Privacy policy
This page explains which personal data this website processes, why, and what rights you have. Last updated: 18 October 2026.
Who is responsible
Vivian Sailer, 6500 Landeck, Austria. Email: hello@viviansailer.com
In short
This website uses no analytics, no advertising and no tracking cookies. Personal data is processed only to deliver the website, to protect the contact form from spam, and to answer your message.
Hosting and server logs
The website is hosted by Vercel Inc., USA. When you visit a page, Vercel processes technical data such as your IP address, the page requested, the time, and your browser and operating system, to deliver the page and keep it secure. Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Logs are kept only briefly by Vercel.
Contact form
When you send the contact form, your name, email address and message are stored so I can reply. They are stored in a database hosted by Neon in the AWS Europe Central region (Frankfurt, Germany). Legal basis: steps at your request before a possible contract (Art. 6(1)(b) GDPR) and my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). I delete messages when the conversation is finished, at the latest after 12 months, unless they lead to a contract and legal retention periods apply.
Spam protection (Cloudflare Turnstile)
The contact form is protected by Cloudflare Turnstile, a service of Cloudflare, Inc., USA. Turnstile checks whether a real person is sending the form. For this, it processes data such as your IP address and information about your browser and device. It does not set cookies for tracking. Legal basis: legitimate interest in protecting the form from abuse (Art. 6(1)(f) GDPR).
Fonts
The fonts (IBM Plex) are served from this website itself. Your browser does not contact Google or any other font provider.
Theme choice
If you switch between light and dark, your choice is saved in your browser's local storage so the site remembers it. It is not sent to me or anyone else. This is necessary for the function you asked for (§ 165(3) TKG 2021).
Transfers outside the EU
Vercel and Cloudflare are companies based in the USA. Where personal data is transferred to the USA, this is based on the EU-US Data Privacy Framework or on standard contractual clauses of the European Commission.
Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or restricted (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). To use these rights, email hello@viviansailer.com.
You can also complain to the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.