Data protection

I handle your data sparingly. This website uses no analytics or advertising services and no cookies for recognising visitors. Fonts, images and my own videos are loaded directly from my own server. A connection to other providers is only made if you yourself start a YouTube video or a reading on SoundCloud.

Below you will find out exactly which data are collected, what they are used for and what rights you have.

Susanne Schartner
Schalserseitenweg 1a
6200 Jenbach, Austria
Email: info@susanneschartner.at
Telephone: +43 664 1 488 488

This website is hosted on a server of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, in the Nuremberg data centre. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

Each time a page is accessed, the server automatically stores: your IP address, the date and time, the address accessed, the page you came from, and information about your browser and operating system. This data is used solely to ensure the secure and smooth operation of the website, for example to detect attacks. The legal basis is my legitimate interest under Art. 6(1)(f) GDPR. The logs are deleted after 14 days at the latest.

This website sets only two technically necessary cookies:

• susanne-schartner-session – maintains the connection during your visit, e.g. so that the contact form works.
• XSRF-TOKEN – protects forms against misuse by other websites.

Neither cookie contains any personal information, and both expire after no more than two hours of inactivity. Because they are strictly necessary for the operation of the site, no consent is required (§ 165 (3) TKG 2021, Art. 6 (1) (f) GDPR).

If you choose “Always load YouTube videos in future” or “Always load SoundCloud in future”, your browser remembers this choice (in what is known as local storage). This information stays on your device and is not transmitted to me. You can reset this setting at any time at the end of this page.

If you write to me via the contact form or by email, I process your name, email address, subject and message in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (for example, for enquiries about engagements) or my legitimate interest in replying to your message (Art. 6(1)(f) GDPR).

Messages from the form are delivered to me by email and also stored in the protected admin area of the website. There they are automatically deleted after 12 months, or earlier on request. To protect against mass spam messages, your IP address is temporarily stored for no more than one hour. Your data is not passed on to third parties.

If you sign up for my newsletter, I store your email address, your first name (if you choose to give it), your language and the time of your sign-up and confirmation. You will first receive an email with a confirmation link (double opt-in); you are only subscribed once you click it. Unconfirmed sign-ups are deleted after 30 days. The legal basis is your consent (Art. 6(1)(a) GDPR).

To send the newsletter I use Brevo (Sendinblue SAS), 106 boulevard Haussmann, 75008 Paris, France. Only after your confirmation are your email address and first name passed on to Brevo and stored on servers in the EU. A data processing agreement under Art. 28 GDPR is in place with Brevo. When sending, Brevo records whether a newsletter was opened and which links in it were clicked; this statistical analysis is part of your consent.

You can unsubscribe at any time via the link in every email. Your address will then be deleted both by me and by Brevo.

On the “Comp card” page you can request my comp card as a PDF. To do so, I store your email address, the language, the time of your request and when the link was used, and send you a download link. The link is valid for 7 days; the request is deleted after 30 days. The legal basis is your request or consent (Art. 6(1)(a) and (b) GDPR).

You will only receive the newsletter if you tick the separate box “I would also like to receive the newsletter” – the download does not depend on it. If you have ticked it, clicking the link in the email also confirms your newsletter subscription (double opt-in); only then are you subscribed. The “Newsletter” section applies to the newsletter; you can unsubscribe at any time via the link in every email.

Some pages contain embedded videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are only loaded when you click “Play” (two-click solution). Before that, no data is transmitted to YouTube.

Only when you click is a connection made to YouTube’s servers. YouTube then receives, among other things, your IP address and information about which page you visited; YouTube may also set cookies. I use the enhanced privacy mode (youtube-nocookie.com). Data may also be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is the consent you give by clicking (Art. 6(1)(a) GDPR). For more information, see Google’s privacy policy.

The readings on the “Audio” page are stored on SoundCloud, a service of SoundCloud Global Limited & Co. KG, Rheinsberger Straße 76/77, 10115 Berlin, Germany. Here too, the two-click solution applies: the player is only loaded when you click “Play”. Before that, no data are transmitted to SoundCloud.

When you click, SoundCloud receives, among other things, your IP address and information about which page you visited; SoundCloud may also set cookies. Data may also be transferred to the USA in the process. The legal basis is your consent given by clicking (Art. 6 (1) (a) GDPR). You can find out more in SoundCloud’s privacy policy.

Links to social networks such as Facebook and YouTube or to my agency are simple links. No programs from these providers are embedded in my website. Only when you click a link are you taken to the respective provider’s site, where their privacy policy applies.

To maintain the content, I use a writing and translation aid from Anthropic (Anthropic, PBC, USA; AI service “Claude”) in the protected administration area. Only the texts of the website, photos from my picture collection and my own input are transmitted, no data from visitors and no messages from the contact form. English versions of the pages are created with this aid. The photos, which may also show other people, are tagged once with keywords describing the image content so that I can find them again in my picture collection; people are not identified in the process. For voice input in the administration area, the browser uses its built-in speech recognition (in Google Chrome via Google’s servers).

You have the right at any time to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You may withdraw any consent you have given at any time with effect for the future.

Simply write to me at info@susanneschartner.at.

If you believe that the processing of your data breaches data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, www.dsb.gv.at.

October 2026