Privacy
This is a translation. The German version is legally binding.
The protection of your personal data is very important to me. I process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Data Protection Act DSG 2018, TKG 2021). This privacy policy informs you about the most important aspects of data processing on this website.
Controller
Michael Dragomir
Amselweg 17/4
4863 Seewalchen am Attersee
Austria
E-Mail: office@michaeldragomir.com
Hosting and server log files
The website is delivered through Vercel (Vercel Inc., USA), preferably from the Frankfurt am Main data centre. When a page is requested, technical information such as the IP address, date and time, requested page, browser and operating system may be processed in server log files. This serves secure and reliable delivery; the legal basis is Art. 6 (1) (f) GDPR. No external fonts are embedded.
Contact and email delivery
If you contact me via the form or by email, I process the contact and project details you provide and the message text in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR for pre-contractual or contractual enquiries and otherwise Art. 6 (1) (f) GDPR, based on my legitimate interest in responding to your enquiry. The contact form sends the details to the server-side website function at Vercel and then delivers them via SMTP to my mailbox at easyname GmbH, Canettistraße 5/10, 1100 Vienna, Austria. Easyname processes the email data as a processor; according to Easyname, its mail servers are located in Austria. No data is transmitted to Resend. I retain enquiries only for as long as necessary to process them and to comply with statutory retention obligations.
Cookies and consent
On your first visit, a cookie banner asks for your consent. I set technically necessary cookies without consent (Section 165 (3) TKG 2021). All statistics and marketing services are only loaded after you have agreed (Art. 6 (1) (a) GDPR); before that, no data is transferred to Google or Meta.
I store your choice in the cookie “md_consent” (selected categories and time, stored for 12 months). After the contact form is submitted without JavaScript, the cookie “contact_form_status” may be set briefly; it contains no contact details and expires after no more than 90 seconds.
You can change or withdraw your consent at any time with effect for the future – via “Cookie settings” in the footer of every page or via the button below. When you withdraw consent, the cookies of the services concerned are deleted.
Google Tag Manager
To manage the statistics and marketing services, I use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Tag Manager itself sets no cookies and does not analyse usage data; it only loads the other services in line with your choice. Because your IP address is transmitted to Google when it loads, I only load it once you have allowed statistics or marketing. Google Consent Mode passes your choice on to the Google services, which act accordingly. Legal basis: Art. 6 (1) (a) GDPR.
Google Analytics 4 (statistics)
With your consent, I use Google Analytics 4 from Google to understand how the website is used – for example pages viewed, time spent, referral source, device type and approximate location. Google Analytics 4 does not store full IP addresses; the analysis is pseudonymous, based on a random identifier.
Cookies: “_ga” and “_ga_<ID>”, stored for up to 2 years. Retention of the analytics data at Google is limited to 14 months. Legal basis: Art. 6 (1) (a) GDPR, Section 165 (3) TKG 2021.
Google Ads and conversion tracking (marketing)
With your consent, I use Google Ads from Google. Conversion tracking tells me whether, for example, a project enquiry is submitted after someone clicks on one of my ads. I only see aggregated figures, not individual people. Cookies: including “_gcl_au” (up to 90 days) and Google cookies on the domains google.com and doubleclick.net. Legal basis: Art. 6 (1) (a) GDPR, Section 165 (3) TKG 2021.
Google Ads remarketing (marketing)
With your consent, I use the remarketing feature of Google Ads. People who have visited this website may later see my ads in the Google advertising network – for example in Google Search, on YouTube or on partner sites. For this, a pseudonymous identifier is stored in your browser. If you are signed in to Google, Google may link this data to your account; you can manage personalised advertising at myadcenter.google.com. Legal basis: Art. 6 (1) (a) GDPR, Section 165 (3) TKG 2021.
Meta Conversions API (marketing)
With your consent, I use the Conversions API of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). My server sends information about certain actions on this website – such as submitting a project enquiry – directly to Meta in order to measure the effectiveness of my ads on Facebook and Instagram and to show relevant advertising.
The data transmitted includes the type and time of the action, the page viewed, the IP address and browser identifier and, where available, the Meta cookies “_fbp” and “_fbc” (up to 90 days). Contact details such as email address or phone number are only transmitted in encrypted (hashed) form, if at all. Without your marketing consent, no data is transmitted.
I am jointly responsible with Meta for collecting the data and transmitting it to Meta (Art. 26 GDPR); Meta is solely responsible for any further processing. Information from Meta: www.facebook.com/privacy/policy. Legal basis: Art. 6 (1) (a) GDPR, Section 165 (3) TKG 2021.
Transfers to the USA
Google and Meta may also transfer data to servers in the USA. Both companies are certified under the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of data protection (Art. 45 GDPR). Standard contractual clauses also apply (Art. 46 GDPR).
Your rights
You have the right to information, rectification, erasure, restriction, data portability and objection. You can withdraw any consent you have given at any time; this does not affect the lawfulness of processing carried out before the withdrawal. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).