Privacy Policy
Data Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Iris Kohlweiss
Austria
Contact: hello@iriskohlweiss.com
General Principles
This website is designed to keep data processing to a minimum. It does not set cookies, does not use any analytics or tracking tools, and does not integrate any advertising networks. Personal data is processed only to the extent necessary for the technical operation of the site.
Server Log Files
When this website is accessed, the web server automatically records technical access data transmitted by the browser (including IP address, date and time of access, page requested, and browser used). These server log files are used exclusively to ensure the secure and stable operation of the website, in particular to detect and defend against attacks and to analyse errors.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning website). The log files are deleted once their purpose has been fulfilled, typically within a few days to a few weeks.
Hosting
This website is operated on a server provided by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The server is located within the European Union. No data is transferred to countries outside the EU/EEA. A data processing agreement under Art. 28 GDPR is in place between the controller and Hetzner.
Technically, this website consists of a static Astro website, with content drawn from a self-hosted Directus content management system with a PostgreSQL database. Both systems run on the same server at Hetzner; no further third-party providers are involved in delivering the content.
No Cookies, No Tracking
This website does not use cookies or comparable tracking technologies. No analysis of user behaviour takes place (no Google Analytics, Matomo, or similar tool), and no user profiles are created.
Fonts
The fonts used on this website (Onest, Newsreader, IBM Plex Sans) are served locally from our own server. They are not loaded from a third-party network such as Google Fonts, so no data is transmitted to any font provider.
Images
All images embedded on this website are served from our own server. No third-party content delivery network (CDN) is used.
Contact by Email
This website does not contain a contact form. The contact link on the site simply opens the visitor's own local email programme (a mailto link) addressed to hello@iriskohlweiss.com. No data is transmitted to or processed by a server through this website in the process. Should an email subsequently be sent, the controller processes the data it contains (such as the sender's address and the content of the message) in order to respond to the enquiry. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in communicating with enquirers) or, where the enquiry serves a contractual purpose, Art. 6(1)(b) GDPR.
Linked External Profiles (Instagram, Facebook)
Some pages of this website contain simple links (for example, in the form of icons) to the artist's profiles on Instagram and Facebook. These are plain hyperlinks to external sites, not embedded social media plugins, widgets, or iframes. Clicking such a link redirects the visitor to the relevant external platform. As long as the links are not clicked, no data is transmitted to Instagram or Facebook.
Once such a link is clicked and the external site is left, the privacy policy of the respective provider applies from that point onward (Meta Platforms Ireland Limited for Instagram and Facebook). The controller has no influence over data processing by these providers.
Rights of Data Subjects
Under the GDPR, data subjects have the following rights:
- Right of access to the personal data being processed (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
To exercise these rights, an informal message to the contact address above is sufficient.
You also have the right to lodge a complaint with the Austrian data protection authority:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
Changes to this Privacy Policy
This privacy policy may be updated to reflect changes to the website or to the applicable legal framework. The version currently published on this page always applies.