Privacy Policy
This policy describes which personal data is processed when you visit this website and use its forms, why that happens, and how long the data stays. It describes only what actually happens on this website.
Controller
ANGERMAYER e.U.
Owner: Oliver Angermayer
Rupertiweg 2/Top 8
5324 Faistenau
Austria
Email: oliver@angermayer.ai
Phone: +43 664 388 2188
Hosting and server logs
This website is delivered by Vercel. When you open a page, your browser transmits the connection data a web request necessarily carries, including your IP address, the date and time of the request, the address requested, the amount of data transferred, and details about your browser and operating system. That data is required to deliver the page to your device at all, and it also serves operational security and troubleshooting. We do not use this data for audience measurement, the creation of usage profiles or marketing purposes, and we do not combine it with other data. Where necessary, it may be examined for operational security and technical troubleshooting. Where Vercel processes this data on our behalf, that processing is governed by the applicable data processing agreement; separately, Vercel may process certain account, usage and security data under its own responsibility as a controller. We do not use Vercel Web Analytics or Vercel Speed Insights on this website for visitor or performance analytics. Runtime logs are available to us in the Vercel interface for a short period only, currently one day. That availability in the interface is not the same thing as final deletion at the provider; the actual storage and deletion periods are governed by Vercel’s terms. The legal basis for our processing of technical connection data required for the operation of the website is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically functional operation of this website.
Fonts and external content
The Montserrat typeface used here is served from our own server and is not loaded from a third-party service. When you open this website your browser therefore establishes no connection to any other provider, and no request is made to Google Fonts or any comparable service. No video, map, social media or other external content is embedded.
Cookies and local storage
This website sets no cookies. No analytics, audience-measurement or marketing tools are used, no tracking pixels are loaded, and no CAPTCHA is used. It writes no data to your browser’s local storage or session storage.
Contact form
Through the contact form we process your first name, last name, email address and your message. Those four are required, because without them a meaningful reply is not possible. You may also provide, entirely voluntarily, a salutation, a title, a telephone number and a topic. We use the information to read your enquiry, answer it and carry on the exchange about it. The recipient is ANGERMAYER; the message reaches us by email. If you leave a required field empty, the form is not submitted and no data is transmitted. Using the form is voluntary; you can always reach us directly by email or telephone instead. Where your enquiry concerns steps requested by you prior to entering into a possible contract with you, processing is based on Art. 6(1)(b) GDPR. In other cases, in particular where you write on behalf of a company or organisation and are not yourself the prospective contracting party, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is receiving and appropriately responding to communications voluntarily addressed to ANGERMAYER.
ArchOS evaluation request
The evaluation request on the ArchOS page is a separate path with its own scope. Required are your first name, last name, email address, office or company, city, country and your message. Voluntary are salutation, title, telephone number, office address, team size, and a short note on context or interest. We use this information to clarify whether the model context and the evaluation scope fit together, and to talk with you about it. A request establishes no participation and no agreement; any collaboration is discussed only afterwards. Where you are yourself taking steps prior to entering into a possible contract with you, processing is based on Art. 6(1)(b) GDPR. Where you enquire on behalf of a practice, company or organisation, or where the request does not constitute such pre-contractual steps with you personally, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is reviewing and handling voluntary enquiries concerning a possible ArchOS evaluation or collaboration.
Studio Brief
In the Studio Brief we process the collaboration model you chose, your answers from the guided steps, your first name, last name, email address, and a voluntary additional message. A summary is generated in your browser from your own answers, and you see it in full before sending; it is transmitted to ANGERMAYER together with your contact details. Steps you skip are not filled in and never guessed. While you work through the brief, your answers are held only in your browser memory and are not stored on your device. Where you are yourself taking steps prior to entering into a possible contract with you, processing is based on Art. 6(1)(b) GDPR. Where you submit the Studio Brief as an employee, representative or contact person for another organisation, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is handling enquiries about possible collaboration submitted to us on behalf of a company or organisation. Submitting a Studio Brief does not in itself create a contract.
Notes response (Resonanz)
Below an article in ANGERMAYER Notes you can send a response. What is transmitted is the reaction you selected and the article it refers to. A name, an email address and a thought in free text are voluntary; an email address is required only if you explicitly ask for a reply, because otherwise a reply would not be possible. Responses are not displayed publicly, not published, and not counted as a public reaction. They reach ANGERMAYER only, and serve to place the article and, where you asked for it, to write back to you. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is receiving and understanding voluntary feedback on our editorial content and continuing communication where requested by the reader.
ANGERMAYER Updates and ARCHĒ notification
For ANGERMAYER Updates and for the notification about the launch of ARCHĒ we process your email address, voluntarily your first name, the notification type you selected, the language, and the page the subscription came from. A subscription is activated only when you agree through a separate checkbox that is never pre-ticked. This subscription is separate from every enquiry: sending a message, an evaluation request, a Studio Brief or a Notes response does not subscribe you. The legal basis is your consent under Art. 6(1)(a) GDPR. For sending electronic mail for marketing purposes we additionally rely on your consent under § 174 of the Austrian Telecommunications Act 2021 (TKG 2021). We do not rely on any existing-customer exception.
Confirmation procedure (double opt-in)
After your request we send you an email containing a confirmation link. The subscription becomes active only when you open that link and explicitly trigger the confirmation there. The link is valid for 72 hours and carries your details in encrypted form only. If the confirmation link is not used, no confirmed subscription is created and no confirmed contact for ANGERMAYER Updates or the ARCHĒ notification is stored. Before you confirm, you receive no update email from us. The confirmation procedure is part of this consent-based subscription process under Art. 6(1)(a) GDPR and is not a separate processing purpose. It serves to verify the subscription request and to be able to demonstrate that consent was given.
Record of consent
On confirmation we store four items as evidence: the time of the confirmation, the page the subscription came from, the version of the consent wording, and the language. No IP address, no device data and no tracking information is stored. Information necessary to demonstrate that consent was given is retained on the basis of Art. 6(1)(c) GDPR in conjunction with Art. 7(1) and Art. 5(2) GDPR. Only what is necessary for that demonstration is stored.
Withdrawal and unsubscribing
You can withdraw your consent at any time with effect for the future. Every update email contains an unsubscribe link for that purpose; an informal message to oliver@angermayer.ai is equally sufficient. After unsubscribing you receive no further update emails. Where necessary, we retain a limited suppression record after an unsubscribe so that the request can continue to be respected and further unwanted marketing communications can be prevented. The legal basis for this is Art. 6(1)(f) GDPR. Our legitimate interest is continuing to respect unsubscribe requests and preventing unwanted communications. The lawfulness of processing up to the withdrawal is unaffected.
Email delivery, recipients and processing on our behalf
We use the service Resend, operated by Plus Five Five, Inc., to send emails and to manage confirmed subscriptions. The internal notification to ANGERMAYER, the acknowledgement to you, and the confirmation and update emails of a subscription all run through Resend. Open tracking and click tracking are switched off in our Resend account, so the emails we send contain neither. The content of your enquiry then reaches us as an email in our mailbox. That mailbox runs on Google Workspace, so incoming messages are received and stored there. Recipients or categories of recipients include ANGERMAYER e.U. as controller, Vercel as provider of the hosting and technical infrastructure, Resend as email delivery provider, and Google as provider of our email hosting. Where these providers process personal data on our behalf in order to provide the respective services, that processing is governed by our instructions and by the applicable data processing agreement. The providers may use documented subprocessors for this purpose. Depending on the provider and the category of data concerned, certain account, usage, security or service-related data may also be processed by the provider under its own responsibility as controller.
Processing outside the EU
Our providers operate internationally, so processing of personal data outside the European Union, in particular in the United States, is possible. For supported Google Workspace services we have selected Europe as the data region for data at rest; that setting applies only to the services and data types it supports and does not mean that all processing takes place exclusively in Europe. The sending region shown in our Resend account, Ireland, concerns the sending path and likewise does not mean that all data is stored there only. The data processing agreements we have concluded with our providers include the European Commission’s Standard Contractual Clauses for such transfers; Resend additionally states participation in the EU-US Data Privacy Framework. Further information about the safeguards used, including information on how to obtain a copy of the applicable safeguards, can be requested at oliver@angermayer.ai.
Retention
For enquiries through the contact form, the ArchOS evaluation request, the Studio Brief, and for Notes responses that contain personal data or a reply address: the submitted data is generally retained for no longer than six months after the enquiry has been concluded, unless statutory retention duties, the establishment or defence of legal claims, or a subsequent contractual relationship require longer retention. This period does not apply to subscriptions to ANGERMAYER Updates or the ARCHĒ notification: data from a confirmed subscription is kept for as long as the subscription exists. An unconfirmed subscription results in no stored contact; the confirmation link expires after 72 hours. The six-month period is our own period as controller and covers the enquiry routes named above. It does not apply to connection data, records of consent, unsubscribe records, or documents subject to statutory retention. Connection data arising when a page is requested is subject to our hosting provider’s periods. Unsubscribe and suppression records are kept for as long as they are needed for an unsubscribe to remain permanently effective. Where longer retention is exceptionally necessary for the establishment, exercise or defence of legal claims, it is based on Art. 6(1)(f) GDPR; our legitimate interest is the establishment, exercise or defence of legal claims. Where statutory retention obligations apply, the processing necessary to comply with those obligations is based on Art. 6(1)(c) GDPR.
No automated decision-making
No automated decision-making and no profiling takes place. Forms check only whether required fields are filled in and whether an email address looks formally valid. That is a technical input check, not a decision about you. Every substantive decision about an enquiry is made by a person.
Your rights
You have the right of access to the data processed about you, to rectification of inaccurate data, to erasure, to restriction of processing, to object to processing, and, where applicable, to data portability. Where processing is based on Art. 6(1)(f) GDPR, you have the right to object to that processing in accordance with Art. 21 GDPR. Any consent you have given can be withdrawn at any time. A message to oliver@angermayer.ai is enough for all of this.
Right to lodge a complaint
If you believe your data is not being processed lawfully, you can lodge a complaint with a data protection supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).
Last updated: 18 August 2026