Privacy Policy

Controller

The controller responsible for data processing within the meaning of the GDPR:

Nik Khosravipour
Reithofferplatz 15, 1150 Vienna, Austria
Email: [email protected]

Hosting

This website is operated by the controller on his own hardware in Vienna, Austria. No external hosting provider and no processor is involved; the data does not leave Austria.

All assets, including the web fonts, are served from this domain. No request made by your browser while viewing this site is sent to a third-party server.

The web server keeps no persistent access logs containing IP addresses. Only in the event of a fault are technical error messages recorded for diagnostics; there is no routine, per-request logging of page views at the server level. The legal basis for fault diagnostics is Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

Audience measurement (self-hosted)

A self-hosted, cookieless statistic is used to gauge page views. No cookies are set and no data is shared with third parties. Per page view, the following is stored:

• the path requested (e.g. /research),
• a salted SHA-256 hash of your IP address's network block — the address is first shortened to its /24 (IPv4) or /48 (IPv6) block, discarding the part that identifies your individual device, and only then hashed with a secret key (neither your full IP address nor the full hash of it is stored),
• the user agent (truncated),
• the referrer (truncated).

Shortening the address before hashing means many visitors on the same network share one stored value, so it cannot be used to single out an individual device, and the secret key means the value cannot be recomputed or looked up from the address. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-preserving audience measurement). As there is no access to the user's device (no cookies, no tracking), consent under § 165 of the Austrian Telecommunications Act (TKG 2021) is not required. Statistics data is kept for 12 months and then deleted.

Contacting me

If you get in touch by email, the data you provide (name, email address, and the content of your message) is processed to handle your request (Art. 6(1)(f) GDPR) and deleted once the matter is concluded, unless statutory retention obligations apply.

Your rights

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21 GDPR). To exercise these rights, contact the email address above.

You also have the right to lodge a complaint with the supervisory authority:

Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria
www.dsb.gv.at (opens in new tab)