Privacy Policy
This site sets no cookies and ships no tracking code of its own. What it does have is a contact form, server logs, and a cookieless analytics beacon Cloudflare adds at the edge. What follows is the complete list.
Last updated 16 October 2026.
Who is responsible
Gerhard Reus, Ignaz-Härtl-Straße 8, 5020 Salzburg, Austria. Contact:[email protected]. Full details are in theimprint.
Cookies
This site sets none, and nothing it loads sets one either. There is no consent banner because there is nothing to consent to.
Server logs
The web server records each request: the IP address, the time, the page requested, the referring page and the browser's user agent. That is standard for any web server and is needed to operate the site securely. The legal basis is legitimate interest under Article 6(1)(f) GDPR. Logs are not used to build a profile and are not combined with anything else. They are rotated by the host and are not kept beyond 30 days.
The site is hosted on a Hetzner server in Germany, managed through xCloud, and is served through Cloudflare, which acts as a caching and security proxy. Both process request data on the way to the server, and both act as processors. Cloudflare, Inc. is based in the United States, so some of that processing happens outside the EEA under Cloudflare's own data processing terms and the European Commission's standard contractual clauses.
Analytics
Google Analytics used to run here. It was removed when the site moved off WordPress and replaced with Cloudflare Web Analytics, which is cookieless, sets no persistent identifier and does not follow visitors between sites. It reports aggregate page views and referrers, nothing that identifies a person. Legal basis: legitimate interest under Article 6(1)(f) GDPR.
Cloudflare injects its beacon into the page at the edge rather than it being part of what is published here, so the script the browser fetches comes from static.cloudflareinsights.com. Apart from the Turnstile widget on the contact page, described below, it is the only script on the site that is not served from this domain.
Fonts, images and embeds
Fonts are served from this domain, not from Google Fonts or any other font service. Images are served from this domain. There are no embedded videos, maps, social widgets, comment systems or tracking pixels anywhere on the site. Apart from the analytics beacon and the Turnstile widget on the contact page, every file the browser loads comes from this domain.
The contact form
The form asks for your name, your email address and your message, and it is used to answer you. Nothing else. You are not added to any list, there is no newsletter, and nothing is passed to anyone selling anything. Legal basis: Article 6(1)(b) or (f) GDPR. You are not obliged to use it, and nothing on this site depends on your doing so. The email address is published above if you would rather write directly.
Submissions are received and stored by the forms service that runs the estate's sites, on the same Hetzner infrastructure in Germany, and are forwarded to me by email. They are kept for two years and then deleted, or sooner if you ask.
The form is protected against automated abuse by Cloudflare Turnstile, which replaces the usual puzzle with a background check. It sets no cookie and does not profile you or track you between sites. It loads from challenges.cloudflare.com, which makes it the second script on the site not served from this domain, and it appears only on the contact page.
Personal data inside older posts
Posts published between 2017 and 2020 are archive material and some of them quote other people, including messages sent privately at the time. If something published here concerns you and you would like it removed or anonymised, write to the address above and it will be taken down.
Your rights
Under the GDPR you may request access to your personal data, correction, erasure, restriction of processing, and data portability, and you may object to processing based on legitimate interest. Write to the address above. You may also complain to the Austrian Data Protection Authority, the Datenschutzbehörde, atdsb.gv.at.
Changes
This page describes the site as it currently is. If something is added that processes data, this page is updated at the same time and the date at the top changes with it.