Privacy Policy

1. Controller

Finnian Wisak, Im Auholz 8, 2344 Maria Enzersdorf, Austria · finnian.wisak@icloud.com

Protecting your data matters to me. This website processes personal data only to the extent necessary, in accordance with the GDPR, the Austrian Data Protection Act (DSG) and the Telecommunications Act 2021 (TKG 2021).

2. Hosting & server logs

When you visit this website, the hosting provider technically processes your IP address, date and time, requested page, browser and operating system in order to deliver the website and keep it secure. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). Logs are deleted after a short period unless needed to investigate an attack.

3. Cookies & local storage

This website does not use tracking or advertising cookies. It only stores what is technically necessary (§ 165(3) TKG 2021):

• lang (cookie, 1 year) — your chosen language.
• theme (local storage) — light or dark mode.
• fw-consent-v1 (local storage) — your privacy choice.
• fw-loaded (session storage) — so the loading screen only plays once per visit.
• fw_session (cookie, 8 hours) — only for the site owner when logged into the admin area.

You can change your choice at any time via “Cookie settings” in the footer.

4. Anonymous statistics (only with consent)

If you allow statistics, this server counts page views without cookies and without third parties. No IP address is stored: a visitor is represented by a one-way hash of IP address, browser string and a random value that changes every day and is then discarded, so visits cannot be linked across days. Stored are only daily totals: page views, number of visitors, visited pages, referring website and device class (mobile/tablet/desktop). Legal basis: Art. 6(1)(a) GDPR (consent), revocable at any time with effect for the future. Aggregates are kept for at most 12 months.

5. 3D content from Spline (only with consent)

The design page can show an interactive 3D object provided by Spline (Spline Design Inc., USA). It is only loaded after you allow “External media” or click “Load 3D object”. Your browser then connects to Spline's servers, which receive your IP address and technical browser data. Data may be transferred to the USA; Spline's own privacy policy applies. Legal basis: Art. 6(1)(a) GDPR (consent), revocable at any time.

6. Contact form & email

If you contact me via the form or by email, I process your name, email address, topic and message to answer your request and, if applicable, to prepare a contract. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (answering enquiries). Messages are stored on this website's server and deleted once they are no longer needed, at the latest after 3 years unless statutory retention obligations apply. To prevent spam, the form uses an invisible check field and a time check; no third-party captcha is used.

7. Fonts

All fonts are served from this website's own server. No connection to Google or other font providers is made.

8. External links

Projects open in a new tab on other websites. Their operators are responsible for data processing there.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent at any time. Just write to the email address above. If you believe the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

10. Security

This website is served exclusively via encrypted HTTPS connections and uses strict security headers.