Privacy Policy
Convenience translation: This English version is provided for information. The German version is the authoritative legal text. Information pursuant to the GDPR. Last updated: 27 July 2026.
1 · Controller
Dennis Kolwey, Brixner Straße 1, 6020 Innsbruck, Austria · dennis@denniskolwey.com
2 · Principle
This website deliberately refrains from tracking, analytics cookies and advertising pixels. It sets no cookies for marketing or statistics and creates no user profiles.
3 · Server log files and hosting
This website is hosted on the Vercel Pro plan by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When the website is accessed, technically necessary data is processed, including the IP address, date and time, requested page, referrer, and browser and device data. This processing serves to deliver the website, defend against attacks and ensure secure operation. The legal basis is our legitimate interest in a secure and stable website under Article 6(1)(f) GDPR.
A data processing agreement is in place with Vercel. On the Vercel Pro plan, project runtime logs are generally accessible for up to one day. Longer processing may be required in individual cases to prevent or investigate security incidents or comply with legal obligations. Transfers to the United States are governed by the EU Standard Contractual Clauses agreed in the Data Processing Addendum and, where applicable, the EU–US Data Privacy Framework. Further information is available in Vercel’s Privacy Notice.
4 · Self-hosted fonts
The fonts Geist and Geist Mono are delivered locally from this server. Loading these fonts does not transmit data to Google or other third parties.
5 · Contact and appointment scheduling
If you contact us by email, we process the data you provide to respond to your enquiry and prepare a possible engagement. The legal basis is Article 6(1)(b) GDPR; for general enquiries it is Article 6(1)(f) GDPR. Our legitimate interest is to respond reliably. We use Google Workspace for email, with Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, acting as processor. Further information is available in Google’s Privacy Policy.
We use Zoom Scheduler, provided by Zoom Video Communications, Inc., USA, for appointment scheduling. The calendar is embedded only after you actively select “Load calendar”; no connection to Zoom is established before that point. When you load the calendar or book an appointment, Zoom processes technical access data and the details you enter, particularly your name, email address and preferred appointment. Booking data may also be transferred to the calendar service connected to Zoom so the appointment can be entered and confirmed.
The legal basis is Article 6(1)(b) GDPR for scheduling and Article 6(1)(a) GDPR for loading the embedded calendar after consent. Transfers to the United States are governed by the agreed EU Standard Contractual Clauses or, where applicable, the EU–US Data Privacy Framework. Details are available in Zoom’s Privacy Statement. You may alternatively request an appointment by email.
6 · Retention period
We retain enquiry and appointment data only for as long as needed to process the enquiry, prepare a contract or carry out the engagement. If no engagement results and no statutory or legal reason requires further retention, the data is deleted when its purpose ends. Business records relevant for tax or corporate law are generally retained for seven years in accordance with statutory periods. Longer retention occurs only where necessary for ongoing proceedings or the establishment, exercise or defence of legal claims.
7 · Your rights
You have rights of access, rectification, erasure, restriction, data portability and objection. You may withdraw consent at any time with future effect; processing carried out before withdrawal remains lawful. To exercise your rights, email dennis@denniskolwey.com.
You may also lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria.
8 · Health data
Please do not submit detailed health data through the general email address or appointment booking. If such information is required for an engagement, it is processed on the basis of your explicit consent under Article 9(2)(a) GDPR and you receive separate information. This website does not collect health data unless you actively provide it.
9 · Automated decision-making
No automated decision-making or profiling takes place.