Contact
Privacy Policy

1. Data Controller

Christoph Endres e.U.

Heiliggeiststraße 1b, 6020 Innsbruck, Austria

Email: hallo@christophendres.com

VAT ID: ATU77134129

2. Principles

We process visitors’ personal data exclusively on the basis of the EU GDPR, the Austrian Data Protection Act (DSG), and other applicable legal provisions. This Privacy Policy informs you about the type, scope, and purpose of data processing on www.christophendres.com.

3. Categories of Data Processed & Purposes

Data Category Purpose of Processing Legal Basis Retention Period
Server Log Files Website operation, security, error detection Legitimate interest (Art. 6(1)(f) GDPR) up to 30 days
Contact Form Data Handling and response to inquiries Performance of contract (Art. 6(1)(b) GDPR) until conclusion of correspondence + 3 years
Technically Necessary Cookies Session management, security Legitimate interest (Art. 6(1)(f) GDPR) until end of session
External Font Cookies Loading of Google Fonts & Adobe Fonts Consent (Art. 6(1)(a) GDPR) until consent is withdrawn
Google Analytics (GA4) Analysis and optimization of website usage Consent (Art. 6(1)(a) GDPR) 14 months (anonymized)
LinkedIn Profile Link (Shariff) Display of profile link without automatic data transfer Consent (Art. 6(1)(a) GDPR) until consent is withdrawn

4. Cookie Banner (Cookie Script – Free Version)

We use the free version of Cookie Script to manage your consents. This tool itself does not set tracking cookies and does not guarantee full GDPR compliance. A paid upgrade (€100/year) for a fully GDPR-compliant banner may be optionally purchased by you.

5. Integration of External Services

  • Hosting: Your data is hosted by IONOS SE (Ionos.com, Germany). A Data Processing Addendum in accordance with Art. 28 GDPR is in place.
  • CMS: We use Webflow Inc. (USA) as the content management system. A Data Processing Addendum in accordance with Art. 28 GDPR is in place.
  • Google Fonts / Adobe Fonts: These are only loaded after your consent; your IP address and referrer information are transmitted to Google or Adobe.
  • Google Analytics (GA4): Activated only after consent; IP anonymization is enabled.
  • LinkedIn Profile Link: Embedded via Shariff; no data transfer occurs without your click.

6. Disclosure to Third Parties

Your personal data will only be disclosed to third parties

  • to the extent necessary for contract performance (e.g., IONOS as hosting provider or Webflow as CMS provider),
  • if you have given your express consent,
  • or if we are legally obliged to do so.

7. Your Rights

Under the GDPR, you have the right to request

  • information about your stored personal data,
  • correction of inaccurate data,
  • deletion of your data (“right to be forgotten”),
  • restriction of processing,
  • data portability,
  • withdrawal of consent at any time (Art. 7(3) GDPR),
  • lodge a complaint with the Austrian Data Protection Authority (Wickenburggasse 8, 1080 Vienna; email: dsb@dsb.gv.at).

8. Data Security

We protect your data by implementing technical and organizational measures, including TLS/HTTPS encryption, regular software updates, and access controls.

9. Updates to this Policy

This Privacy Policy is effective as of May 6, 2025. We reserve the right to modify it as necessary. Please review this page periodically for updates.