Privacy
Which data is processed when you visit this website, and why.
Controller
Michael Lietz
Graz, Austria
Email: contact@michaellietz.at
This statement describes how personal data is processed on this website.
Serving the website
The website runs on a server I operate myself. So that this server does not have to be reachable directly from the internet, the site is published through Cloudflare Tunnel: requests to televelo.at first reach Cloudflare and are passed on from there to my server over an encrypted connection.
Every request involves technically necessary connection and request data, in particular your IP address, date and time, the requested address and the HTTP headers your browser sends, such as the browser type and language setting.
The purpose is to deliver the requested content and to keep the site secure and working. The legal basis is Art. 6 (1) (f) GDPR. The legitimate interest is to serve this website reliably and to protect it and my server against disruption and abuse. Without this data the website cannot be accessed.
My server uses this data only to deliver the requested files and writes no access logs.
Cloudflare
The tunnel and the network in front of it are provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare accepts your browser's encrypted connection, fends off attacks and overload, may cache files of the website and forwards requests to my server. Because the HTTPS connection ends at Cloudflare, Cloudflare can technically see the requests and content transferred.
Cloudflare processes the connection and request data named above and technical information derived from it, such as the approximate country of origin and signals used to detect automated access. Cloudflare acts as my processor under a data processing agreement under Art. 28 GDPR. The legal basis is Art. 6 (1) (f) GDPR; my legitimate interest is secure and stable delivery without exposing my server directly to the internet.
Cloudflare is based in the USA and operates data centres worldwide, so data may be transferred to the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework; this transfer is covered by the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). The data processing agreement additionally includes the European Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).
In the Cloudflare dashboard I see aggregate statistics, such as the number of requests and countries of origin, and samples of individual requests including the IP address. On Cloudflare's free plan, individual requests remain visible there for at most seven days. I use this only to monitor the operation and security of the website. Otherwise Cloudflare keeps the data only as long as needed to provide the service. More in Cloudflare's privacy policy.
The website itself sets no cookies. Cloudflare may, however, set strictly necessary security cookies to protect against automated access, such as __cf_bm when bot protection is active or cf_clearance after a passed security check. They serve security only and are short-lived – __cf_bm, for example, expires after 30 minutes of inactivity – and are permitted without consent under § 165 (3) of the Austrian Telecommunications Act 2021.
No analytics, no tracking
Apart from the dashboard statistics described above, there is no audience measurement. No analytics scripts are used, including Cloudflare's Web Analytics, and there are no ad trackers, forms, user accounts or newsletters. The website's code uses no cookies, no local storage and no session storage.
Fonts, images, stylesheets and JavaScript are served only from this website's own address. No external font, video, map or social media widgets are embedded.
The pause switch is processed only in your browser's memory. It is neither sent to the server nor stored, and it resets when you reload.
Contact by email
The launch news button opens your email program; the website itself transmits nothing. When you email me, I process your email address, the content of your message and anything else you choose to share.
Questions and test rider applications: I process them to reply and to plan test sessions. The legal basis is Art. 6 (1) (b) GDPR (steps taken at your request) or Art. 6 (1) (f) GDPR (handling the conversation you started).
Launch news: If you ask to be notified, I keep your address to send you one message when Televelo launches. The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time by email; your address is then deleted, and in any case after that one message.
The technical providers of the mailbox are involved in transmitting and storing email. Other messages are deleted once the request is fully handled and keeping them is not needed to clarify open questions, to meet a legal obligation or to establish, exercise or defend legal claims. Contacting me is voluntary.
Links to other websites
External websites, such as michaellietz.at or Cloudflare, are included only as plain links. Your browser connects to that provider only when you follow such a link, and their privacy information applies there.
This website suppresses the HTTP referrer on outgoing navigation. That does not prevent processing on the destination site.
Your rights
Within the legal requirements, you have the right of access, rectification, erasure, restriction of processing and data portability. You can withdraw consent at any time with effect for the future.
Objection: You can object to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation.
To exercise your rights, contact me at contact@michaellietz.at. Requests are normally handled within one month; extensions permitted by law remain reserved.
There is no automated decision-making, including profiling.
Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, place of work or the place of the alleged infringement. In Austria this is the Austrian Data Protection Authority.
Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna, Austria
dsb@dsb.gv.at
How to complain