Privacy

In short: this website sets no cookies, builds no profiles and shares nothing with advertising or analytics companies. Data is processed when you send the order slip, technically when the pages are delivered, and sparingly when I count page views on my own server.

Controller

Aleksandar Petrovic, Albertisgasse 3/13, 1210 Vienna, Austria · hello@anthosstudios.at

Order slip (contact form)

When you send the order slip, I process what you enter: name, email, your business and phone number if you give them, your message, your choices and, if you pin it, your sketch. I need this to reply and to prepare a possible project (Art. 6(1)(b) GDPR).

The message reaches my inbox through the email service Resend (Resend, Inc., USA). Resend is certified under the EU-US Data Privacy Framework; standard contractual clauses apply as well. I keep enquiries while we are in touch and delete them no later than 12 months after our last exchange, unless it turns into an order (then the statutory retention periods apply).

Spam protection

Against automated submissions I use a hidden field, a minimum time to fill in the form and a limit of five submissions per hour. For that limit your IP address is hashed with a key that changes daily, and the hash is kept for one hour. The IP address itself is not stored for this (Art. 6(1)(f) GDPR, legitimate interest in a working form).

Hosting

The website runs on Cloudflare (Cloudflare, Inc., USA, with data centres in the EU). When you visit, Cloudflare processes technically necessary data such as IP address, time and requested address to deliver the pages and fend off attacks (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.

Fonts, videos and images

All fonts, videos and images are served from this server. No data goes to Google Fonts, YouTube or other third parties when you visit.

Display settings

If you switch on calm mode, high contrast or larger text, your browser keeps that choice in its local storage (localStorage) under the name “anthos.prefs”. This only happens when you press a switch yourself. The data stays on your device, is never sent to me, and can be cleared with “Reset” in the display menu or in your browser settings.

Analytics

To know which pages are read and how visitors find their way here, I count page views with the open-source software Umami. Umami runs on my own server in Austria; the data goes to no analytics company. Like the website, the connection runs through Cloudflare (see Hosting).

For each page view your browser sends to stats.anthosstudios.at:

• the page you opened, without parameters (for example “/en/privacy/”),
• the website you came from, as a domain only (for example “instagram.com”), if your browser shares it,
• as with any page request, your IP address and your browser’s identifier (user agent).

From this, Umami stores the time, the country, browser, operating system and device type. Screen size, language settings, clicks and form input are not recorded. The IP address is not stored: it is only used briefly to determine the country and, together with the browser identifier and a secret key that changes daily, to form a visit ID. That way a visit is not counted twice; the next day the same browser gets a new ID, and the setup is not built to recognise you across days or on other websites.

Nothing is stored on your device for this and no cookies are set. The legal basis is my legitimate interest in improving the website from anonymous numbers (Art. 6(1)(f) GDPR). Only I have access to the statistics. I delete the data after 24 months at the latest.

Not being counted

If your browser sends “Do Not Track” or “Global Privacy Control”, nothing is sent at all. You can also object to being counted here (Art. 21 GDPR). Your objection is then noted in your browser’s local storage under “umami.disabled” so that it still applies on your next visit. If you clear your browser data, you will be counted again.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Write to me at hello@anthosstudios.at. If you think I am not handling your data properly, you can complain to the Austrian Data Protection Authority (dsb.gv.at).