Privacy Policy

Data Controller

Tabelle1 e.U.
Taborstraße 123/52
1020 Vienna, Austria
hello@tabelle1.at

Contact Requests

When you use the contact form, I process your name, email address, message, optional call preferences, and the time of your request so I can answer you and discuss a possible engagement.

The legal basis is Article 6(1)(b) GDPR for steps requested before entering a contract and Article 6(1)(f) GDPR for responding to other business enquiries. My legitimate interest is clear and secure business communication.

Contact requests are deleted when they are no longer needed for the enquiry. Data may be retained longer where required by statutory record-keeping duties or to establish, exercise, or defend legal claims.

Website Operation and Abuse Prevention

The hosting provider may process technical log data such as IP address, timestamp, requested page, referrer, browser, and operating system to deliver and secure the website.

To prevent contact-form and CV-code abuse, the application temporarily stores one-way hashes derived from IP addresses and, for contact requests, email addresses. These rate-limit records expire after no more than 24 hours.

This processing is based on Article 6(1)(f) GDPR. The legitimate interest is maintaining the availability and security of the website.

Service Providers

Microsoft Azure is used for website hosting and email delivery through Azure Communication Services. Microsoft acts as a processor where it handles personal data on my behalf. Data transfers outside the EEA, if any, are protected by the safeguards required under GDPR.

Cookies and External Content

This website uses only technically necessary cookies: a CSRF security cookie for forms and, after successful CV access, a signed access cookie that expires after 12 hours. These cookies do not require consent.

There are no analytics, advertising, or social-media tracking tools. Fonts and syntax-highlighting assets are hosted locally, so visiting a page does not contact Google Fonts or a public CDN. Because no optional cookies are used, no consent banner is shown.

Some blog posts embed interactive Power BI reports from app.powerbi.com and load images from Azure Blob Storage. When such a page is opened, your browser contacts Microsoft servers, which process your IP address to deliver the content. Both services are operated by Microsoft, the hosting provider named above; no additional cookies are set by these embeds.

Your GDPR Rights

Depending on the circumstances, you may request access, rectification, erasure, restriction, or portability of your data, and you may object to processing based on legitimate interests. You may also withdraw consent for future processing where consent applies.

To exercise your rights, email hello@tabelle1.at. You also have the right to lodge a complaint with the Austrian Data Protection Authority. dsb.gv.at

Policy Updates

This notice may be updated when the website, providers, or legal requirements change.

Last Updated: July 27, 2026