PDKonline
Privacy policy
1. Controller
Paul-Daniel Kardos
Feldkellergasse 6, 1130 Vienna, Austria
Email: paul@pdkonline.at
Phone: 0699 11 11 94 58
2. Principles
This website processes personal data only to the extent necessary to operate it and to answer your enquiry.
3. Server log files
When you visit the website, the web server automatically stores technical access data: IP address, date and time, requested address, HTTP status code, amount of data transferred, referrer and browser identification (user agent).
Purpose: secure and stable operation, error analysis, defence against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Retention period: 120 days, after which the logs are deleted automatically.
4. Contact form
If you use the contact form, I process your name, company (optional), business email address, phone number (optional), type of project, your project description and the time of your consent. To prevent misuse, your IP address is not stored; only an irreversible hash value formed with a server key is kept, together with a shortened browser identification.
Purpose: handling and answering your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time with effect for the future; for the prevention of misuse, Art. 6(1)(f) GDPR. Retention period: until your enquiry has been dealt with, for a maximum of 12 months; if a contract is concluded, the periods set out in section 5 apply. Your data is not passed on to third parties.
5. Customer area and invoices
For customers with access to the customer area, I process master data (company, contact person, address, email, phone, VAT number), project data as well as invoices and service confirmations. The customer account comprises the login email, a password hash and the time of the last login.
Purpose: performance of the contract, project delivery and invoicing. Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (statutory retention obligation). Retention period: the customer account exists until the end of the contractual relationship. Invoices and the related accounting records are kept for seven years in accordance with § 132 of the Austrian Federal Fiscal Code (BAO) and then deleted.
6. No cookies, no tracking
This website does not set any cookies, does not use any analytics or tracking services and does not embed any third-party content. Only users who log in to the customer area receive a technically necessary session cookie that keeps them logged in (Art. 6(1)(b) GDPR). A cookie banner is therefore not required.
7. Fonts
The fonts used (Space Grotesk, IBM Plex Mono) are served locally from this server. There is no connection to servers operated by Google or other providers.
8. Map data
The map of the globe journey on the home page is based on the following sources:
© OpenStreetMap contributors (ODbL)
City of Vienna – data.wien.gv.at (CC BY 4.0, modified)
Natural Earth (public domain)
The map data is served locally from this server; no data is transferred to these providers when you visit the website.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to withdraw consent at any time (Art. 7(3)). To exercise these rights, please use the contact address above.
10. Right to lodge a complaint
If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.
The German version is legally binding.