← Back to home Deutsch

Privacy Policy

As of 29 September 2026. This policy deliberately describes only what this website actually does. This translation is provided for convenience; the German version is legally binding.

1. Controller

Name: Filip Mladenović
Address: Nöbauerstraße 48, Tür 13
4040 Gramastetten, Austria
Email: [email protected]

Full details in the imprint.

2. What this website does not do

It sets no cookies for visitors.
It loads no fonts from third-party servers. All fonts are hosted on this server, so no IP address is sent to Google.
It uses no Google Analytics and no advertising networks.
It embeds no social media plugins.
It creates no profiles and does not track anyone across pages.

That is why there is no cookie banner here: there is nothing to consent to.

3. Visiting the website (hosting)

This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA).

When you open a page, your browser transmits technically necessary data, including your IP address, so that the page can be delivered at all. Cloudflare processes this data as a processor for operating the site and defending it against attacks.

Legal basis: Art. 6 (1) (f) GDPR, legitimate interest in secure operation
Transfer to third countries: Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition.

4. Visit counter

I count how often the site is visited. This works without cookies and without storing IP addresses. For each visit, only three heavily coarsened details are added to daily counters:

Country — only the two-letter country code that Cloudflare derives from the request. The IP address itself is neither read nor stored.
Source — the referring page, reduced to a rough name (for example “Direct” or “google.com”).
Device type — only “mobile”, “tablet” or “desktop”.

No individual records per visitor are stored, no IP addresses and no full browser identifiers. No individual person can be identified from the stored numbers.

Purpose: to see whether, and from where, the site is visited
Legal basis: Art. 6 (1) (f) GDPR, legitimate interest in simple audience measurement
Processor: Supabase (database for the daily counters)

5. Protected area /stats

The evaluation of the daily counters is password-protected and intended for me only. A technically necessary login cookie is set there. This only concerns me as the operator, not the visitors of this website.

6. Contact by email

This website has no contact form. If you write to me, I process your email address and the content of your message in order to reply.

Legal basis: Art. 6 (1) (b) GDPR where the message concerns preparing or carrying out a contract. For all other enquiries Art. 6 (1) (f) GDPR, legitimate interest in answering them.
Storage period: as long as needed to handle the enquiry, then within statutory retention periods

Email runs through Google Mail, so Google also processes your message on its way to me. If you don't want that, you can reach me any other way, for example by phone after arranging a call.

7. Client projects and live preview

On the home page I show websites I have built. Most of them appear as a preview image, stored as an image file on this server. No data goes to the providers of those sites unless you click “Visit”.

Some projects are also shown as a live preview: once the “Client Work” section scrolls into view and the project is in front, your browser loads the real website, scaled down, in an embedded frame (iframe), directly from its server. The operator of that server receives technically necessary data, in particular your IP address. I only use a live preview for sites that load no content from third parties (such as fonts from Google) and set no cookies.

Currently embedded live: lsb-lebensbusiness.at; that site's own privacy policy applies to it
Legal basis: Art. 6 (1) (f) GDPR, legitimate interest in showing my work as it actually is

8. Your rights

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). A message to the email address above is enough.

If you believe that your data is not being processed lawfully, you can lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at.