Legal

Privacy Policy

In accordance with the GDPR (DSGVO) · Last updated May 2026

Protecting your personal data matters to me. This policy explains what data I collect when you visit this website or contact me, why, and what rights you have. I keep data collection to the minimum needed to reply to you and deliver my service.

1. Controller

Controller
Baranyi Bettina (Einzelunternehmerin)
Address
Kärntnerstraße 50, 6020 Innsbruck, Austria
Email
baranyibettina@entropybreakers.com

2. Data I process

Contact & audit form

When you submit the enquiry form or email me, I process the data you provide — typically your name, email address, company, website, role, company size, indicative budget and your message. This is used solely to respond to your enquiry and prepare our conversation.

  • Legal basis: your consent (Art. 6(1)(a) GDPR) and steps taken at your request prior to entering a contract (Art. 6(1)(b) GDPR).
  • Retention: until your enquiry is resolved and, where a business relationship follows, for the statutory retention periods (e.g. up to 7 years under Austrian tax law).

Server log files

When you visit the site, the hosting provider automatically records technical data (IP address, browser type, date and time of access) for security and stable operation. This is based on my legitimate interest (Art. 6(1)(f) GDPR).

Cookies & tracking

This website does not set any cookies and does not use advertising cookies, ad-network tracking or cross-site profiling. The only analytics in use is Cloudflare Web Analytics (see Section 3), which is cookieless and collects only aggregated traffic data. No calendar or third-party embeds are loaded.

3. Recipients & processors

I work with the following service providers as data processors under Art. 28 GDPR:

  • Hosting: This website is hosted on GitHub Pages by GitHub, Inc., 88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA. GitHub processes minimal connection data (IP address, browser type) for security and stable operation. Because GitHub is based in the United States, this involves a data transfer to a third country; the transfer is based on the EU–U.S. Data Privacy Framework and Standard Contractual Clauses under Art. 46 GDPR.
  • Web analytics: This website uses Cloudflare Web Analytics (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA), a privacy-friendly, cookieless analytics service. It collects aggregated traffic data only — it sets no cookies, does not fingerprint your device and does not track individuals across sites. Transfer to the USA is based on the EU–U.S. Data Privacy Framework.
  • Form submissions: When you submit the enquiry form on the "Work with us" page, the data you provide is processed via Make (operated by Celonis SE), my form-automation provider, hosted in the EU region. This routes your submission to my email inbox.
  • Email correspondence: Email is handled through my email provider.

I do not sell your data. Where transfers to third countries occur, they are based on appropriate safeguards under Art. 44 ff. GDPR.

4. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise any of these rights, simply email me.

5. Right to lodge a complaint

If you believe the processing of your data infringes data-protection law, you may lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, dsb.gv.at).

6. Automated decision-making

I do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.