LEGAL INFORMATION
Privacy.
What data we process. And why.
Controller
Werbeagentur Stöger
Riedenburgstraße 3
3580 Horn, Austria
werbeagentur.stoeger@icloud.com
+43 699 17284225
Christoph Stöger is a sole proprietor. Please use the contact details above for privacy questions and requests concerning your rights.
Providing this website
The website is hosted by Vercel Inc., USA. Visits involve processing technical connection data such as your IP address, requested address, time, browser information and HTTP status. This supports delivery, troubleshooting and protection against attacks. Technical service providers may access the data necessary for maintaining the website.
The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a functioning, secure website. Our application code does not log form contents. Hosting provider logs are separate. Their retention depends on the time needed for delivery, troubleshooting, security and any statutory obligations of the provider. They are deleted or anonymised when no longer needed for those purposes.
Vercel also processes data in the United States and potentially at other locations of its subprocessors. Its published data processing terms include EU Standard Contractual Clauses for relevant international transfers. Further information: Vercel privacy notice · Vercel data processing terms.
Contact and referral information
When you contact us by email or phone, we process your contact details and enquiry to respond to you. The contact form requires your name, email address and selected services. Your company and how you heard about us are optional. The form cannot be submitted without the required information; you can also contact us by email or phone.
Enquiries about our services are processed to take pre-contractual steps under Article 6(1)(b) GDPR. Other enquiries are handled on the basis of our legitimate interest in communication under Article 6(1)(f) GDPR.
The optional referral information — Friends and acquaintances, Internet search, Social media or ChatGPT — helps us understand how people discover us. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in evaluating our contact channels. This information does not affect how we handle your enquiry. You select it yourself; we do not obtain it through tracking. Contacting us does not subscribe you to a newsletter.
Email providers
Emails sent directly to our published address are received through Apple’s iCloud Mail. Apple identifies Apple Distribution International Limited, Ireland, as the relevant entity for individuals in the European Economic Area. Processing may also take place outside the EEA, particularly in the United States. Apple describes safeguards including EU Standard Contractual Clauses: Apple privacy notice.
Form messages are sent through Resend (Plus Five Five, Inc., USA). When you submit the form, your details are passed to Resend for delivery to our iCloud inbox. Your email address is set as the reply address so we can respond directly to you. Open and click tracking are disabled for the sending domain.
Resend describes 30-day retention of email and log data on standard plans and processing in the United States. Its published data processing terms include EU Standard Contractual Clauses. Further information about processing, safeguards and retention: Resend data processing terms · Resend security and retention.
Retention
The website does not maintain its own enquiry database. We need correspondence in our mailbox for as long as necessary to handle the enquiry and any follow-up questions. If an enquiry leads to an engagement, further retention depends on performance of the contract, statutory obligations and the need to establish or defend legal claims. Data must be deleted once these purposes and obligations no longer apply.
Optional referral information forms part of the enquiry and follows the same deletion criteria. These criteria are separate from providers’ technical retention periods.
Abuse prevention
The server limits the number of requests. To do this, it temporarily processes the IP address and request count in memory, using a 15-minute window. Expired entries are removed during subsequent requests or disappear when the server instance ends. The counter does not store form contents. A random submission identifier helps prevent accidental duplicate messages.
The legal basis is Article 6(1)(f) GDPR: our legitimate interest in preventing spam and overload.
Cookies and browser storage
Our application code does not set cookies, use local storage or session storage, or embed analytics or advertising trackers. The language is determined by the address you visit. Page transitions use navigation information provided by the browser without storing an identifier.
Your browser may cache website files to load them faster. While you complete the form, your entries remain in the open document and are sent to the server only when you submit it. Browser features such as autofill are controlled by your browser settings.
Media, fonts and external links
Images, videos, fonts and 3D libraries are delivered through this website. No Instagram players, Google Fonts requests or analytics pixels are embedded. Links to Instagram, project websites or other providers connect to the linked website only when clicked. That provider’s privacy information then applies.
Your rights
Subject to the legal requirements, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Any consent you give may be withdrawn at any time with future effect.
Please contact werbeagentur.stoeger@icloud.com. You may also complain to the Austrian Data Protection Authority. We do not make automated decisions with legal or similarly significant effects, or carry out related profiling.
Updated: 6 October 2026