Privacy policy

1.Controller

The controller for the data processing on this website is:

Email: mail@benpape.com

A data protection officer is not required by law and has therefore not been appointed.

2.Purpose of the processing

This website presents my services and a selection of my projects. It has a contact form, but no login, no shop and no comment function. Personal data is therefore only processed to the extent technically necessary to operate the website – and when you write to me through the contact form or by email of your own accord.

Your data is not used for any other purpose, not sold, and not passed on to third parties for advertising.

3.Data processed

When the website is opened, the following data is recorded automatically in the hosting provider’s server logs:

• IP address
• date and time of access
• the page requested and, where applicable, the referring page
• browser type, browser version and operating system

This data is technically necessary to deliver the website and keep it secure.

If you use the contact form, I process what you enter there: your name, your email address, optionally your company, and the text of your message. Only the name, email address and message are required fields. Your entries are delivered straight to me as an email; there is no database on this website in which form messages are stored.

If you contact me directly by email, I process your email address, your name and everything else you choose to tell me in your message.

Language preference: if you pick “EN” or “DE” in the language switch, that choice is stored in a strictly necessary cookie (name: lang) in your browser for twelve months, so that your next visit opens in the language you chose. The cookie holds nothing but the value “en” or “de” and cannot be used to identify you. You can delete it at any time in your browser settings.

Until you have picked a language, the initial choice is based on the country code that the hosting provider derives from your IP address. Only the country is processed – no more precise location – and the result is not stored.

No tracking or analytics services such as Google Analytics are used, and no cookies are set for analytics or advertising. The fonts are served by this website itself; no connection to third-party servers is made.

4.Legal bases

• Server logs: legitimate interest in the stable and secure operation of the website (Art. 6(1)(f) GDPR). Recording this data is strictly necessary to provide the website, so there is no option to object to it.
• Language cookie and country code: legitimate interest in presenting the website appropriately (Art. 6(1)(f) GDPR). Because the cookie is strictly necessary for the service you requested, no consent under § 165(3) of the Austrian Telecommunications Act 2021 is required.
• Contact form and email contact: taking steps prior to entering into a contract, or performing one (Art. 6(1)(b) GDPR), and legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR).

5.Storage and deletion

Server logs are kept only briefly by the hosting provider and are deleted automatically.

Messages sent through the contact form and email correspondence are kept for as long as they are needed to deal with your enquiry and any follow-up. Where statutory retention periods apply – such as the seven-year period under § 132 of the Austrian Federal Fiscal Code for business records – those take precedence.

You can request deletion of your data at any time, informally and without giving a reason; the contact address for this is in section 8.

6.Hosting, email delivery and transfer to a third country (USA)

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When the site is opened, technical connection data (e.g. IP address, browser type, operating system, time of access) is transmitted to Vercel’s servers. This may constitute a transfer of personal data to the USA.

Vercel is certified under the EU–US Data Privacy Framework (DPF) and is thereby committed to a level of data protection comparable to that of the EU.

Further information can be found in Vercel’s privacy policy: https://vercel.com/legal/privacy-policy

Messages sent through the contact form are delivered using Google’s email service (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and stored in my mailbox there. This may involve processing on Google LLC servers in the USA. Google is certified under the EU–US Data Privacy Framework.

Further information can be found in Google’s privacy policy: https://policies.google.com/privacy

7.Your rights

Under the GDPR you have, in particular, the following rights:

• the right of access to the data processed (Art. 15 GDPR)
• the right to rectification of inaccurate data (Art. 16 GDPR)
• the right to erasure (“right to be forgotten”, Art. 17 GDPR)
• the right to restriction of processing (Art. 18 GDPR)
• the right to data portability (Art. 20 GDPR)
• the right to object to processing based on a legitimate interest (Art. 21 GDPR)
• the right to withdraw consent you have given (Art. 7(3) GDPR)

You also have the right to lodge a complaint with the competent supervisory authority. In Austria this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, https://www.dsb.gv.at.

8.Contact for data protection matters

For questions about the processing of your personal data, or to exercise your rights, please contact:

Email: mail@benpape.com

9.Changes to this privacy policy

This privacy policy may be adapted where necessary to reflect legal or technical changes. The current version published here always applies.