Privacy Policy

Last updated: October 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Azra Salihbegovic-Anderer
Speisinger Straße 20/1/6
1130 Vienna
Austria
Phone: +43 660 4832461
Email: azra@silh.at

2. Summary

This website uses no third-party analytics or tracking services and does not embed any third-party content. Fonts and images are served directly from my own server. The connection to the website is encrypted (HTTPS). I only process personal data to the extent necessary to operate the website and to handle your enquiries, or where you have given your consent. No automated decision-making or profiling takes place.

Cookies: On your first visit, you can choose in the cookie banner whether to accept essential cookies only or all cookies. You can change or withdraw your choice at any time via the "Cookie Settings" link at the bottom of every page. Only the following two cookies are used; neither contains an identifier that could be used to recognise you.

Essential cookie (cookieConsent): stores your choice in the cookie banner so that the banner does not reappear on every page. Retention: 12 months. Legal basis: § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021, technically necessary) and Art. 6(1)(f) GDPR.

Preference and statistics cookie (siteLang, only with "Accept all cookies"): remembers whether you last used the website in German or English, so that you see the matching language version directly the next time you open silh.at. The value ("de" or "en") is also recorded in the server log files (see section 3). This lets me see how many visitors use the English version and improve my services accordingly. Retention: 12 months; the cookie is deleted if you withdraw your consent. Legal basis: your consent (§ 165(3) TKG 2021, Art. 6(1)(a) GDPR), which you may withdraw at any time with effect for the future.

3. Visiting the Website (Server Log Files)

When you visit this website, the web server automatically stores the following data in log files: a shortened IP address (the last segment is replaced with 0), date and time of access, the page requested, HTTP status code, amount of data transferred, browser type and operating system (user agent), and – only if you have accepted all cookies – your preferred language (see section 2). In the event of technical errors, the error logs may also contain the full IP address.

Purpose: secure and stable operation of the website, detecting and preventing attacks, and troubleshooting.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).
Retention: Log files are deleted automatically after 7 days. They are not combined with other data or analysed for marketing purposes.

4. Contact Form

If you write to me via the contact form, I process the data you enter (name, email address, subject, and message) in order to answer your enquiry. This information is required for me to handle your enquiry. Your message is forwarded by the web server directly as an email to my mailbox (see section 6) and is not stored on the web server itself.

To protect against abuse (spam), your IP address is held only in the server's working memory to limit the number of requests per sender, and is discarded automatically after about one hour.

Legal basis: Art. 6(1)(b) GDPR where your enquiry concerns entering into a contract (e.g. a booking request); otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). For abuse protection: Art. 6(1)(f) GDPR.

5. Contact by Email and Phone

If you contact me by email or phone, I process the information you provide (e.g. name, contact details, and the content of your enquiry) in order to handle your request. The same legal bases as in section 4 apply.

6. Email Service (Fastmail)

Emails, including messages from the contact form, are received, sent, and stored using the email service of Fastmail Pty Ltd (Melbourne, Australia). Fastmail is contractually bound as a processor pursuant to Art. 28 GDPR. Data is primarily stored in a data centre in Amsterdam (Netherlands); copies, backups, and logs are additionally kept in the United States, and Fastmail, as an Australian company, may access the data.

There is no adequacy decision of the European Commission covering these transfers to Australia and the United States. They are based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR), which form part of the data processing agreement with Fastmail. You may request a copy from me.

7. Retention of Enquiries

Enquiries that do not lead to an engagement are deleted no later than 12 months after the correspondence has ended. If your enquiry leads to an engagement, I keep the correspondence for as long as necessary to perform the contract and beyond that where statutory retention obligations apply (in particular seven years under § 132 of the Austrian Federal Fiscal Code (BAO) for tax-relevant records).

8. WhatsApp and Instagram

This website contains plain links to WhatsApp and Instagram. Visiting the website does not transmit any data to these providers. Only when you click a link do you leave my website; from then on, the privacy policy of the respective provider applies.

If you contact me via WhatsApp, your data (in particular your phone number, profile information, and message content) is processed by WhatsApp Ireland Ltd. (Dublin, Ireland). This may involve a transfer to WhatsApp LLC in the United States; WhatsApp LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). Using WhatsApp is voluntary; you can always reach me by email or phone instead. The same legal bases as in section 4 apply.

9. Hosting and Technical Support

This website runs on a server provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in a data centre in Falkenstein, Germany; the website's data is processed exclusively there. Hetzner provides the server infrastructure and is contractually bound as a processor pursuant to Art. 28 GDPR. Technical support for the website is provided by an IT service provider who also acts as a processor.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable provision of the website).

10. Recipients

Your data is only transferred to the processors named in this policy (Hetzner, Fastmail, IT service provider). It is not disclosed to any other third parties unless I am legally obliged to do so.

11. Your Rights

You have the right to access your stored personal data (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), and to data portability (Art. 20 GDPR).

Withdrawal of consent (Art. 7(3) GDPR): You may withdraw any consent you have given at any time with effect for the future; for cookies, simply use the "Cookie Settings" link at the bottom of every page. This does not affect the lawfulness of processing carried out before the withdrawal.

Right to object (Art. 21 GDPR): Where I process your data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

To exercise your rights or for any questions about data protection, please use the contact details given in section 1.

Right to lodge a complaint: If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority (Datenschutzbehörde, DSB)
Barichgasse 40–42
1030 Vienna
Austria
Email: dsb@dsb.gv.at
Web: www.dsb.gv.at