Privacy.
This privacy notice applies to rolandpuck.com. Where this notice refers to “this website”, it means rolandpuck.com. This website contains no analytics or marketing scripts and loads its fonts from my own hosting server via puck.page, a domain I also operate. To provide the website, webhoster.de and the Cloudflare service in front of it are used. Information about technical data processing and possible security cookies is provided below.
Fonts via puck.page
To display the licensed typefaces, your browser loads font files via my puck.page domain. This technically requires connection data, in particular your IP address, to be transmitted to its hosting infrastructure. No external font provider such as Google Fonts is used. The fonts are provided to ensure consistent and legible display on the basis of Article 6(1)(f) GDPR.
Controller
Roland A. Puck, Kohlmarkt 16, 1010 Vienna, Austria.
[email protected]
Hosting
This website is hosted by webhoster.de AG, Zum Haunert 22, 59519 Möhnesee, Germany. The provision of the website involves processing technically necessary connection and access data. This processing is for the secure and reliable delivery of this website. The legal basis is Article 6(1)(f) GDPR (legitimate interest in the secure operation of the website). You can find further information about the provider in the webhoster.de legal notice.
Cloudflare as a security and CDN service
We also use Cloudflare, Inc., 701 Townsend St., San Francisco, CA 94107, USA, as a proxy, content delivery network (CDN) and security service. Website visits are routed through the Cloudflare network to the hosting server or served from a cache. In particular, IP addresses and technical request information are processed. This service is used to prevent attacks and to provide the website securely and quickly. The legal basis is Article 6(1)(f) GDPR. The website is not hosted on Cloudflare Pages.
When Cloudflare is used, personal data may also be processed outside the European Economic Area. Cloudflare provides EU standard contractual clauses to safeguard such transfers as part of its data processing agreement. You can find further information about technical processing in the Cloudflare documentation on proxy operation.
Cookies and technical security features
The website itself does not set analytics or marketing cookies. Depending on the Cloudflare security features in use, technical cookies may be set to detect automated access and store the successful completion of security checks. Cloudflare explains these features and the associated cookies in its cookie documentation.
Server log files
When you visit this website, access data is processed for technical reasons: IP address, time of request, address accessed, amount of data transferred, browser and operating system identifiers. This data is used solely to deliver the page and prevent attacks, and is not combined with other data. Legal basis: Article 6(1)(f) GDPR.
Audience measurement
I do not use analytics or marketing scripts on this website.
Contact
If you email me, your address and the contents of your message will be processed solely to deal with your enquiry and then stored or deleted in accordance with statutory retention requirements. Legal basis: Article 6(1)(b) GDPR.
Contact via WhatsApp
You can also reach me via WhatsApp on puck.house. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, a company in the Meta group. If you message me via WhatsApp, WhatsApp and I process your telephone number, profile name and the contents of your messages. WhatsApp also processes metadata under its own terms; this may involve a transfer to the USA. I use your details only to deal with your enquiry. Using WhatsApp is optional. If you do not want to use WhatsApp, simply email me at [email protected]. Legal basis: Article 6(1)(b) GDPR (enquiry about a contract) or Article 6(1)(f) GDPR (legitimate interest in making communication easy). Find out more in the WhatsApp Privacy Policy.
Payments via Stripe
I process payments for coffee money on puck.house and other online payments through Stripe. The contracting party in the European Economic Area is Stripe Payments Europe, Limited, One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland. To pay, you will be redirected to a Stripe payment page. You enter your card details directly with Stripe; I cannot see them. I receive the amount, time, payment method and the details you enter there, such as your name and email address. Stripe processes the data on my behalf to handle the payment and also under its own responsibility, for example to prevent fraud and meet statutory obligations. This may involve a transfer to the USA. Legal basis: Article 6(1)(b) GDPR (processing the payment) and Article 6(1)(c) GDPR (tax record-keeping). Find out more in the Privacy Policy and in the Stripe Privacy Centre.
Customers and guests at puck.house
If you book a package, visit puck.house as a guest or reserve a house session, I process the data needed for this: name, contact details, company, billing address and VAT ID number, booked package, dates and reservations, as well as payments and invoices. The purposes are to establish and fulfil our contract, organise the house and keep accounts. Legal basis: Article 6(1)(b) GDPR (contract) and Article 6(1)(c) GDPR (legal obligations). I keep invoices and accounting records for seven years under section 132 of the Austrian Federal Fiscal Code (BAO). I delete all other data as soon as it is no longer needed for our work together, and no later than three years after our last contact, unless a retention obligation applies. Data is shared only when necessary, for example with my tax adviser, Stripe or the authorities when required by law.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object (Articles 15–21 GDPR). A request to [email protected] is sufficient.
Right to complain
You can complain to the Austrian Data Protection Authority: dsb.gv.at, Barichgasse 40–42, 1030 Vienna.