Privacy Policy

Last updated: 6 October 2026

Who is responsible

Maximilian Warum, Ossiachersee Süduferstraße 43b, 9523 Villach-Landskron, Austria.

If you sign up, I store your email address, the time of sign-up and confirmation, your IP address at sign-up, and where you came from (e.g. a campaign link). I use Kit (ConvertKit LLC, USA) to send the newsletter. When you sign up, your browser sends your email address directly to Kit. Double opt-in confirms your subscription. Kit records whether emails are opened and which links are clicked, so I can see what's interesting to readers.

Legal basis: your consent (Art. 6(1)(a) GDPR, § 174 TKG 2021). You can withdraw it at any time with the unsubscribe link in every email. This doesn't affect processing done before you withdraw.

Providing your email is required to receive the newsletter.

Retention: until you unsubscribe. After that, I keep your email and proof of consent only as long as needed to prove the consent was given (Art. 6(1)(f) GDPR).

Transfer to the USA: Kit processes data in the USA. Kit is certified under the EU-US Data Privacy Framework. Transfers are additionally covered by the Standard Contractual Clauses in my data processing agreement with Kit.

Contact

If you email me, I use your message and email address only to reply. My email runs on Google Workspace (Google Ireland Limited).

Legal basis: steps prior to a contract (Art. 6(1)(b) GDPR) or my legitimate interest in replying to you (Art. 6(1)(f) GDPR).

Retention: deleted 6 months after our conversation ends. If it leads to a job, records are kept as long as tax law requires (7 years, § 132 BAO).

If you message me on Instagram, Meta's privacy policy applies to that conversation.

Hosting

This site is hosted by Vercel Inc., USA. When you visit, server logs (IP address, time, page, browser) are processed to deliver the site and keep it secure.

Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

Retention: logs are deleted automatically within 1 day.

Transfer to the USA: Vercel is certified under the EU-US Data Privacy Framework. Transfers are additionally covered by Standard Contractual Clauses in Vercel's data processing agreement.

Greeting with your city and weather

When the page loads, it asks this site's server for your approximate city, which Vercel derives from your IP address (city level, never a precise location). It is used only to show the greeting at the top and isn't stored. For the weather, the server sends the rounded coordinates of that area (about 10 km), never your IP address, to Open-Meteo (Switzerland) and the Aviation Weather Center of the U.S. National Weather Service.

Legal basis: legitimate interest in a personal greeting (Art. 6(1)(f) GDPR).

Cookies and tracking

This site uses no cookies and no analytics, and stores nothing on your device. Fonts and images are served from this site itself, so no third party is contacted when you visit. Links to Instagram, YouTube, X or TikTok only take you there when you click them; their own privacy policies apply there.

Your rights

You have the right to access, correction, deletion, restriction, data portability, and to object to processing based on legitimate interest. You can withdraw your consent at any time. Just email me at max@maximilianwarum.com.

You can also complain to the Austrian Data Protection Authority:

Datenschutzbehörde, Barichgasse 40-42, 1030 Wien, dsb@dsb.gv.at