Privacy policy
This notice explains how personal data is handled when you visit this website or contact me, under the GDPR and the Austrian Data Protection Act (DSG).
Data controller
A19 Digitale Dienstleistungen e.U., owner Arman Sarrafi-Nour, Simmeringer Hauptstraße 119/16, 1110 Wien, Österreich. For privacy enquiries, contact office@a19.at or 0660 123 4675.
Delivering this website
Your browser sends technical information to the web server, including your IP address, the requested address, the time and browser details. This supports the operation and security of the website under Article 6(1)(f) GDPR.
Fonts and project preview images are served by this website. External project websites only open when you follow their links.
TODO: Add the hosting provider, recipients, processing location, processing agreement and actual server log retention period before publication.
Enquiries by form, email or phone
When you enquire, I process your name, email address, optional phone number, message, time of submission and consent confirmation. The web server sends the enquiry via SMTP to office@a19.at so I can respond. Contacting me does not subscribe you to advertising or a newsletter.
Specific project enquiries are processed to take steps at your request before a contract, under Article 6(1)(b) GDPR. You may withdraw the consent requested in the form under Article 6(1)(a) GDPR at any time for future processing. Other enquiries are handled under Article 6(1)(f) GDPR, based on the legitimate interest in responding to correspondence.
Required fields are identified on the form. Without this information, the form cannot send your enquiry. You can also contact me directly by email or phone. Enquiries are not used for automated decision-making or profiling.
To prevent automated spam, the server checks a hidden field and the time since the page loaded. It counts attempts per email address in memory for up to 15 minutes under Article 6(1)(f) GDPR, the legitimate interest in preventing abuse.
TODO: Confirm email and hosting providers, recipients and processing locations. Set the actual deletion period for enquiries and document any applicable statutory retention periods for contract records.
Preferences stored on your device
Your analytics choice is saved in your browser as granted or denied under a19_cookie_consent. Your language is saved locally under a19_language and in a cookie that lasts one year, so the homepage can respect your choice when you return. These preferences are not analytics and are not used for advertising. Local entries remain until you change them or clear your browser data.
Storage supports your requested preferences under section 165(3) of the Austrian Telecommunications Act 2021 and Article 6(1)(f) GDPR, the legitimate interest in respecting your settings.
Google Analytics & your choice
Google Analytics 4 (G-DS0KEZQSYQ), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is loaded only with your permission. The legal basis is consent under Article 6(1)(a) GDPR and section 165(3) of the Austrian Telecommunications Act 2021.
This website uses Basic Consent Mode v2. The analytics script is not loaded before consent or if you decline. All four consent signals default to denied. Consent enables analytics_storage only. Advertising storage, use of data for advertising and advertising personalisation remain denied.
After consent, Google processes visited pages, usage and device information, and cookie identifiers. Your IP address is transmitted to establish the connection with Google. This application does not send contact form contents to Analytics. Google may process data outside the EU, including in the United States.
You can change your decision through Cookie settings in the footer. Withdrawing consent disables analytics and removes accessible Google analytics cookies set by this website. Withdrawal does not affect the lawfulness of earlier processing.
TODO: Specify Analytics retention and cookie lifetimes from the actual property settings. Verify and document the processing agreement and current safeguards and legal basis for any international transfers.
Your rights
Subject to the applicable legal conditions, you may request access, correction, deletion, restriction of processing or data portability, and object to processing based on legitimate interests. You may withdraw consent at any time for future processing. Please contact office@a19.at.
You may lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).