Privacy

Controller

Name

Gerald Schandl, sole proprietorship (brands SimpleBuild and SimpleWebDesign)

Address

Sonnleite 20, 3902 Vitis, Austria

Email

hello@simplebuild.info

For any question about data protection, you can reach us at the email address above.

In short

• Without your consent, this website sets only one necessary cookie, which stores your decision (“sb_consent”).
• Google Analytics 4 is loaded through Google Tag Manager only if you agree to statistics. There are no advertising services.
• Fonts are served by this website itself; no connection to font providers is made.
• Apart from Google services after your consent, no external scripts, videos or maps are embedded.
• Requests are not stored in a database of the website but delivered as an email to our mailbox.

Hosting and access data

This website is provided by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. With every request, Vercel processes technically necessary access data: IP address, date and time, requested address, status code, referring page and information about browser and operating system.

The purpose is delivering the website and keeping it stable and secure, for example detecting errors and fending off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure, working service.

Vercel acts as our processor under its Data Processing Addendum. Vercel processes data primarily in the USA and uses sub-processors, including cloud providers, whose list and locations Vercel publishes at security.vercel.com. Transfers to the USA and other countries outside the EU are covered by the European Commission’s standard contractual clauses incorporated into the agreement (Implementing Decision (EU) 2021/914, Art. 46(2)(c) GDPR); sub-processors are bound by equivalent terms.

Runtime logs of the server functions, such as the contact form’s, are kept by Vercel for at most 30 days (one day on the Pro plan without the Observability Plus add-on). How long Vercel keeps other access and infrastructure data for operating and securing its platform is governed by Vercel’s terms; Vercel does not state a fixed period for it. We do not use access data for any other purpose and do not combine it with other data.

Language selection

When you open the root address “/”, the website reads the language preference your browser sends and temporarily forwards you to the English or German version, to the English one if neither matches. Nothing is stored and no cookie is set.

Consent and cookie settings

To manage your consent we use Klaro, open-source software served by this website itself; no connection to third parties is made. Your decision is stored in a cookie of this website (“sb_consent”, lifetime 180 days), so we can respect it and demonstrate it. Only your choice per service is stored; the cookie is not sent to anyone. The legal basis is § 165(3) of the Austrian Telecommunications Act 2021 (strictly necessary) and Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR.

Optional services stay off until you agree. Under “Cookie settings” at the end of every page you can change your choice or withdraw your consent at any time, with effect for the future (Art. 7(3) GDPR). When you withdraw it, the website resets the consent signals, deletes the Google Analytics cookies and reloads the page, so no Google service keeps running. Processing carried out before the withdrawal remains lawful.

Statistics with Google Analytics 4

If you agree to statistics, we load Google Tag Manager and through it Google Analytics 4 (GA4). The provider of both services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Before that, no connection to Google is made: without your consent, no Google script is loaded and no data is sent to Google. Google Tag Manager itself sets no cookies; it only loads Google Analytics.

The purpose is to understand how this website is used and to improve it. Recorded are:

• pages viewed (address without parameters), page titles and the page visited before
• scroll depth, clicks on links to other websites and file downloads
• time and duration of use
• information about device, operating system, browser, language and screen size
• the approximate location (country, region, city) Google derives from your IP address; according to Google, Google Analytics does not store the IP address itself
• a random identifier in the cookies “_ga” and “_ga_…”, used to recognise returning visits

Entries in the contact form and names, email addresses or other contact details are not sent to Google. Advertising features and Google signals are off; the data is not linked to advertising or to a Google account.

Cookies

“_ga” and “_ga_…” in your browser, each with a lifetime of 2 years, renewed on every visit; deleted when you withdraw consent

Retention in Google Analytics

Event data is deleted 14 months after collection, data linked to user identifiers at the latest 14 months after the last visit. Aggregated reports without personal reference remain. Data Google processes under its own responsibility is subject to Google’s periods.

Legal basis

your consent (§ 165(3) of the Austrian Telecommunications Act 2021, Art. 6(1)(a) GDPR)

Recipients

Google Ireland Limited as processor; Google LLC, USA, as sub-processor

Transfers outside the EU

USA: Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR); standard contractual clauses apply in addition (Art. 46(2)(c) GDPR).

Google’s privacy policy

policies.google.com/privacy

Google Analytics and privacy

support.google.com/analytics/answer/6004245

Data processing terms

business.safety.google/adsprocessorterms

Contact by email

When you write to us – by email to hello@simplebuild.info or through the contact form – we process your details to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request concerns a possible project or contract, otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering requests.

Our mailbox is operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, acting as our processor.

Contact form

Through the contact form we process:

• name, email address and message (required)
• company and project type, if you provide them
• the language version of the page you send from
• a randomly generated identifier of the request, so the same request is not delivered twice
• your IP address, only briefly and as a hash, to prevent abuse (see below)

The purpose is handling your request; the legal basis is the same as for an email (Art. 6(1)(b) or (f) GDPR). Consent is not required for this. Without the required details we cannot accept a request through the form.

The website does not store your request. A server function hands it to the email service Resend, which delivers it as an email to our mailbox through our sending domain mail.simplebuild.info, with your email address as the reply address. So that a request does not arrive twice after connection problems, Resend also receives a check value (a hash) of the request’s identifier and content and discards repeats with the same value for 24 hours.

The provider is Plus Five Five, Inc. (“Resend”), USA, acting as our processor under its data processing agreement, which forms part of Resend’s terms of service. The emails are sent from the sending region Ireland (EU); according to Resend, account data, sending logs and the messages sent are nevertheless stored in the USA, whatever the sending region. For this transfer, Resend is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR); standard contractual clauses are agreed in addition. According to Resend, messages and sending logs can be viewed in the account for 30 days; any longer storage is governed by Resend’s terms.

Protection against abuse

Entries are checked on the server (required fields, format and length limits). A field invisible to people detects automated submissions, which are discarded.

We also limit the number of requests per sender. For this, we derive a hash from the IP address with a random key; the address itself is not stored. Counter and key exist only in the server’s memory; the counter applies for 10 minutes and is discarded at the latest when the server instance ends.

If a delivery fails, we log only a technical error code, no content and no addresses. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against spam and abuse.

Links to other websites

This website links to other websites, currently simplewebdesign.at and the product website seocockpit.online. You leave this website only when you click; the linked website’s own privacy policy applies there.

Retention

Requests are kept in our mailbox only as long as handling them and possible follow-up questions require. Only records subject to a statutory retention obligation – such as correspondence that forms part of the business records of an order – are kept longer, for the applicable statutory period (in particular § 132 of the Austrian Federal Fiscal Code: seven years).

The retention of access data and runtime logs (Vercel), sending data (Resend), statistics data (Google Analytics), your consent decision and data used to prevent abuse is given in the respective sections.

Your rights

You have the right to:

• access your data (Art. 15 GDPR)
• rectification (Art. 16) and erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw consent at any time, with effect for the future (Art. 7(3))

To exercise them, write to hello@simplebuild.info.

If you believe that the processing of your data infringes data protection law, you can lodge a complaint with a supervisory authority (Art. 77 GDPR); in Austria, the Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

There is no automated decision-making, including profiling.

Data security

The connection to this website is encrypted with TLS throughout (https).