This policy describes which personal data this website processes when you visit it. It says what we use the data for, how long we keep it, and which rights you have.
In short#
- The website runs on our own servers in Gleisdorf, Austria.
- The public pages set no cookies.
- Visitor statistics also run on our own server and use no cookies.
- The website loads all content from our own servers, fonts and maps included.
- No data leaves the EU through this website.
Controller#
Dipl.-Ing. Wolfgang Fiedler
Fiedler IT-Services and Software Development
Franz-Arnfelser-Gasse 17
8200 Gleisdorf
Austria
Email: office@fiedler-it.at
Phone: +43 (650) 43 56 887
Servers and logs#
The website runs on our own servers in Gleisdorf. We use no external hosting provider. Every request passes our reverse proxy and then our web server. Both keep a log, and together they record:
- your IP address
- date and time
- the requested address and the status code of the response
- the amount of data sent
- the page you came from (referrer)
- browser and operating system (user agent)
Purpose: running the website, finding errors and defending against attacks.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a secure and reliable website.
Retention: The logs are rotated daily. The reverse proxy deletes them after 14 days at the latest, the web server after 15 days.
Contact by email or phone#
When you write to us or call us, we process your details to answer the request. The button “Write me an email” on the contact page only opens your own email program. The website itself receives no data in the process.
Legal basis: Art. 6(1)(b) GDPR when your request aims at a contract. In all other cases Art. 6(1)(f) GDPR. Our legitimate interest is to answer requests.
Email provider: Our email is hosted by World4You Internet Services GmbH, Linz, Austria, which stores it on our behalf.
Retention: We delete your request 12 months after the conversation ends at the latest. If the request leads to a contract, we keep the records as long as statutory retention duties require.
No third-party content#
Every page loads its images, fonts and scripts from our own servers. The map on the contact page is an image on our server, made from OpenStreetMap data. Viewing the page therefore opens no connection to OpenStreetMap or any other provider.
You leave our website only when you click a link to another site, for example “Open in OpenStreetMap”. The privacy policy of that site applies there.
Visitor statistics with Umami#
We use Umami to count which pages are read. Umami runs on our own server (analytics.fiedler.services) in Gleisdorf. The data goes to no third party. Umami sets no cookies.
For each page view, Umami stores:
- the page and its title, including campaign details in the address (UTM)
- the page you came from (referrer)
- date and time
For each visit, Umami also stores:
- browser, operating system and device type
- screen size and language setting
- country, region and city
Umami derives the location from your IP address at the time of the request. Umami does not store the IP address itself. From the IP address, browser details and a secret value, Umami forms a pseudonymous identifier. The secret value changes every month. So Umami can group your page views within one month, and it cannot link them across the change of month.
Purpose: We want to know which content people read, so we can improve it.
Legal basis: Art. 6(1)(f) GDPR.
Retention: We delete the data after 24 months.
Objection: You can object to the collection at any time by email. The Umami script also sends
no data when the entry umami.disabled is set in your browser.
Storage in your browser#
The website stores something in your browser only when you choose a setting yourself. It uses the browser’s local storage for this:
appearancestores light or dark when you switch the colour scheme.
The Umami script also reads the entry umami.disabled. It writes nothing.
These entries stay in your browser and are never sent to us. They remain until you delete them in your browser settings. They only enable a function you chose yourself, so they need no consent (§ 165(3) TKG 2021).
Member area#
The area under /internal/ is open to signed-in members only. Sign-in runs through our own Keycloak server (auth.fiedler.services), also in Gleisdorf.
For a member account we store the user name and email address, plus first and last name if you give them. While you are signed in, Keycloak stores the session with its time and IP address.
Sign-in needs cookies, and the member area cannot work without them:
_oauth2_proxykeeps you signed in on fiedler.site._oauth2_proxy_csrfprotects the sign-in and expires after 15 minutes.- Keycloak sets its own session cookies on auth.fiedler.services, for example
AUTH_SESSION_IDandKC_RESTART.
These cookies are strictly necessary to give you the access you asked for. So they need no consent (§ 165(3) TKG 2021).
Legal basis: Art. 6(1)(b) GDPR.
Retention: The account stays until you or we delete it. The cookies end when you sign out or when the sign-in expires.
Your rights#
You have the right at any time to:
- access the data we hold about you (Art. 15 GDPR)
- have wrong data corrected (Art. 16 GDPR)
- have your data deleted (Art. 17 GDPR)
- restrict the processing (Art. 18 GDPR)
- receive your data in a portable format (Art. 20 GDPR)
- object to processing based on our legitimate interest (Art. 21 GDPR)
An email to office@fiedler-it.at is enough.
We make no automated decisions and build no profiles (Art. 22 GDPR).
Complaint: If you think we process your data unlawfully, you can complain to the supervisory authority:
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Web: dsb.gv.at
Data security#
The website is reachable only over encrypted connections (HTTPS). We maintain our servers ourselves and keep them up to date.
Changes#
When the website changes, we update this policy. The version on this page applies.
Last updated: 2 October 2026