Privacy Policy

This English version is a courtesy translation. The German version (Datenschutz) is legally binding.

Controller

The controller responsible for data processing on this website is:

Dominik Kapper
Olga-Rudel-Zeynek-Gasse 16/12
8054 Graz
Austria

Email: office@kapper-consulting.at
Phone: +43 699 14452699

Hosting

This website runs on a virtual private server (VPS) provided by easyname GmbH, a hosting provider based in Austria. Processing takes place exclusively on servers within the EU.

The web server in use logs access to this website and to the analytics subdomain for security purposes, including IP address, timestamp, and requested URL. These logs are used exclusively to detect and automatically block abuse (e.g. brute-force login attempts, mass requests to the contact form). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security of our IT systems, Art. 32 GDPR). Logs are rotated weekly and automatically deleted after a maximum of 8 weeks.

Contact form

When you use the contact form on this website, we process the data you provide (name, email address, topic, and message) in order to respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR (steps taken prior to entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Two service providers are involved in delivering the email:

• Brevo (Sendinblue SAS, France) as the email delivery service. Brevo processes the form data solely to deliver the email, acting as a data processor; processing takes place within the EU.
• Microsoft 365 (Microsoft Ireland Operations Ltd.) as the mailbox provider where the incoming message arrives. The tenant in use is configured for Microsoft's EU Data Boundary; email content is stored and processed within the EU.

Data submitted through the contact form is kept only as long as necessary to process your inquiry, and is deleted afterwards once the purpose no longer applies and no statutory retention obligations remain.

Web analytics (Umami)

We use Umami, a self-hosted, open-source web analytics service, running on our own server. Umami does not use cookies and does not build personal user profiles. IP addresses are used only briefly for technical processing and are not stored in identifiable form. Because no cookies are set and no persistent recognition of visitors takes place, no consent is required for this. Separately, access to this subdomain is logged server-side for security purposes; see the "Hosting" section above for details.

Local storage (language preference)

This website stores your selected language (German/English) in your browser's local storage (localStorage). This is technically necessary to remember your preference and falls under the exemption for strictly necessary functionality; no consent is required for this.

Your rights

Under the GDPR, you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21). Please contact us using the address above to exercise any of these rights.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.