Privacy Policy

Information on the processing of personal data under Art. 13 and 14 GDPR (DSGVO).

Controller

Name
Maija Suipe
Address
Schinnaglgasse 9, 1160 Vienna, Austria
Email
maija.suipe@gmail.com

In short

This website sets no cookies, runs no analytics and uses no tracking or advertising tools, so it carries no consent banner, there is nothing to consent to. Fonts are hosted on this server, so no font request reaches Google. One small exception is described below: switching language writes a single short lived entry to your browser's session storage. Requests to this site are routed through the Cloudflare network, described below, which sets no cookies here. The only third party content loaded in your browser is on the Graphic Design & Video page.

Server log files

When you open this website, your browser automatically transmits data that the hosting provider stores in server log files: IP address, date and time of the request, the page requested, referrer URL, browser type and version, and operating system. The content delivery network described below records the same connection data as your request passes through it.

This processing is based on a legitimate interest under Art. 6(1)(f) GDPR in operating the site securely and stably. Log data is not merged with other data sources and is not used to identify individual visitors. It is kept only for as long as it is needed to detect and investigate technical faults and attacks, as a rule no longer than 30 days, and is then deleted by the provider.

Hosting

This website is hosted by World4You Internet Services GmbH, Hafenstrasse 35, 4020 Linz, Austria, acting as a processor under Art. 28 GDPR. Data is stored on servers within the European Union.

Content delivery network

This website uses the content delivery network and security service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, represented in Europe by Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany, acting as a processor under Art. 28 GDPR. Every request to this website is routed through Cloudflare's servers before it reaches the hosting provider. Cloudflare thereby processes your IP address, the page requested and the technical details of your request, in order to deliver the site quickly and to protect it against attacks. Cloudflare also operates the domain's DNS.

The legal basis is the legitimate interest under Art. 6(1)(f) GDPR in operating this site securely, stably and quickly. Processing may take place outside the European Union, in particular in the United States. Such transfers are based on the standard contractual clauses of the European Commission and on Cloudflare's certification under the EU-US Data Privacy Framework. Cloudflare sets no cookies on this website. See Cloudflare's privacy policy.

Contact by email

If you contact me by email, the details you provide (name, email address, the content of your message) are processed in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the contact relates to a contract or pre-contractual steps, otherwise the legitimate interest in responding under Art. 6(1)(f) GDPR.

Enquiries that do not lead to a project are deleted three months after the last exchange. Where an enquiry does become a project, the correspondence forms part of the business records of that project: it is kept for the duration of the working relationship and then for the seven year statutory retention period under § 132 of the Austrian Federal Fiscal Code (BAO) and § 212 of the Austrian Commercial Code (UGB). After that period, project correspondence is retained only for as long as it is still needed to establish, exercise or defend legal claims.

Fonts

Typefaces are delivered from this server. No connection is made to Google Fonts, and no IP address is transmitted to Google for the purpose of loading fonts.

Storage in your browser

When you switch between the English and the German version of a page, this site writes a single entry to your browser's session storage so that the new page can open at the point you had reached. The entry holds one number describing the scroll position and nothing else. It is deleted the moment the new page reads it, it never leaves your device, and it is gone when you close the tab. Nothing else is stored on your device.

Google Search Console

This website is registered with the Google Search Console, a service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. It shows me aggregated, anonymised statistics about how the site appears in Google Search, such as search queries, impressions, clicks and positions. That data is collected by Google within its own search service, not on this website. No cookies are set, no script is loaded, and no personal data about visitors is transmitted to Google. Ownership of the domain is confirmed through an entry in its DNS settings, which processes no data and is not part of the website itself. The legal basis is the legitimate interest under Art. 6(1)(f) GDPR in understanding and improving how this site is found. See Google's privacy policy.

Embedded content on the Graphic Design & Video page

The Graphic Design & Video page embeds third party content. Opening that page causes data to be transmitted to those providers, including your IP address. This does not happen on any other page of this website.

The legal basis is the legitimate interest under Art. 6(1)(f) GDPR in presenting past work. If you would rather not have data transmitted to these providers, do not open that page, or block third party content in your browser.

Links to other websites

This site links to external websites, including LinkedIn and the sites of partner companies. Following such a link takes you to a site whose data processing I do not control and for which this policy does not apply.

Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). To exercise these rights, write to maija.suipe@gmail.com.

No automated decision making and no profiling within the meaning of Art. 22 GDPR takes place on this website. Given the nature and the scale of the processing described here, no data protection officer has to be appointed under Art. 37 GDPR.

You also have the right to lodge a complaint with the supervisory authority:

Authority
Österreichische Datenschutzbehörde
Address
Barichgasse 40-42, 1030 Vienna, Austria
Email
dsb@dsb.gv.at

Changes to this policy

This policy is updated whenever changes to the website make it necessary. Last updated: 24 September 2026.