Legal
Privacy policy
What personal data this site collects, why, on what legal basis, and what you can do about it. Written to cover the disclosure duties in Article 13 GDPR.
Last updated: 26 August 2026
Controller
The controller responsible for processing on this site under Article 4(7) GDPR is:
- Name:Richard Senger
- Address:TODO: street, postcode, Vienna, Austria
- Email:contact@richard-senger.com
Hosting and server logs
This site runs as a containerised application on a server I operate. Each request is written to a standard access log containing the IP address, the requested path, timestamp, referrer and user agent. This is technically necessary to deliver the site and to detect abuse, on the basis of a legitimate interest under Article 6(1)(f) GDPR. Logs are rotated and deleted after 14 days.
Contact form
Submitting the contact form sends me your name, email address and message so that I can answer your enquiry. The processing rests on your consent under Article 6(1)(a) GDPR, which you give by ticking the consent box, and on Article 6(1)(b) where the enquiry concerns a possible contract.
Delivery is handled by Resend (Plus Five Five, Inc., United States) acting as a processor under Article 28 GDPR. The transfer to the United States is covered by the EU Standard Contractual Clauses. Your message arrives in my mailbox and is kept until the enquiry is settled and no statutory retention period applies. To limit abuse, submissions are rate limited per email address. That uses in-memory counters only and builds no profile of you.
Processor: Resend, resend.com/legal/privacy-policy
Analytics
This site uses Umami Cloud (Umami Software, Inc.) to count page views. Umami sets no cookies, stores no IP addresses and creates no cross-site identifiers, so it collects no personal data and needs no consent banner. What it records is the page path, the referrer, and rough browser, operating system, device type and country. The basis is my legitimate interest in knowing which pages get read, under Article 6(1)(f) GDPR.
Processor: Umami, umami.is/privacy
Content editor sign-in
The area at /admin lets the site's own content be edited in place. Signing in uses GitHub OAuth (GitHub, Inc.) and creates a session cookie holding an account identifier. This only applies to authorised editors. If you do not sign in, no cookie is set and no editor code is sent to your browser. The basis is Article 6(1)(b) GDPR.
Processor: GitHub, docs.github.com/site-policy
Your rights
In respect of your personal data you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21). Where the processing is based on consent, you can withdraw that consent at any time with effect for the future.
To exercise any of these, email the address listed under "Controller" above. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at).