Privacy policy

Controller

Erol Mirth
Schragenstraße 11
8280 Fürstenfeld
Austria

Email: info@erolmirth.com
Phone: +43 664 1404699

No data protection officer has been appointed, as the requirements of Art. 37 GDPR are not met.

No cookies, no tracking

This website sets no cookies and stores no other information on your device. No analytics or statistics services, advertising networks, social media plugins, chat widgets or other tracking technologies are used. There is no profiling and no automated decision-making within the meaning of Art. 22 GDPR.

The website is available in German, English and Portuguese. When you open the German home page, a small script in your browser checks the language set there, which your browser sends with every page request anyway. If it prefers English or Portuguese, a notice with a link to that version appears at the bottom; otherwise nothing appears. This information does not leave your device and is not stored. You can always choose for yourself using the language selection at the top of every page.

For this reason, no consent under Section 165 (3) of the Austrian Telecommunications Act 2021 is required – there is no cookie banner.

The fonts used (Fraunces and Manrope) are embedded when the website is built and delivered from the website’s own server. Visiting the website therefore establishes no connection to Google or any other third-party CDN.

Hosting

This website is hosted as a static website on statichost.eu, a service of Variable Object Assignment, Stockholm, Sweden. The servers are located in Germany (Hetzner Online GmbH); the content delivery network of BunnyWay d.o.o., Slovenia, may also be used for delivery. No data is transferred to third countries outside the EU. A data processing agreement under Art. 28 GDPR is in place with the provider.

When you visit the website, the server processes technically necessary data – in particular your device’s IP address, date and time and the file requested – in order to deliver the page to your browser. According to the provider, no personal access data is stored in the process. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing the website securely and without disruption).

The connection to the website is encrypted throughout with TLS (HTTPS).

Contact by email and phone

If you contact me by email or phone, I process the data you provide – in particular your name, email address or phone number and the content of your message – in order to handle your enquiry.

The legal basis is Art. 6 (1) (b) GDPR where the enquiry is aimed at entering into or performing a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).

The data is deleted as soon as it is no longer needed for the purpose of processing and no statutory retention obligations apply – in particular the seven-year retention period under Section 132 of the Austrian Federal Fiscal Code (BAO) for business-relevant documents.

This website has no contact form. Clicking an email address only opens your own email program; no data is transmitted to me in the process.

Emails to info@erolmirth.com are received and stored via the mailbox.org service of Heinlein Hosting GmbH, Schwedter Straße 8/9A, 10119 Berlin, Germany. The servers are located in Germany; no data is transferred to third countries. A data processing agreement under Art. 28 GDPR is in place with the provider.

Appointment booking via Zeeg

For booking introductory calls I use the Zeeg service of Zeeg GmbH, Friedrichstraße 155, 10117 Berlin, Germany. The booking page is not embedded in this website. The buttons “Book a 30-minute introductory call” and “Book a call” (on mobile) are ordinary links to https://zeeg.me/erolmirth/Erstgespraech (opens in a new tab). As long as you do not click either of them, no data is transmitted to Zeeg.

On the booking page, Zeeg processes the data you enter – usually name, email address, company, preferred appointment and optional details about your request – as well as technical access data. According to Zeeg, the data is stored on servers in Germany and the Netherlands (Open Telekom Cloud of Telekom Deutschland GmbH); Zeeg sends booking confirmations via Brevo (Sendinblue GmbH, Berlin). A data processing agreement under Art. 28 GDPR is in place with Zeeg.

Zeeg delivers the booking page via the network of Cloudflare, Inc. (USA), which also serves to protect against automated access. Technical access data such as your IP address is processed in the process. Cloudflare is certified under the EU-US Data Privacy Framework; data is transferred to the USA on the basis of the European Commission’s adequacy decision (Art. 45 GDPR).

I process the appointment data sent to me via Zeeg to prepare and hold the call. The legal basis is Art. 6 (1) (b) GDPR. Zeeg’s privacy policy also applies: zeeg.me/en/legal/privacy (opens in a new tab)

Online meetings

I hold video calls via OpenTalk, provided by mailbox.org (Heinlein Hosting GmbH, Berlin). OpenTalk runs in the browser; no installation is needed. According to the provider, the servers are located in data centres in Germany; no data is transferred to third countries. A data processing agreement under Art. 28 GDPR is in place with mailbox.org.

The data needed to take part is processed – in particular your display name, video and audio, chat messages and technical connection data such as your IP address. Calls are not recorded. The legal basis is Art. 6 (1) (b) GDPR.

If a company invites me via its own system, such as Microsoft Teams, the inviting company is responsible for processing in that system. A call by phone is always possible as well.

Links to external services

This website links to the controller’s LinkedIn profile and to the websites of reference clients (bavaria-soul.de, crochecomxama.pt). These are simple links without embedded content or social media plugins; the images of the reference websites are screenshots delivered from the website’s own server. Data is only transmitted to the respective provider once you click a link. From then on, that provider’s privacy policy applies – for LinkedIn, that of LinkedIn Ireland Unlimited Company.

Recipients of data

Your data is only passed on to the service providers named above (hosting, email, video conferencing and, where applicable, appointment booking) and to service providers required to fulfil legal obligations (for example tax advice). Data is never sold.

Your rights

You have the following rights with respect to the controller:

• Access to the data processed (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)

An informal message to info@erolmirth.com is enough to exercise them.

Right to lodge a complaint

If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with the supervisory authority:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria
dsb@dsb.gv.at
www.dsb.gv.at (opens in a new tab)

Changes to this privacy policy

This privacy policy is updated as soon as data processing on this website changes – for example due to new features or changed legal requirements. The version published on this page applies.