Privacy Policy

1. Data Controller

The controller responsible for data processing on this website under the GDPR is:

Name	Markus Gspandl
Address	Großstübing 90, 8114 Deutschfeistritz, Österreich
Email	markus@jucama.at
Phone	+43 670 580 70 12

2. Access data and visitor statistics

When you visit this website, the web server automatically collects certain technically required data (including IP address, date and time of access, page requested, browser used, referring page). This data is used exclusively to ensure secure and stable operation of the website (Art. 6(1)(f) GDPR, legitimate interest) and is not combined with other data sources. The access logs are kept by our web host lima-city (including IP address, a unique request identifier and the browser identifier) and are deleted there after seven days. This website is hosted by TrafficPlex GmbH (lima-city), Konsul-Smidt-Str. 90, 28217 Bremen, Germany. It processes all data arising on this website, including the data described in the following sections, on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Processing takes place exclusively within the EU/EEA, in a data centre in Frankfurt am Main.

This website itself does not set cookies for ordinary visitors and does not use any third-party analytics or tracking services. Independently of that, our web host lima-city sets cookies whose names begin with “_lcp” when a page is requested. They contain nothing but the fixed value “a”, are valid until March 2034 and, according to the host, belong to its bot protection against automated access and are not personal data; individual visitors are not recognised or analysed with them. We cannot switch these cookies off and receive no data from them. The legal basis is the legitimate interest in operating the website securely (Art. 6(1)(f) GDPR); as cookies technically required for this protection, they do not require consent (Section 165(3) of the Austrian Telecommunications Act 2021). Only if you sign in to the download area does this website additionally set a technically necessary session cookie; it contains nothing but a random session identifier and is deleted when you sign out. If you switch the language at the top, your browser remembers that choice locally on your device (localStorage) so you do not have to make it again on your next visit. This entry is not transmitted to the server and is not evaluated; you can delete it at any time via your browser settings.

In addition, we count how often the pages of this website are opened. The evaluation runs exclusively on this server; no third-party service is involved. Only totals are stored, never individual visits: per day the number of page views and visits, the page requested, the referring website, the type of device (phone, tablet, computer) and the country.

Your IP address is not stored for this. It is needed for two calculations only and discarded afterwards: to determine the country, which is done using a list of IP ranges held here without any request to third parties - and to avoid counting the same visit twice on the same day. For the latter, a checksum is derived from the IP address, the browser identification, the date and a random value that exists only on this server. It cannot be reversed, changes daily at midnight and is deleted after seven days; recognising a visitor across several days is therefore not possible, not even for the operator. No cookie is set for the counting either, and nothing is stored on your device.

The legal basis is Art. 6(1)(f) GDPR - the legitimate interest in learning which content is read. You may object to this processing under Art. 21 GDPR; please use the address given above.

3. Contact form

If you use the contact form on this website, the data you enter (name, email address, message) is transmitted to this website's server, stored there and additionally forwarded by email to the controller named above. The processing serves to handle your inquiry (Art. 6(1)(b) or (f) GDPR).

Along with the message, the time of submission and your IP address are stored. The IP address serves solely to limit automated bulk submissions (Art. 6(1)(f) GDPR, legitimate interest in a functioning contact channel); it is neither evaluated nor passed on.

Messages are deleted automatically after six months at the latest, and earlier once your inquiry has been dealt with. No data is passed on to third parties. You are of course also welcome to write me an email directly; the same principles apply.

Newsletter

For the newsletter we store your e-mail address, the language you chose, and the time and IP address of your subscription and confirmation.

Subscription uses double opt-in: after entering your address you receive an e-mail with a confirmation link. Only once you open it are you on the list – without that click nothing is sent. The time and IP address serve solely as proof of this consent (Art. 6(1)(a) GDPR).

Every message contains an unsubscribe link. One click is enough, no login is required, and your address is deleted rather than merely deactivated. You can withdraw your consent for the future at any time.

Your data is not passed to third parties, reading behaviour is not analysed, and no tracking pixels are used.

Customer account and download area

You can create an account to access the download area. Doing so stores your username, e-mail address and a password of your choosing; the password is only ever stored as an irreversible hash and cannot be read by us either.

The e-mail address is used to send you the confirmation link and to tell you once your access has been enabled. The legal basis is Art. 6(1)(b) GDPR (performance of the user relationship). Your data is not passed on to third parties and is not used for advertising.

When an account is created and on every sign-in, the IP address is stored briefly in order to make automated mass registrations and password guessing harder (Art. 6(1)(f) GDPR).

You can have your account deleted at any time – an informal message via the contact form is enough. Deleting the account removes all data stored with it.

4. Your rights

Regarding your personal data, you generally have the following rights: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). Simply get in touch using the contact details above.

5. Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority - in Austria, the Austrian Data Protection Authority (www.dsb.gv.at).

6. Changes to this privacy policy

This privacy policy may be updated as needed, for example due to changes to the website or legal requirements. The version published on this page at any given time applies.