Privacy Policy

This website presents the photography project “FacingAustria”. It is deliberately built to collect as little data as possible: it consists of static pages, sets no cookies and has no forms, no comment function and no embedded third-party content (such as videos, maps, social media plugins or externally hosted fonts). Below we explain which personal data is nevertheless processed when you visit, why, on what legal basis and for how long (Art. 13 GDPR, § 165(3) Austrian Telecommunications Act 2021).

1. Controller

FOTOHOF
Inge-Morath-Platz 2
5020 Salzburg
Austria
Email: fotohof@fotohof.at
Phone: +43 662 849296

We have not appointed a data protection officer, as we are not legally required to do so. For any data protection questions, please contact us at the email address above.

2. Visiting the website (server log files)

What data: When you open a page, your browser sends technically necessary information to the web server. The server logs the IP address, date and time, the requested file, the HTTP status code, the amount of data transferred, the previously visited page (referrer), and the browser and operating system.

Purpose and legal basis: Delivering the pages and detecting and preventing malfunctions and attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website.

Retention: Log files are deleted after 7 days at the latest, and are kept longer only if and as long as they are needed to investigate a specific security incident.

Recipients: Our hosting provider, acting as a processor (Art. 28 GDPR) strictly on our instructions.

3. Visitor statistics with Umami

What we use: To see which pages are visited and how often, we use the open-source analytics software Umami. We run Umami ourselves on our own server at data.fotohof.at. The data is not passed on to Umami as a company or to any other third party, and is not used for advertising.

What happens on your device: When a page loads, your browser loads a small script from data.fotohof.at. It sets no cookies. It reads your screen size and browser language and checks your browser's local storage to see whether you have switched the statistics off (see below).

What data: The page address and title, the referrer, the screen size and the language are transmitted. From your IP address the statistics server derives your country or region, and from the browser identifier your browser, operating system and device type. To group several page views into one visit, the server creates an encrypted identifier (hash) from the IP address and browser identifier, combined with a random value that changes regularly. The IP address itself is not stored. Visits are not linked to you as a person or tracked across other websites.

Purpose and legal basis: We want to understand how the project is used and improve the website. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is privacy-friendly audience measurement without cookies and without sharing data with third parties.

Retention: Statistics are stored only in this pseudonymised form and deleted once they are no longer needed for statistical evaluation.

Recipients: The provider of the server our Umami installation runs on, acting as a processor (Art. 28 GDPR).

Your choice: If “Do Not Track” is enabled in your browser, nothing is recorded. You can also switch the statistics off for this browser here; this stores a note in your browser's local storage:

Disable statistics for this browser

4. Fonts and other files

Fonts, images, stylesheets and scripts for this website are loaded exclusively from our own server. No connections are made to Google Fonts, content delivery networks or similar services. The connection to the website is encrypted with TLS (https).

5. Contact by email or phone

If you contact us, we process the details you provide (such as your name, email address and message) to respond to you. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.

6. Links to other websites

We link to other websites, such as the FOTOHOF shop or the photographers' websites. You only leave our website when you click such a link; the respective operator is responsible for any data processing there.

7. No transfers to third countries, no automated decisions

We do not transfer personal data to countries outside the EU or EEA. There is no automated decision-making or profiling within the meaning of Art. 22 GDPR. You are not legally or contractually obliged to provide us with data; however, the website cannot be displayed without the technically necessary data (section 2).

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest (sections 2, 3 and 5) (Art. 21 GDPR). Simply write to us at fotohof@fotohof.at.

Please note: because we do not store IP addresses for visitor statistics, we are generally unable to identify you there and therefore cannot provide or delete data relating to you (Art. 11 GDPR).

If you believe that we are processing your data unlawfully, you can lodge a complaint with the Austrian Data Protection Authority (Art. 77 GDPR, § 24 Austrian Data Protection Act): Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

Last updated: October 2026