Legal

Privacy.

What this site collects, why, on what legal basis, and what you can do about it. Written to be read rather than to be survived.

Controller

flow IT e. U.
Hirschengasse 17/11, 1060 Wien, Austria
Email: neiw.otc@olleh

I am responsible for the personal data processed through this website. There is no data protection officer — the size and nature of the processing does not require one.

Hosting and server log files

This site is hosted by Vercel Inc. When you open a page, your browser necessarily transmits technical data that is recorded in server log files: IP address, date and time of the request, the page requested, referrer, browser type and operating system.

This is processed on the basis of my legitimate interest in operating the site securely and reliably (Art. 6(1)(f) GDPR). The data is not merged with other sources and is not used to identify you.

Contact by email and through the form

If you write to me — by email or through the contact form — the details you provide (name, email address, optionally company, and the content of your message) are used solely to handle your enquiry and any follow-up arising from it.

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a possible engagement, and otherwise my legitimate interest in answering enquiries addressed to me (Art. 6(1)(f) GDPR). Providing the data is voluntary; without it I cannot reply.

Analytics

This site can use Google Analytics (Google Ireland Ltd.) and Microsoft Clarity (Microsoft Corporation) to understand how the site is used and where it fails people. Both are loaded only after you have given consent in the cookie banner, on the basis of Art. 6(1)(a) GDPR. If you decline, neither is loaded and no analytics data is collected.

You can withdraw your consent at any time with effect for the future, by clearing this site's data in your browser, which removes the stored preference and brings the banner back.

Cookies and consent

Your choice in the cookie banner is stored in your browser's local storage under the key flow-it-consent. It stays on your device, is not transmitted to me, and exists so the banner does not ask you again on every visit.

Any further cookies are set only by the analytics services named above, and only once you have consented to them.

Recipients and processors

Personal data is passed on only where necessary to operate the site, and only to processors bound by a data processing agreement:

  • Vercel Inc. — hosting and server log files
  • Google Ireland Ltd. — Google Analytics, only after consent
  • Microsoft Corporation — Microsoft Clarity, only after consent

Where a processor is located outside the EU or processes data there, the transfer is covered by the EU standard contractual clauses or an adequacy decision. Nothing is sold, and nothing is shared for advertising purposes.

Retention

Server log files are kept only for as long as needed to operate and secure the site. Enquiries are kept for as long as the matter is live, and afterwards only where statutory retention obligations — in particular under commercial and tax law — require it. Analytics data is retained according to the respective provider's settings.

Your rights

Under the GDPR you have the right to:

  • access the personal data held about you (Art. 15)
  • have inaccurate data corrected (Art. 16)
  • have your data erased (Art. 17)
  • restrict processing (Art. 18)
  • data portability (Art. 20)
  • object to processing based on legitimate interest (Art. 21)
  • withdraw consent at any time, with future effect

To exercise any of these, write to neiw.otc@olleh. You also have the right to complain to a supervisory authority. In Austria that is the Data Protection Authority (Datenschutzbehörde), dsb.gv.at.

No automated decision-making

This site does not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Changes

If the site changes in a way that affects how data is processed, this page is updated accordingly.