Privacy policy

As of July 2026 · mzeiler.at

1. Controller

M.ZEILER e.U., DI(FH) Meinrad Zeiler, Hitzendorf 191/3, 8151 Hitzendorf, Austria
Email: office@mzeiler.at

2. Purposes and legal bases

• Website operation (server logs, security): Art. 6(1)(f) GDPR (legitimate interest).
• Language preference (site_lang cookie): Art. 6(1)(f) GDPR.
• Contact enquiries: Art. 6(1)(b) and (f) GDPR.
• Statistics — Umami (self-hosted, consent only): Art. 6(1)(a) GDPR.
• Statistics — Google Analytics 4 via GTM (consent only): Art. 6(1)(a) GDPR.
• Marketing / remarketing (e.g. Google Ads, separate consent): Art. 6(1)(a) GDPR; prepared, inactive without consent.

3. Data processed

• Server logs: IP (truncated/rotated), timestamp, URL, user agent
• Contact: name, email, message, enquiry metadata
• Analytics (if consented): page views, referrer, device type; GA4 client ID and events

4. Retention

Server logs rotated (typically weeks). Contact data until handled, then per legal retention or deletion. Consent records until withdrawal. GA4 retention typically up to 14 months (configurable).

5. Recipients

Hosting in EU/EEA. Google Ireland Limited (Analytics/Tag Manager); possible transfer to Google LLC, USA under DPF and/or SCCs. Tags load only after consent (Consent Mode v2).

6. Your rights

Access, rectification, erasure, restriction, portability, objection (Art. 15–21 GDPR). Complaint: Austrian Data Protection Authority (dsb.gv.at). Requests: office@mzeiler.at.

7. Cookies

Essential: site_lang (~1 year). Statistics (optional): Umami and/or GA4 cookies after consent; choice stored in localStorage (mzeiler_website_consent). Marketing (optional): Google Ads/remarketing after separate consent. Withdraw via “Cookie settings” in the footer or clear site data.

8. SpotpriceAPI

Account and API usage at spotpriceapi.com is covered by that site's privacy policy.