Privacy

1. Controller

Controller within the meaning of the GDPR is:

Sonja Lechner, sole proprietor (Einzelunternehmerin)
Wattenbachgasse 29, 6112 Wattens, Austria
Email: hallo@lechner-studios.at

2. What data is processed

When you visit this site, technically necessary access data is processed by our hosting provider (see processors). This typically includes:

• IP address (truncated / for operational security)
• date and time of the request
• requested URL / referring URL
• user agent (browser, operating system)

This site sets no cookies, performs no tracking and uses no analytics services.

3. Contact requests

If you contact us via the contact form or by email, we process the data you provide (name, email address, message body) for the purpose of handling your request. Legal basis is Art. 6(1)(b) GDPR (pre-contractual steps) and/or Art. 6(1)(a) GDPR (consent). Form submissions are forwarded by a Vercel Function to our email provider Zoho and stored as an email in our mailbox; no persistence in a database, CRM, or other system occurs. Retention: per mailbox archival; at latest after correspondence completion and applicable statutory retention periods. Consent may be withdrawn at any time — the lawfulness of processing carried out prior to withdrawal remains unaffected.

4. Legal bases (Art. 6 GDPR)

• Art. 6(1)(f) (legitimate interest) — technical provision of the website incl. server logs to ensure operation and IT security.
• Art. 6(1)(b) (contract / pre-contractual measures) — answering inbound requests sent by email.

5. Processors

The site is hosted by Vercel Inc. (Privacy Policy, DPA). Delivery is performed via Vercel's EU edge network; server logs for operational security are processed at Vercel. Standard Contractual Clauses and a Data Processing Agreement are in place with Vercel.

In addition, Zoho Corporation B.V. (Hoogoorddreef 15, 1101 BA Amsterdam, Netherlands) is used as an email provider (Zoho Mail); EU data center, DPA in place (privacy policy). No further processors are used on this site — in particular, no third-party analytics, tracking, advertising or embedded services.

6. Retention

• Server logs (Vercel):per the hosting provider's default retention; generally short-term for operational security.
• Email correspondence: until the purpose of the request is fulfilled, at most within statutory retention periods (e.g. § 132 BAO for business correspondence — up to 7 years).

7. Your rights (Art. 15–21 GDPR)

You have the right at any time to:

• access (Art. 15)
• rectification (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)

Requests can be sent to hallo@lechner-studios.at.

8. Right to lodge a complaint

You have the right to lodge a complaint with the Austrian supervisory authority:

Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Vienna
www.dsb.gv.at

9. Third-country transfer

Vercel is a US provider with EU edge delivery. Where a transfer to the US occurs, it is based on the EU Standard Contractual Clauses pursuant to Art. 46 GDPR. The email provider used by the operator may also process data when receiving inbound mail.

10. Last updated

June 2026. Updated whenever processing changes (e.g. if analytics or new processors are added).