Privacy Policy
Data Controller
Christoph Salat
salat.tech
Sieveringer Straße 94/10
1190 Vienna
Austria
Email: kontakt@salat.tech
Data Processing
This website is a static website. No cookies are set. When you contact us by email, your information will be stored for processing.
Hosting: This website runs on my own server at Hetzner Online GmbH (data center in Nuremberg, Germany; Privacy Policy). No permanent access logs are kept. Only in the event of technical errors may individual requests, including the IP address, be briefly recorded in server logs; these remain on the server in the EU, are not shared with third parties, and are regularly overwritten. The legal basis is my legitimate interest in the secure and stable operation of the website (Art. 6 para. 1 lit. f GDPR).
Web Analytics (Umami)
This website uses Umami for anonymous visit statistics. Umami runs on my own server in the EU, sets no cookies and does not store IP addresses. I keep the statistics in this anonymous form without a time limit. I remove the click identifier of Google ads ("gclid" and related parameters) and a number of other known click identifiers from advertising and newsletter links in the browser before the visit is transmitted; campaign parameters (utm) such as source and campaign name are recorded. The legal basis is my legitimate interest in improving this website (Art. 6 para. 1 lit. f GDPR).
Contact forms
When you write to me through a form on this website, I process your email address, your message and, if you give it, your name. For the "Website-Check anfragen" (request a website check) form, the address of your website is added. The request also carries the page of this website it was sent from. If you arrived through a link with campaign parameters (for example from an ad), these (source, medium, campaign, keyword and ad content) are sent with the request and appear in the email to me; nothing is stored in your browser for this. I use this information to reply to your request. The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual measures at your request). Without an email address I cannot reply to you.
The form is received by a service on my own server at Hetzner Online GmbH (Nuremberg) and is not stored in a database there. The request is delivered to me as an email. I use Brevo to send it (Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France), which processes the data as a processor. According to its own information, Brevo operates its servers in France and Belgium. Some of Brevo's sub-processors are located outside the EEA, including in the USA and India. For these cases Brevo relies on the EU-US Data Privacy Framework or on standard contractual clauses. Brevo keeps logs of the delivery, which also contain your email address and, for the website check, the address of your website. Brevo deletes these logs after one month and does not keep the content of the email. The delivered email is stored in my mailbox at Proton AG (Switzerland). For Switzerland there is an adequacy decision by the European Commission.
If you tick the box for further emails in the "Website-Check anfragen" form, I also use your email address to send you occasional tips on the visibility of your website. For this I keep your address in a recipient list and send through Brevo. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR and Section 174 of the Austrian Telecommunications Act 2021). You can withdraw it at any time, by email to kontakt@salat.tech or through the unsubscribe link in each message. I keep the address on the list until you withdraw. Without the tick you get the reply to your inquiry and nothing else.
To protect against abuse, the service keeps your IP address in memory for about one hour, in order to limit the number of requests. It is not stored permanently and is not linked to your request. The legal basis is my legitimate interest in protection against spam (Art. 6 para. 1 lit. f GDPR).
I delete your request once it has been dealt with, unless statutory retention obligations apply.
Your Rights
You have the right to access, rectification, erasure, and restriction of processing of your data, the right to object, and the right to data portability. Complaints can be directed to the Austrian Data Protection Authority.
Right to Object
Where I process data on the basis of my legitimate interest (Art. 6 para. 1 lit. f GDPR), you can object to that processing at any time on grounds relating to your particular situation (Art. 21 GDPR). An email to kontakt@salat.tech is enough.