Privacy Notice

Controller: Stefan Lacher, Kloepferstraße 14/5, 1220 Wien, Austria. Contact: contact@behindthemerge.com.

Website operation. Our hosting infrastructure processes your IP address and technical request data to deliver and secure this website. Our legitimate interest is reliable, secure operation (Article 6(1)(f) GDPR). Technical data are necessary to provide the website. Central logs currently have no enforced automatic expiry; local container logs rotate by size rather than age. A fixed maximum retention period is therefore not assured. Backup retention remains unverified.

Contact. When you email us or use our contact form, we process your name, email, subject and message to answer your enquiry (Article 6(1)(f) GDPR: responding to correspondence; Article 6(1)(b) for enquiries about a contract with you). Contact is voluntary; these four fields are required to submit the form. Messages are delivered to our own mailbox and retained only as needed for the enquiry, legal retention duties (Article 6(1)(c)) or necessary legal claims (Article 6(1)(f)).

Abuse prevention. To protect the form (Article 6(1)(f) GDPR), we store keyed hashes of IP addresses and submission data, submission IDs, status and timestamps. Records become eligible for cleanup after one hour (rate limits) or 24 hours (submissions). Cleanup runs during later submissions, so these are not guaranteed maximum retention periods.

Infrastructure and transfers. Our website and self-managed email server are hosted with Contabo in the EU; central logging runs on our own infrastructure, not Grafana Cloud. Contabo support/subprocessor access outside the EEA and the applicable safeguards have not yet been verified. Namecheap provides domain/DNS services and reports US processing in its privacy notice; it does not host our contact messages or central logs.

Cookies and YouTube. This website uses no analytics or tracking cookies and does not embed YouTube players. Following a YouTube link takes you to a separate service governed by Google's Privacy Policy. This website uses no profiling or automated decisions with legal or similarly significant effects.

Your rights. Subject to the GDPR's conditions, you may request access, rectification, erasure, restriction and data portability using the email above. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may also complain to the Austrian Data Protection Authority.

Last updated: 29 October 2026.