Privacy policy

Who is responsible

The controller within the meaning of Art. 4(7) GDPR is:

For any privacy question, just send me an email.

Hosting and server log files

This website runs on a server of Contabo GmbH, Welfenstraße 22, 81541 Munich, Germany – inside the EU. Contabo processes the data only on my behalf (Art. 28 GDPR).

Every time a page is requested, the web server automatically writes a log entry: your IP address, date and time, the requested address, the referring page, the HTTP status code, the amount of data transferred and your browser's user agent. This is needed to deliver the website securely and to detect errors and attacks. The legal basis is my legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). The log files are deleted automatically after 14 days.

Cookies and local storage (necessary)

A few small pieces of information are stored in your browser because they are strictly necessary for features you use yourself. They don't need consent (§ 165(3) TKG 2021) and never leave your device – except the language cookie, which is only sent to this website's own server:

• bc_pick (cookie, 1 year): the language you picked in the language switcher, so balazscsorba.at doesn't switch you back to German.
• bc-consent (local storage): your choice in the cookie banner and when you made it.
• bc-theme (local storage): light or dark mode.
• bc-likes (local storage): how often you clicked the heart in the footer.
• bc-tetris-highscore (local storage): your high score in the hidden console game.

You can delete them at any time in your browser settings.

Google Analytics (only with your consent)

Only if you click “Accept” in the cookie banner does this website use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Before that, no connection to Google is made at all.

Google Analytics helps me understand how the website is used – for example which pages are read and for how long, on which kind of device and roughly from which country – so I can improve it. For this, the cookies _ga and _ga_<ID> are set, which store a random, pseudonymous identifier for up to 2 years. GA4 does not log or store IP addresses. Google signals and ad personalisation are switched off; the data is not used for advertising. Google keeps the analytics data for 2 months.

The data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU–US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR).

The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). You can withdraw it at any time with effect for the future via “Cookie settings” in the footer of every page; the Google Analytics cookies are then deleted. More in Google’s privacy policy: policies.google.com/privacy.

Contacting me by email

If you send me an email, I use your email address and the content of your message only to reply and, where relevant, to prepare a possible collaboration (Art. 6(1)(b) and (f) GDPR). I delete the correspondence once it is no longer needed, unless legal retention obligations apply. My emails are handled by Google Gmail (Google Ireland Limited).

External links and fonts

All fonts, images and scripts of this website are served from its own server – there are no third-party fonts, embedded content, social media plugins or tracking pixels. Links to other websites (for example LinkedIn or client websites) are ordinary links: data is only transferred to them once you click, and their own privacy policies apply there.

Your rights

Under the GDPR you have the right to:

• access your data (Art. 15)
• rectification (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal (Art. 7(3))

To exercise them, just send me an email. If you believe the processing of your data violates data protection law, you can also lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.