Raphael Faschang
Privacy notice
1. Controller
Raphael Faschang, B.Sc.
Alaudagasse 7/25/17
1100 Vienna, Austria
hello@raphaelfaschang.at
+43 676 848 998 226
This notice describes data processing on this portfolio website. Updated: 1 October 2026.
2. Website delivery
When you access a website, connection data such as your IP address, requested URL, request time and browser information are transmitted to the hosting infrastructure. The purpose is to deliver content and protect against technical failures and abuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a secure and functioning website.
This website is hosted by EDIS GmbH, Hauptplatz 3, 8010 Graz, Austria. EDIS receives the connection data needed to deliver and securely operate the website. Specific log retention and applicable data processing terms depend on the agreed hosting contract.
3. Email and telephone enquiries
If you contact us, we process the contact details and information you provide to respond to your enquiry. For project enquiries, this is necessary for steps before entering into a contract under Article 6(1)(b) GDPR; for other messages, our legitimate interest in communication applies under Article 6(1)(f). We use Google services to transmit and store email. Sender and recipient addresses, message contents and technical metadata are processed; processing outside the EEA, including in the USA, is possible.
Enquiry data is deleted when the enquiry is resolved and further retention is no longer required for the business relationship, legal obligations or specific legal claims. Statutory retention periods apply to tax-relevant business records, generally seven years in Austria. Providing information is voluntary; without sufficient contact and project details, we may be unable to respond.
Google as email provider
The applicable contractual and transfer terms depend on the Google product used. For Google Workspace customers in Austria, the contracting entity is generally Google Cloud EMEA Limited, Ireland. The exact account type and applicable data protection and transfer agreements are currently being clarified.
4. Contact form with Tally
Our contact form is provided by Tally BV, Belgium, as a processor. If you allow Tally in the cookie banner or at the form, it loads automatically on the contact page. You can withdraw consent at any time under “Cookie settings”; this removes the embedded form. Alternatively, you can open the direct Tally link. Tally then receives technical connection data, including your IP address and browser information. We do not embed a Tally script that forwards our website address or query parameters to the form.
On submission, your name, club or company, email address, requested service and message are sent to Tally. Telephone number, timing, budget and how you found us are optional. We receive and handle your enquiry in the Tally dashboard. Tally states that form data is stored in Belgium. This does not mean all technical processing takes place exclusively in the EU: Tally also uses international providers, including Cloudflare for DNS and abuse protection. Tally describes transfer safeguards, including standard contractual clauses, in its data processing agreement.
Automatic email notifications to us and respondents are disabled, so form data is not sent through Tally’s optional SendGrid notification service. File uploads, payments, additional analytics and marketing integrations, and storage of unsubmitted answers are not enabled. Tally provides its own aggregate form statistics, which it describes as using no analytics cookies or cross-device tracking. Necessary security processing remains possible. A subsequent personal reply by email uses the Google services described in section 3.
The purpose is to handle your enquiry. The legal basis for pre-contractual project enquiries is Article 6(1)(b) GDPR; for other enquiries it is Article 6(1)(f), based on our legitimate interest in responding. The optional Tally embed relies on your consent under Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 165(3) TKG 2021. Necessary abuse prevention relies on Article 6(1)(f). Providing information is voluntary; required fields are needed to identify and answer your enquiry. The form does not subscribe you to a newsletter.
Enquiries are manually deleted after they are resolved and are no longer needed for the business relationship, legal obligations or specific legal claims. The retention information in section 3 also applies. Automatic deletion is not enabled in Tally. According to Tally, deleted entries remain recoverable in Trash for up to 90 days before permanent removal.
Tally: Privacy and subprocessors · Tally: Data processing agreement
5. Vimeo: videos with your consent
Videos from Vimeo.com, Inc., USA, load only after your explicit consent. Until then, the website shows locally stored still images. Once enabled, Vimeo receives information including your IP address, browser and device details, and video requests. Vimeo may use cookies or similar technologies. We use the player’s “Do Not Track” parameter; this does not prevent all data transfers or technically necessary player cookies.
The legal basis is your consent under Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 165(3) of the Austrian Telecommunications Act 2021. A one-time approval at the video applies only to that viewing and is not stored. We store your choice only when you explicitly select lasting approval. You can withdraw it at any time through “Cookie settings” in the footer and “Reject”. This removes embedded players. Withdrawal does not affect earlier lawful processing or automatically erase data already held by Vimeo.
Data may be transferred to the USA. Vimeo describes its international transfer mechanisms, including standard contractual clauses, in its privacy information. Details of recipients, retention and the applicable transfer safeguards are available from Vimeo: Vimeo Privacy Policy · Vimeo Player Cookies.
6. Stored privacy choice
To respect your decision, we store only your separate Vimeo and Tally choices, decision time, notice version and an expiry date for up to 180 days in browser local storage under “rf-privacy-consent-v4”. No unique visitor identifier is created. This storage is necessary to implement your privacy choice (Section 165(3) TKG 2021; Article 6(1)(f) GDPR). We ask again after expiry or a material notice change. This local record is not sent to our own analytics or logging server. You can change your choice in the footer or clear browser storage.
Cookies in detail
After videos are enabled, Vimeo may set additional cookies or receive existing Vimeo cookies. The cookies present in a particular browser depend on existing Vimeo sessions and security checks, among other factors. The current provider information describes possible player cookies; it is not a measurement of cookies actually set on this website.
7. Fonts, Instagram and analytics
Font files, images and Instagram cover images are served with the website. Our page code includes no Google Fonts requests, Instagram players, advertising pixels or analytics tools. Instagram cards are an editorial selection, not an automatically updated feed. An external platform is contacted when you follow its link; its privacy terms then apply.
8. Your rights
Subject to legal conditions, you have rights of access, rectification, erasure, restriction and data portability. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. You can withdraw consent at any time for the future. Please use the contact details above. We do not perform automated decision-making, including profiling, on this website.
You may lodge a complaint with a supervisory authority, including the Austrian Data Protection Authority.