Privacy Policy

Last updated: 2026-09-09

Protecting personal data matters to me. This policy explains which data is processed when you visit this website, for which purpose, on which legal basis, and which rights you have under the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

1. Controller

Danny Rasmussen, Pupping, Österreich
E-mail: contact@danny-rasmussen.com
Contact form: danny-rasmussen.com/en/contact

This website is a personal professional and portfolio website documenting professional activity and technical projects and serving professional exchange. No data protection officer has been appointed and none is required by law.

2. Hosting and server log files

The website runs on rented infrastructure of a hosting provider. When you open the site, the web server processes technically necessary data in log files: IP address, date and time, page requested, HTTP status code, amount of data transferred, browser type and, where applicable, the referring page.

The purpose is secure and stable operation as well as detecting and investigating attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Deletion of the log files follows the configuration of the hosting provider; they are deleted once they are no longer needed for operation and security. Log files are not analysed for usage behaviour and are not combined with other data.

3. Contact form

If you use the contact form, the following data is stored in the database of this website: name, e-mail address, company (optional), subject, message, the language version of the form and the time of receipt. No further data is collected.

The purpose is handling your enquiry and communicating about it. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering incoming enquiries). Where an enquiry actually serves to enter into a contractual relationship, Art. 6(1)(b) GDPR may apply in addition. Providing the data is voluntary. Without name, e-mail address, subject and message an enquiry cannot be handled. No consent is collected and none is required for this processing.

Contact enquiries are generally deleted after 180 days at the latest, unless statutory retention obligations or ongoing business or contractual communication require longer storage. Deletion runs automatically through a background service executed once a day.

When an enquiry arrives, a notification e-mail is sent to the controller. For data minimisation this notification does not contain the message text, only the name, the subject and a link to the protected administration area. The content of your enquiry is therefore not additionally stored in a mailbox.

You also receive an automatic confirmation of receipt at the e-mail address you provided. It only confirms receipt and contains no copy of your message. The legal basis is Art. 6(1)(f) resp. (b) GDPR. It is sent once; there is no newsletter and no storage beyond the enquiry described above.

A hidden form field (honeypot) and a limit on requests per time window protect against automated submissions. The limit works purely in the server's memory and does not store IP addresses permanently. In addition, every submission is checked on the server for technical traits of typical advertising and bulk messages (such as being sent within seconds of opening the form, the number and share of links, typical sales wording, repeated identical messages). Submissions classified as spam are not delivered by e-mail and trigger no confirmation; they are kept separately in the protected administration area, reviewed manually if needed and deleted after 30 days at the latest. This check has no legal effect on you; it only decides whether a notification is sent. No external captcha or verification services are used.

4. Recipients and processors

Recipients of personal data can be the technical service providers used for hosting and sending e-mail. Where required they act as processors under Art. 28 GDPR. Data is not passed on for advertising or marketing purposes. Data is not sold.

5. Cookies and local storage

This website only uses storage that is technically necessary or actively triggered by you, within the meaning of section 165(3) of the Austrian Telecommunications Act 2021. No tracking, analytics or marketing cookies are used, which is why no cookie banner is shown. Language and appearance settings are only stored once you make that choice yourself and are not used to recognise you.

6. Administration area

The content of this website and the incoming contact enquiries are managed through a password-protected administration area. Access is limited to the controller; there is no registration for visitors. Contact enquiries can only be viewed after a successful sign-in.

7. No external content and no tracking services

No third-party content is embedded: no web fonts from external servers, no analytics or map services, no social media plugins, no external videos. Fonts come from the visitor's own system. Links to external platforms are plain links; the privacy policies of those providers only apply once you follow them. Technical service providers for hosting and e-mail are unaffected by this (see section 4).

8. No automated decision-making

There is no automated decision-making, including profiling.

9. Your rights

Under the GDPR you have in particular the following rights:

• Access to the data processed about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability, where applicable (Art. 20)
• Objection to processing based on legitimate interests (Art. 21)

An informal message to contact@danny-rasmussen.com or through the contact form is enough to exercise them.

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (www.dsb.gv.at).

10. Changes to this policy

This privacy policy is updated when the processing on this website changes. The version published here, with the date given above, applies.