Florian Stangl
Handel-Mazzetti Straße 13, 4690 Schwanenstadt, Austria
me@florianstangl.com
Visiting this site involves three kinds of processing: server log files, web analytics, and — only if you choose to use it — the contact form. Each is described below.
The only data you actively provide is through the contact form: name, email address, and message content. This data is used solely to respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR — processing necessary for pre-contractual measures at your request.
Every request to this site is recorded by the web server in a log file containing your IP address, the date and time, the page requested, the referring page, and your browser's user-agent string. These logs are used for operational security and troubleshooting, are not combined with any other data source, and are automatically deleted after 14 days. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in operating a secure and functioning website.
This site uses Umami, open-source analytics software running on my own server
under stats.florianstangl.com. It is operated by me; no analytics data is transmitted
to any third-party service.
This software sets no cookies and stores no identifier on your device. Your IP address is processed transiently only: it is used to derive a daily checksum (a hash of IP address, user agent and a salt value that rotates every day at 00:00 UTC) and to determine an approximate location, resolved against a geolocation database held locally on the same server. Your IP address is never stored and is never passed to a third party.
What is stored is: the daily checksum, the page visited, the referring page, browser, operating system, device type, screen size, language, and approximate location (country, region, city). Because the checksum stays the same for one day, this data is pseudonymised — not anonymous: it does not identify you by name, but within a single day it can distinguish one visitor from another. The daily salt rotation means your visits cannot be linked across days. Stored data is deleted after 365 days. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in understanding how this site is used.
In parallel, this site currently uses Usermaven, an analytics service provided by a
third party and loaded via the subdomain w.florianstangl.com. Unlike the self-hosted
analytics described above, Usermaven sets a cookie in your browser
(__eventn_id_UMSzxQ08Gz) and transmits usage data to the provider's infrastructure.
It is configured without form tracking and with URL randomisation enabled.
Legal basis: Art. 6(1)(f) GDPR — legitimate interest in understanding how this site is used.
You can prevent this processing at any time by blocking or deleting cookies for this site in your browser settings.
This website and the self-hosted analytics instance run on servers of Contabo GmbH (Aschauer Straße 32a, 81549 Munich, Germany), acting as a data processor under a data processing agreement. Website content, blog data and the self-hosted analytics database are stored exclusively on these servers in Germany.
This site is delivered via Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA), which sits in front of the server as a reverse proxy. Every request therefore passes through Cloudflare's network, which processes your IP address in order to deliver the page and to protect the site against attacks, bots and abuse. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a fast, reliably available and secure website.
Cloudflare additionally provides Cloudflare Web Analytics on this site, recording page views, referring page, browser, operating system, approximate country and page-performance measurements. It sets no cookies, stores nothing on your device, and does not track you across other websites. Legal basis: Art. 6(1)(f) GDPR.
Cloudflare acts as a data processor under a data processing agreement. As a US company, personal data may be transferred to the United States. Cloudflare is certified under the EU–U.S. Data Privacy Framework and additionally relies on the EU Standard Contractual Clauses. Cloudflare's privacy policy is available at cloudflare.com.
When you submit the contact form, a confirmation email is sent to the address you provided. Your message is only forwarded to me after you click the confirmation link in that email. The link is valid for 48 hours. If you do not confirm, no data is stored or processed further.
Confirmation and notification emails are sent via Brevo (Sendinblue SAS, 55 rue d'Amsterdam, 75008 Paris, France). Brevo acts as a data processor under a data processing agreement. Your name and email address are stored in Brevo after confirmation to allow follow-up communication related to your inquiry. Brevo is an EU-based provider and compliant with GDPR. Their privacy policy is available at brevo.com.
Contact data (name, email) is retained in Brevo for as long as necessary to handle your inquiry and any resulting business relationship, or until you request deletion. Message content is not stored in Brevo — it is delivered by email and retained only in the email inbox.
Under GDPR you have the right to:
To exercise any of these rights, contact me@florianstangl.com.
You have the right to lodge a complaint with the Austrian data protection authority:
Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Wien
dsb.gv.at