Stefan Kunz IT Solutions
DE

Legal

Privacy policy

Last updated: May 2026

1. Controller

The controller for the processing of personal data on this website is:

DI Stefan Kunz
Alte Landstraße 47
8120 Peggau
Österreich

Email: info@stefankunz.at

2. Overview of processing

Categories of data processed

  • Usage data (pages visited, time of access)
  • Meta / communication data (country, device information)
  • Contact data when using the contact form (name, email, optional company, message)

Categories of data subjects

  • Visitors and users of the website
  • Persons using the contact form

Purposes of processing

  • Provision of the website and its features
  • Security measures
  • Audience measurement (anonymous, cookieless)
  • Responding to enquiries via the contact form

3. Legal bases

  • Consent (Art. 6(1)(a) GDPR) — you have given your consent.
  • Contract performance (Art. 6(1)(b) GDPR) — processing is necessary for performance of a contract or pre-contractual measures.
  • Legitimate interests (Art. 6(1)(f) GDPR) — processing is necessary for the protection of legitimate interests.

4. Security measures

We take appropriate technical and organisational measures in accordance with the law, taking into account the state of the art, to ensure a level of protection appropriate to the risk. The website is delivered over an encrypted SSL/TLS connection (HTTPS).

5. Provision of the website and creation of log files

Each time the website is accessed, our hosting provider (All-Inkl, Germany) automatically records technical data:

  • IP address (anonymised)
  • Date and time of the request
  • Content of the request (specific page)
  • HTTP status code
  • Volume of data transmitted
  • Referrer URL
  • Browser type and version
  • Operating system

Legal basis: Art. 6(1)(f) GDPR (legitimate interests in the technical provision and security of the website). Retention: 14 days.

6. Audience measurement with Umami

We use Umami, a self-hosted, privacy-friendly analytics tool, to evaluate the use of this website. Umami sets no cookies and does not transmit personal data to third parties. IP addresses are anonymised before storage. Data is processed on a server in Germany.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly audience measurement).

7. Contact form

When you send an enquiry via the contact form, your details (name, email, optional company, message) are processed to handle your enquiry. Processing takes place exclusively on the server infrastructure of our hosting provider All-Inkl (Germany) referenced in §5. The data is forwarded to us by email solely to respond to your enquiry and is not used for marketing purposes.

There is no third-country transfer and no additional processors are engaged for the contact form. Automated spam submissions are mitigated solely through a technical mechanism (hidden field + minimum form-fill duration) without involving any external service.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry). Retention: until your enquiry has been fully resolved, then up to 6 months for follow-up questions.

8. Appointment booking (Cal.com)

On the contact page we offer the option to book a first call directly via the service Cal.com (provider: Cal.com, Inc., 2261 Market Street #4571, San Francisco, CA 94114, USA).

The booking dialog is loaded only after you actively click the “Pick a time on the calendar" button (so-called “two-click pattern"). Before that click, no Cal.com scripts or cookies are loaded and no data is transmitted to Cal.com.

When using the booking dialog, Cal.com processes the following data: name, email address, chosen slot, time zone, optional further details (e.g. company or a free-text note) as well as technical data such as IP address and browser information that arise when accessing Cal.com infrastructure.

Third-country transfer: Processing currently takes place on Cal.com infrastructure in the United States. A data processing agreement (DPA) per Art. 28 GDPR is in place with Cal.com, including the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). By clicking the button you additionally consent to the third-country transfer (Art. 49(1)(a) GDPR). As soon as the EU variant cal.eu becomes available for our account, we intend to migrate to infrastructure that processes data exclusively within the EU.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) / Art. 49(1)(a) GDPR (consent to the third-country transfer). Retention: until the appointment has been completed or the business relationship ends; statutory retention obligations remain unaffected. For more information see the Cal.com privacy policy.

9. External links

This website contains links to external websites. We are not responsible for the content or privacy practices of these external sites.

10. Your rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

To exercise your rights, contact us at info@stefankunz.at .

11. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent authority for Austria is:

Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
www.dsb.gv.at

12. Changes to this privacy policy

We reserve the right to update this privacy policy to ensure that it always complies with current legal requirements or to reflect changes to our services.

← Back to home