Privacy Policy
Last updated: October 2026
Controller
Astrid Konvicka, Vienna, Austria, Email
Hosting
This website is hosted by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (Cloudflare Pages). When you visit the website, Cloudflare processes technically necessary data such as your IP address, the date and time of access, the page requested and your browser type. This is needed to deliver the website quickly and securely and to protect it against attacks. The legal basis is legitimate interest under Art. 6(1)(f) GDPR. Cloudflare processes this data as a processor. Data may be transferred to the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework. The data is kept only as long as needed for these purposes. For more information, see Cloudflare's privacy policy.
Cookies and tracking
This website does not set any cookies itself and does not use analytics or tracking tools. In individual cases, Cloudflare may set a strictly necessary security cookie, for example to detect and block attacks or automated access. These cookies are not used for tracking or advertising. Fonts, images and audio files are delivered with the website itself and not loaded from other providers.
YouTube videos
If YouTube videos are embedded on this website, they only load when you click the play button. No data is sent to YouTube before that. After the click, the video is loaded in privacy-enhanced mode (youtube-nocookie.com) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data such as your IP address is then transmitted to Google, and Google may use cookies or similar technologies. Data may be transferred to the USA. The legal basis is your consent, given by clicking (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future: after reloading the page, videos only load again when you click play. For more information, see Google's privacy policy.
Contact by email
If you get in touch by email, your details are used only to handle your enquiry and are not passed on without your consent. The legal basis is Art. 6(1)(b) or (f) GDPR. Emails are kept only as long as needed to handle the enquiry, unless legal retention periods apply. The mailbox is operated by Google (Gmail), and data may be transferred to the USA.
Links to social networks
The Instagram link is a plain link. Only when you click it are you taken to Instagram, where Meta's privacy policy applies.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. To exercise them, contact Astrid via the email link above. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.