Privacy
Notice.

Controller

Christian Schwendemann, Vienna, Austria. Privacy inquiries can be initiated through LinkedIn ↗.

Website delivery and security

The website is delivered through Cloudflare. Technical request information—such as IP address, timestamp, requested URL, browser information, and security signals—may be processed to deliver and protect the website. The legal basis is the legitimate interest in reliable and secure website operation under Article 6(1)(f) GDPR.

Optional Dynatrace analytics and Session Replay

Dynatrace Real User Monitoring is loaded only after explicit consent. It may process page views, entry/referrer information, device and browser characteristics, performance measurements, clicks, outbound destinations without query strings, scroll-depth milestones, session identifiers, and masked Session Replay data.

The purposes are to understand how visitors arrive, which content paths they follow, where they leave the site, and whether the website performs correctly. The legal basis is consent under Article 6(1)(a) GDPR.

If consent is declined, the Dynatrace script is not requested and no analytics or Session Replay is started.

Consent storage and withdrawal

The consent decision is stored in the browser's local storage under 3xtra.analytics.consent.v1. This setting is necessary to remember the visitor's choice.

Consent can be changed at any time using the Privacy choices control. Withdrawal disables RUM and Session Replay for subsequent activity and removes Dynatrace cookies through the available Dynatrace privacy API.

Cookies and browser storage

Before consent, this site does not set analytics cookies. After consent, Dynatrace may use first-party cookies, local storage, session storage, and IndexedDB to aggregate sessions, route monitoring beacons, and maintain Session Replay. Details are available in the Dynatrace storage reference ↗.

Recipients, transfers, and retention

Technical delivery data may be processed by Cloudflare, and consented experience data by Dynatrace, as service providers. Processing may occur in the European Union and in third countries subject to the safeguards described by those providers.

Data is retained according to the security and telemetry retention settings configured with the respective providers and is deleted or aggregated when those periods expire.

Visitor rights

Visitors may request access, correction, deletion, restriction, portability, or object to processing where applicable. Consent may be withdrawn at any time without affecting processing carried out before withdrawal. Complaints may be submitted to the Austrian Data Protection Authority.

No advertising profiles

This website does not use advertising trackers, sell visitor information, or use analytics data for automated decision-making.