Privacy policy (English)
Last updated: 29 September 2026. This notice explains how personal data is processed when you visit greschner.at or contact us through this website.
Controller and contact
Jan André Greschner, MSc., Rosenhaingasse 28, 1220 Vienna, Austria. You can contact us about privacy through the contact form or by post at the address above.
Website operation and hosting
When you visit this site, the web server and our hosting provider, Hostinger, process technical data such as your IP address, date and time of access, requested page, browser information and error or security logs. This is needed to deliver the site, keep it secure and diagnose faults. The legal basis is our legitimate interest in operating a reliable and secure website (Article 6(1)(f) GDPR). Technical logs are kept only for the period needed for these purposes, subject to the hosting settings and any legal obligations.
Contact forms
Our contact forms use Forminator. If you submit a form, we process the name, email address and message you provide, together with technical submission information, to answer your enquiry and follow up. Name and email are required; the message is optional. The legal basis is Article 6(1)(b) GDPR where your enquiry concerns a possible contract, or our legitimate interest in handling other enquiries under Article 6(1)(f) GDPR. The information may be stored in WordPress and sent to us by email. We retain it for as long as needed to deal with the enquiry and, where relevant, to meet legal obligations or establish, exercise or defend claims. We do not use a contact request alone as consent to marketing messages.
Spam protection: Google reCAPTCHA
The contact forms use Google reCAPTCHA to distinguish people from automated abuse. When a page with a contact form loads, your browser contacts Google and may transmit technical information including IP address, browser and device information and interaction data. Google may set the _GRECAPTCHA security cookie; other Google cookies may also be present when the google.com domain is used. We use this service to protect the forms and site from spam and misuse (Article 6(1)(f) GDPR). See Google’s Privacy Policy and reCAPTCHA information.
Optional measurement and consent
Only if you accept optional technologies, we load the OpenAI Ads Measurement Pixel. It records a page-view event on the English or German homepage and an event after a successful contact-form submission, for measuring advertising results. The Pixel may process the page URL, browser or device information, online identifiers and event details. OpenAI’s automatic advanced matching can detect supported contact information in recognizable forms and normalize and hash it in the browser before sending it with conversion events. Our site code does not deliberately include your message text in those events. OpenAI and we may act as independent controllers for conversion data under the applicable Conversion Terms. The legal basis for this optional measurement and related device access is your consent (Article 6(1)(a) GDPR and Section 165(3) TKG 2021). See OpenAI’s European Privacy Policy.
We store your measurement choice in your browser’s local storage under greschner_openai_ads_consent_v1 so the site remembers it. The choice remains until you change it or clear browser storage. You can reject or later change your choice using “Cookie settings” in the site footer. Withdrawing consent stops future Pixel measurement; it does not undo processing that took place while consent was valid.
Recipients and international transfers
Hostinger supports website hosting; Google receives reCAPTCHA information; OpenAI receives conversion data only after measurement consent. Service providers may process information outside the European Economic Area. For EEA conversion data, the OpenAI Ad Tools Data Processing Addendum says OpenAI Ireland Limited handles the data and uses a valid mechanism for onward transfers. Google describes its transfer safeguards, including adequacy decisions and standard contractual clauses, in its data transfer information. You may ask us for further information about relevant safeguards.
Your rights
Subject to the GDPR’s conditions, you may request access, correction, erasure, restriction, data portability or object to processing based on legitimate interests. You may withdraw consent at any time. Contact us using the details above. You can also complain to the Austrian Data Protection Authority (Österreichische Datenschutzbehörde). We do not make decisions about you solely by automated processing through this website.
Other websites and changes
Links to other websites lead to services with their own privacy notices. We may update this notice when our site or legal requirements change; the date above shows the current version.