Privacy.

Bernhard Berger is responsible for this personal website. For privacy questions or requests, email bernhard.berger@gmail.com.

The website does not use cookies. Fonts and images are served with the website.

Hosting and connection data

The website is hosted by OVHcloud in France. When you visit, OVHcloud processes technical connection data, including your IP address and requested pages, to deliver the website, investigate errors and protect it against abuse.

The legal basis is Article 6(1)(f) GDPR: my legitimate interest in running a reliable, secure website.

OVHcloud also provides website statistics compiled from anonymised and aggregated traffic data. Its hosting terms state that these statistical reports are available for up to 40 months. This is separate from the retention of raw connection logs.

More information: OVHcloud data protection.

Website statistics

I use Cloudflare Web Analytics, provided by Cloudflare, Inc. in the United States, to understand aggregate website traffic and improve loading performance.

Your browser sends Cloudflare information about the page visited, referring page, browser, operating system, device type and loading performance. Reports also include country-level information. The service does not use cookies, browser storage or visitor fingerprinting.

Cloudflare receives your IP address when handling the connection. According to its documentation, the RUM service discards it at the nearest Cloudflare data centre and does not store it in its core databases or logs.

The legal basis is Article 6(1)(f) GDPR: my legitimate interest in understanding how the website is used and keeping it fast and usable, using analytics without persistent visitor identifiers.

Cloudflare retains unsampled beacon data for seven days, then reduces the data for longer-term statistics. I can access statistics for the previous six months; this does not mean all data held by Cloudflare is deleted after six months.

Processing may take place outside the European Economic Area, including in the United States. Cloudflare’s data processing terms provide for the EU–US Data Privacy Framework and, where applicable, the European Commission’s standard contractual clauses.

See Cloudflare’s analytics documentation and retention information.

Your rights

Subject to the applicable legal conditions, you may request access, correction, deletion or restriction of processing, and data portability where applicable.

You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. Please contact me at the email address above.

You may lodge a complaint with a supervisory authority, including the Austrian Data Protection Authority.