LEGAL INFORMATION
Privacy.
What data we process. And why.
Controller
Werbeagentur Stöger
Riedenburgstraße 3
3580 Horn, Austria
office@werbeagentur-stöger.com
+43 699 17284225
Christoph Stöger is a sole proprietor. Please use the contact details above for privacy questions and requests concerning your rights.
Providing this website
The website is hosted by Vercel Inc., USA. Visits involve processing technical connection data such as your IP address, requested address, time, browser information and HTTP status. This supports delivery, troubleshooting and protection against attacks. Technical service providers may access the data necessary for maintaining the website.
The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a functioning, secure website. Our application code does not log form contents. Hosting provider logs are separate. Their retention depends on the time needed for delivery, troubleshooting, security and any statutory obligations of the provider. They are deleted or anonymised when no longer needed for those purposes.
Vercel also processes data in the United States and potentially at other locations of its subprocessors. Its published data processing terms include EU Standard Contractual Clauses for relevant international transfers. Further information: Vercel privacy notice · Vercel data processing terms.
Contact and referral information
When you contact us by email or phone, we process your contact details and enquiry to respond to you. The contact form requires your name, email address and selected services. Your company and how you heard about us are optional. The form cannot be submitted without the required information; you can also contact us by email or phone.
Enquiries about our services are processed to take pre-contractual steps under Article 6(1)(b) GDPR. Other enquiries are handled on the basis of our legitimate interest in communication under Article 6(1)(f) GDPR.
The optional referral information — Friends and acquaintances, Internet search, Social media or ChatGPT — helps us understand how people discover us. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in evaluating our contact channels. This information does not affect how we handle your enquiry. You select it yourself; we do not obtain it through tracking. Contacting us does not subscribe you to a newsletter.
Email providers
Emails sent directly to our published address and messages from the contact form are received and stored through Google Workspace (Gmail). For the European Economic Area, the provider is Google Cloud EMEA Limited, Ireland. Processing may also take place outside the EEA, particularly in the United States. Google’s data processing terms provide safeguards including EU Standard Contractual Clauses: Google data processing terms.
Form messages are sent through Resend (Plus Five Five, Inc., USA). When you submit the form, your details are passed to Resend for delivery to our Google Workspace inbox. Your email address is set as the reply address so we can respond directly to you. Open and click tracking are disabled for the sending domain.
Resend describes 30-day retention of email and log data on standard plans and processing in the United States. Its published data processing terms include EU Standard Contractual Clauses. Further information about processing, safeguards and retention: Resend data processing terms · Resend security and retention.
Retention
The website does not maintain its own enquiry database. We need correspondence in our mailbox for as long as necessary to handle the enquiry and any follow-up questions. If an enquiry leads to an engagement, further retention depends on performance of the contract, statutory obligations and the need to establish or defend legal claims. Data must be deleted once these purposes and obligations no longer apply.
Optional referral information forms part of the enquiry and follows the same deletion criteria. These criteria are separate from providers’ technical retention periods.
Abuse prevention
The server limits the number of requests. To do this, it temporarily processes the IP address and request count in memory, using a 15-minute window. Expired entries are removed during subsequent requests or disappear when the server instance ends. The counter does not store form contents. A random submission identifier helps prevent accidental duplicate messages.
The legal basis is Article 6(1)(f) GDPR: our legitimate interest in preventing spam and overload.
Website usage statistics
We use Vercel Web Analytics, provided by Vercel Inc., USA, to measure website usage and improve our services. It records page views, timestamps, referring websites, approximate regions, browsers, operating systems and device types. Vercel uses no tracking cookies; a visitor identifier derived from connection data is discarded within 24 hours. Reports are aggregated and do not create cross-website user profiles.
Our integration removes URL query parameters and fragments before sending data. Names, email addresses and form contents are not sent to Analytics. We honour enabled Do Not Track and Global Privacy Control browser signals and do not load analytics in that case.
The legal basis is Article 6(1)(f) GDPR: our legitimate interest in data-minimising audience measurement. You can object using the contact details above or the browser settings mentioned. The information about Vercel and international transfers in the hosting section also applies here. Details: Vercel Web Analytics privacy information.
Cookies and browser storage
Our application code does not set cookies, use local storage or session storage, or embed advertising trackers. Statistical measurement with Vercel Web Analytics is explained in the usage statistics section. The language is determined by the address you visit. Page transitions use navigation information provided by the browser without storing an identifier.
Your browser may cache website files to load them faster. While you complete the form, your entries remain in the open document and are sent to the server only when you submit it. Browser features such as autofill are controlled by your browser settings.
Media, fonts and external links
Images, videos, fonts and 3D libraries are delivered through this website. No Instagram players, Google Fonts requests or advertising pixels are embedded. Links to Instagram, project websites or other providers connect to the linked website only when clicked. That provider’s privacy information then applies.
Your rights
Subject to the legal requirements, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Any consent you give may be withdrawn at any time with future effect.
Please contact office@werbeagentur-stöger.com. You may also complain to the Austrian Data Protection Authority. We do not make automated decisions with legal or similarly significant effects, or carry out related profiling.
Updated: 9 November 2026