytics. Runtime logs are available to us in the Vercel interface for a short period only, currently one day. That availability in the interface is not the same thing as final deletion at the provider; the actual storage and deletion periods are governed by Vercel’s terms. The legal basis for our processing of technical connection data required for the operation of the website is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically functional operation of this website.

Fonts and external content

The Montserrat typeface used here is served from our own server and is not loaded from a third-party service. When you open this website your browser therefore establishes no connection to any other provider, and no request is made to Google Fonts or any comparable service. No video, map, social media or other external content is embedded.

Cookies and local storage

This website sets no cookies. No analytics, audience-measurement or marketing tools are used, no tracking pixels are loaded, and no CAPTCHA is used. It writes no data to your browser’s local storage or session storage. When you switch languages, the place where you are reading is passed on only in the address of the new page and is not stored.

Contact form

Through the contact form we process your choice under “What is it about?”, the description of your request (no more than 2,000 characters), your first name, last name, company and email address. These are required, because without them a meaningful reply is not possible. You may also, entirely voluntarily, provide a telephone number with country code and indicate that you are interested in a Review. Before sending, you confirm that you have read this privacy policy; that confirmation is transmitted with the enquiry. We use the information to read your enquiry, answer it and carry on the exchange about it. If you leave a required field empty, the form is not submitted and no data is transmitted. Files cannot be submitted through the form. Using the form is voluntary; you can always reach us directly by email or telephone instead. Where your enquiry concerns steps requested by you prior to entering into a possible contract with you, processing is based on Art. 6(1)(b) GDPR. In other cases, in particular where you write on behalf of a company or organisation and are not yourself the prospective contracting party, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is receiving and appropriately responding to communications voluntarily addressed to ANGERMAYER.

As soon as your enquiry has been accepted for delivery to ANGERMAYER, you receive an automatic acknowledgement at the email address you entered. It only confirms receipt and contains none of the details of your enquiry; the personal reply follows separately. So that an enquiry is not delivered twice if it is sent again, every submission carries a random identifier that contains none of the details of your enquiry.

To protect against automated submissions, the form contains a field that is not visible to visitors; if it is filled in, the submission is discarded and no email is created. In addition, the server function limits how many enquiries from the same email address are processed within a short time. For this, the email address is held temporarily in the server function’s working memory to count the enquiries of the last ten minutes; it is not stored permanently and is used for nothing else.

Email delivery, recipients and processing on our behalf

When you send the form, your browser transmits the information in encrypted form to a server function of this website that runs at Vercel. It checks the information and hands an email containing your enquiry to the delivery service Resend, operated by Plus Five Five, Inc., which delivers it to our mailbox. Your email address is set as the reply-to address of that email, so that our reply reaches you directly. Only once Resend has accepted this notification for delivery is the acknowledgement to you also sent through Resend. Open tracking and click tracking are switched off in our Resend account, so the emails we send contain neither. The form does not store the information in any database; it reaches us as an email in our mailbox. That mailbox runs on Google Workspace, so incoming messages are received and stored there. Recipients or categories of recipients are ANGERMAYER e.U. as controller, Vercel as provider of the hosting and technical infrastructure, Resend as email delivery provider, and Google as provider of our email hosting. Where these providers process personal data on our behalf in order to provide the respective services, that processing is governed by our instructions and by the applicable data processing agreement. The providers may use documented subprocessors for this purpose. Depending on the provider and the category of data concerned, certain account, usage, security or service-related data may also be processed by the provider under its own responsibility as controller.

Processing outside the EU

Our providers operate internationally, so processing of personal data outside the European Union, in particular in the United States, is possible. For supported Google Workspace services we have selected Europe as the data region for data at rest; that setting applies only to the services and data types it supports and does not mean that all processing takes place exclusively in Europe. The sending region shown in our Resend account, Ireland, concerns the sending path and likewise does not mean that all data is stored there only. The data processing agreements we have concluded with our providers include the European Commission’s Standard Contractual Clauses for such transfers; Resend additionally states participation in the EU-US Data Privacy Framework. Further information about the safeguards used, including information on how to obtain a copy of the applicable safeguards, can be requested at oliver@angermayer.ai.

Retention

For enquiries through the contact form: the submitted data is generally retained for no longer than six months after the enquiry has been concluded, unless statutory retention duties, the establishment or defence of legal claims, or a subsequent contractual relationship require longer retention. The six-month period is our own period as controller and covers enquiries through the contact form. It does not apply to connection data or documents subject to statutory retention. Connection data arising when a page is requested is subject to our hosting provider’s periods, and the delivery logs of emails sent through Resend are subject to Resend’s periods. Where longer retention is exceptionally necessary for the establishment, exercise or defence of legal claims, it is based on Art. 6(1)(f) GDPR; our legitimate interest is the establishment, exercise or defence of legal claims. Where statutory retention obligations apply, the processing necessary to comply with those obligations is based on Art. 6(1)(c) GDPR.

No automated decision-making

No automated decision-making and no profiling takes place. The contact form checks only whether the required fields are filled in, whether the email address and telephone number look formally valid, and whether the entries stay within the permitted length; in addition, submissions through the hidden protective field and too many submissions within a short time are technically refused. That is a technical input check, not a decision about you. Every substantive decision about an enquiry is made by a person.

Your rights

You have the right of access to the data processed about you, to rectification of inaccurate data, to erasure, to restriction of processing, to object to processing, and, where applicable, to data portability. Where processing is based on Art. 6(1)(f) GDPR, you have the right to object to that processing in accordance with Art. 21 GDPR. A message to oliver@angermayer.ai is enough for all of this.

Right to lodge a complaint

If you believe your data is not being processed lawfully, you can lodge a complaint with a data protection supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).