Privacy
This English version is provided for convenience. Only the German version is legally binding.
This notice explains which personal data is processed when you visit this website and what rights you have.
The controller responsible for the processing of personal data in connection with this website is:
Ing. Denise Stadtegger, MA
Sole proprietor – unregulated trade: advertising agency
Lindengasse 17F
8501 Lieboch, Austria
Email: office@denise-stadtegger.com
Phone: +43 664 812 6122
This privacy notice informs you about the processing of personal data when you visit denise-stadtegger.com and when you contact me.
When you access this website, technical connection data is processed. This includes in particular your IP address, the date and time of access, the requested internet address, technical browser and device information and, where applicable, the previously visited page if your browser transmits it.
The processing serves to deliver the website, to ensure its operation and to detect and prevent errors and abusive access. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the secure and reliable provision of my website.
The website is operated on a cloud server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany in the Nuremberg data centre. Hetzner processes the data required to provide the infrastructure as a processor. The website is no longer delivered via OpenAI or Cloudflare.
Visitor access logging is not enabled on the web server. Connection data is processed temporarily for technical delivery but is not stored by me as a regular access log. Application and container logs are rotated daily and seven rotations are retained; firewall and general system logs are rotated weekly and four rotations are retained. Central system and security logs are deleted after 30 days at the latest, regardless of storage usage. In the event of a specific security incident, only the data required for the investigation is retained until the investigation has been completed and, where applicable, beyond that for the establishment or defence of legal claims. Backups of the static website contain no visitor access data.
Domain registration and authoritative DNS management are provided by GoDaddy Operating Company, LLC, 100 S. Mill Ave, Suite 1600, Tempe, Arizona 85281, USA. During DNS resolution, the requested domain and technical DNS metadata are processed. GoDaddy regularly receives the IP address of the recursive DNS resolver used; depending on its configuration, a truncated client subnet may also be transmitted. Contents of the website accessed, specific page paths and analytics data are not transmitted via DNS. The processing is necessary for the domain to be reachable and is based on Art. 6(1)(f) GDPR. According to its own information, GoDaddy is certified under the EU-US Data Privacy Framework; insofar as its requirements are met, the transfer is based on the adequacy decision pursuant to Art. 45 GDPR. Further information can be found in the GoDaddy Data Privacy Framework Notice.
Without analytics enabled, the actual technical provision of the website takes place directly from the server in Germany. I do not use any service provider in a third country for content delivery. The DNS resolution via GoDaddy that precedes content transmission is separate from this and takes place as described above. If consent has been given, the transfers within the scope of Google Analytics described in section 5 are added.
If you contact me by email or phone, I process the data you provide, in particular names, contact details, information about your company and the content of your enquiry. The processing serves to answer your enquiry and, where applicable, to prepare or carry out a collaboration.
Insofar as your enquiry is aimed at concluding or performing a contract with you, the processing is based on Art. 6(1)(b) GDPR. I process general enquiries and communication with contact persons at companies on the basis of Art. 6(1)(f) GDPR. My legitimate interest lies in handling business enquiries and maintaining the communication required for this.
I use Microsoft 365 for the technical handling of email communication. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft may use affiliated companies and sub-processors. Insofar as access takes place from third countries, Microsoft bases transfers in particular on the standard contractual clauses of the European Commission pursuant to Art. 46 GDPR. Further information can be found in the Microsoft Data Protection Addendum.
I generally delete completed enquiries that do not lead to a contract twelve months after the enquiry has been completed, unless there are statutory retention obligations or specific reasons for further storage.
Documents subject to retention under tax law are generally retained for seven years from the end of the relevant calendar year. Longer retention may be required in the case of pending proceedings. The legal basis for this is Art. 6(1)(c) GDPR in conjunction with the relevant statutory retention obligations, in particular Section 132 of the Austrian Federal Fiscal Code (BAO).
Insofar as certain documents are required for the establishment or defence of specific legal claims, they are retained on the basis of Art. 6(1)(f) GDPR in accordance with the relevant limitation periods or until the proceedings have been concluded.
Contacting me is voluntary. Without the information required for processing, I may not be able to answer your enquiry or prepare a contract with you.
This website stores your decision on the use of Google Analytics in your browser’s local storage under the key desta_consent_v3. The selected setting (statistics accepted or rejected), the time of the choice and the version of the consent request are stored.
Your choice is respected for 183 days. On the next visit after this period has expired, the stored entry is removed and you are asked for your decision again. No time-controlled deletion takes place while the website is not being accessed. You can change your choice at any time before then or delete the website data in your browser. The entry is also replaced if a new version of the consent request is required.
Storing and reading your privacy choice is necessary to implement the setting you have chosen. This takes place under the exemption for strictly necessary access to terminal equipment pursuant to Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). Insofar as personal data is processed in this context, this is based on Art. 6(1)(c) GDPR in conjunction with the obligations to respect and document your consent decision.
If you select a language version, the website stores this setting under denise-site-lang in your browser’s local storage. This allows the chosen language to be taken into account on further visits. No automatic expiry period is currently set up. The entry remains stored until it is overwritten by a new language choice or deleted by you or your browser. This functional storage is necessary for the language selection you have requested and takes place pursuant to Section 165(3) TKG 2021; insofar as personal data is processed in this context, this is based on Art. 6(1)(f) GDPR. My legitimate interest lies in a user-friendly, consistently uniform language display.
There is no separate server-side record of these settings. The decisions remain exclusively in your browser’s local storage. You can change your privacy choice at any time via the “Privacy settings” function.
With your consent, I use Google Analytics 4 for the statistical analysis of the use of this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The measurement ID used is G-L1509L3LWQ.
The analysis helps me understand which content is used and how I can improve the website. In particular, page views, time and duration of use, interactions, referring pages, technical browser and device information, approximate location information and pseudonymous identifiers are processed.
Google Analytics uses cookies to recognise browsers or usage sessions and to analyse them statistically. The processing is not equivalent to completely anonymous use. According to Google, IP addresses of users from the EU are processed to derive approximate location information and are then deleted; they are not logged or stored in Google Analytics.
The processing is based on your consent pursuant to Art. 6(1)(a) GDPR. Storing and reading the analytics cookies is based on your consent pursuant to Section 165(3) TKG 2021. You are under no legal or contractual obligation to consent to the analysis. You can also use the website without Google Analytics.
Google Analytics is only loaded after you have given your consent. Without consent, no analytics requests are sent to Google. Google Signals, ad personalisation, User-ID and the additional data sharing for Google products and services are not used.
Google processes the analytics data on my behalf to provide the analytics service. Google Ireland Limited, Google LLC in the USA and the sub-processors used for this service may obtain access to the data.
Transfers to Google LLC, which is certified under the EU-US Data Privacy Framework, can be based on the European Commission’s adequacy decision pursuant to Art. 45 GDPR, insofar as the respective processing is covered by the certification. For transfers not covered by an adequacy decision, Google states that it uses the European Commission’s standard contractual clauses pursuant to Art. 46 GDPR. Google publishes information on the bases for transfers under Privacy frameworks for data transfers; the certification can be viewed in the Data Privacy Framework List .
A retention period of two months is set for event data and a retention period of 14 months for user data. The “Reset on new activity” function is enabled. With new activity, the retention period of the affected data at user level is set to 14 months again. This does not extend the two-month retention period for event data. These retention settings do not cover all aggregated standard reports.
The cookie duration is renewed on repeated use after consent has been given. Browsers may additionally limit the actual duration.
You can withdraw your consent at any time without giving reasons via “Privacy settings”. Select “Reject” there. The withdrawal applies to the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.
After withdrawal, further analytics transmissions are prevented, including on the page that is already open. The analytics cookies set by this website that are technically accessible are deleted; the page is reloaded once for this purpose. The withdrawal does not automatically delete data that has already been transmitted retroactively. Your statutory rights, in particular any right to erasure, remain unaffected.
Further information can be found in the Google privacy policy and under Privacy in Google Analytics.
This website contains a link to my LinkedIn profile. It is an ordinary external link. By clicking it, you leave this website and open LinkedIn. The privacy information of the provider there applies to processing on the target page. The same applies to the link to the agents4you website at agents4you.ai.
Subject to the statutory requirements, you have in particular the following rights:
To exercise your rights, you can reach me at office@denise-stadtegger.com.
Insofar as I process your data on the basis of Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation. I will then no longer process the data concerned unless there are demonstrable compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You can lodge a complaint with a data protection supervisory authority, in particular in the place of your habitual residence, your place of work or the place of the alleged infringement.
In Austria, this is the:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
Within the scope of the processing described here, I do not make any decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
Last updated: 25 October 2026
This English version is provided for convenience. Only the German version is legally binding.
This notice explains which personal data is processed when you visit this website and what rights you have.
The controller responsible for the processing of personal data in connection with this website is:
Ing. Denise Stadtegger, MA
Sole proprietor – unregulated trade: advertising agency
Lindengasse 17F
8501 Lieboch, Austria
Email: office@denise-stadtegger.com
Phone: +43 664 812 6122
This privacy notice informs you about the processing of personal data when you visit denise-stadtegger.com and when you contact me.
When you access this website, technical connection data is processed. This includes in particular your IP address, the date and time of access, the requested internet address, technical browser and device information and, where applicable, the previously visited page if your browser transmits it.
The processing serves to deliver the website, to ensure its operation and to detect and prevent errors and abusive access. The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the secure and reliable provision of my website.
The website is operated on a cloud server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany in the Nuremberg data centre. Hetzner processes the data required to provide the infrastructure as a processor. The website is no longer delivered via OpenAI or Cloudflare.
Visitor access logging is not enabled on the web server. Connection data is processed temporarily for technical delivery but is not stored by me as a regular access log. Application and container logs are rotated daily and seven rotations are retained; firewall and general system logs are rotated weekly and four rotations are retained. Central system and security logs are deleted after 30 days at the latest, regardless of storage usage. In the event of a specific security incident, only the data required for the investigation is retained until the investigation has been completed and, where applicable, beyond that for the establishment or defence of legal claims. Backups of the static website contain no visitor access data.
Domain registration and authoritative DNS management are provided by GoDaddy Operating Company, LLC, 100 S. Mill Ave, Suite 1600, Tempe, Arizona 85281, USA. During DNS resolution, the requested domain and technical DNS metadata are processed. GoDaddy regularly receives the IP address of the recursive DNS resolver used; depending on its configuration, a truncated client subnet may also be transmitted. Contents of the website accessed, specific page paths and analytics data are not transmitted via DNS. The processing is necessary for the domain to be reachable and is based on Art. 6(1)(f) GDPR. According to its own information, GoDaddy is certified under the EU-US Data Privacy Framework; insofar as its requirements are met, the transfer is based on the adequacy decision pursuant to Art. 45 GDPR. Further information can be found in the GoDaddy Data Privacy Framework Notice.
Without analytics enabled, the actual technical provision of the website takes place directly from the server in Germany. I do not use any service provider in a third country for content delivery. The DNS resolution via GoDaddy that precedes content transmission is separate from this and takes place as described above. If consent has been given, the transfers within the scope of Google Analytics described in section 5 are added.
If you contact me by email or phone, I process the data you provide, in particular names, contact details, information about your company and the content of your enquiry. The processing serves to answer your enquiry and, where applicable, to prepare or carry out a collaboration.
Insofar as your enquiry is aimed at concluding or performing a contract with you, the processing is based on Art. 6(1)(b) GDPR. I process general enquiries and communication with contact persons at companies on the basis of Art. 6(1)(f) GDPR. My legitimate interest lies in handling business enquiries and maintaining the communication required for this.
I use Microsoft 365 for the technical handling of email communication. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft may use affiliated companies and sub-processors. Insofar as access takes place from third countries, Microsoft bases transfers in particular on the standard contractual clauses of the European Commission pursuant to Art. 46 GDPR. Further information can be found in the Microsoft Data Protection Addendum.
I generally delete completed enquiries that do not lead to a contract twelve months after the enquiry has been completed, unless there are statutory retention obligations or specific reasons for further storage.
Documents subject to retention under tax law are generally retained for seven years from the end of the relevant calendar year. Longer retention may be required in the case of pending proceedings. The legal basis for this is Art. 6(1)(c) GDPR in conjunction with the relevant statutory retention obligations, in particular Section 132 of the Austrian Federal Fiscal Code (BAO).
Insofar as certain documents are required for the establishment or defence of specific legal claims, they are retained on the basis of Art. 6(1)(f) GDPR in accordance with the relevant limitation periods or until the proceedings have been concluded.
Contacting me is voluntary. Without the information required for processing, I may not be able to answer your enquiry or prepare a contract with you.
This website stores your decision on the use of Google Analytics in your browser’s local storage under the key desta_consent_v3. The selected setting (statistics accepted or rejected), the time of the choice and the version of the consent request are stored.
Your choice is respected for 183 days. On the next visit after this period has expired, the stored entry is removed and you are asked for your decision again. No time-controlled deletion takes place while the website is not being accessed. You can change your choice at any time before then or delete the website data in your browser. The entry is also replaced if a new version of the consent request is required.
Storing and reading your privacy choice is necessary to implement the setting you have chosen. This takes place under the exemption for strictly necessary access to terminal equipment pursuant to Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). Insofar as personal data is processed in this context, this is based on Art. 6(1)(c) GDPR in conjunction with the obligations to respect and document your consent decision.
If you select a language version, the website stores this setting under denise-site-lang in your browser’s local storage. This allows the chosen language to be taken into account on further visits. No automatic expiry period is currently set up. The entry remains stored until it is overwritten by a new language choice or deleted by you or your browser. This functional storage is necessary for the language selection you have requested and takes place pursuant to Section 165(3) TKG 2021; insofar as personal data is processed in this context, this is based on Art. 6(1)(f) GDPR. My legitimate interest lies in a user-friendly, consistently uniform language display.
There is no separate server-side record of these settings. The decisions remain exclusively in your browser’s local storage. You can change your privacy choice at any time via the “Privacy settings” function.
With your consent, I use Google Analytics 4 for the statistical analysis of the use of this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The measurement ID used is G-L1509L3LWQ.
The analysis helps me understand which content is used and how I can improve the website. In particular, page views, time and duration of use, interactions, referring pages, technical browser and device information, approximate location information and pseudonymous identifiers are processed.
Google Analytics uses cookies to recognise browsers or usage sessions and to analyse them statistically. The processing is not equivalent to completely anonymous use. According to Google, IP addresses of users from the EU are processed to derive approximate location information and are then deleted; they are not logged or stored in Google Analytics.
The processing is based on your consent pursuant to Art. 6(1)(a) GDPR. Storing and reading the analytics cookies is based on your consent pursuant to Section 165(3) TKG 2021. You are under no legal or contractual obligation to consent to the analysis. You can also use the website without Google Analytics.
Google Analytics is only loaded after you have given your consent. Without consent, no analytics requests are sent to Google. Google Signals, ad personalisation, User-ID and the additional data sharing for Google products and services are not used.
Google processes the analytics data on my behalf to provide the analytics service. Google Ireland Limited, Google LLC in the USA and the sub-processors used for this service may obtain access to the data.
Transfers to Google LLC, which is certified under the EU-US Data Privacy Framework, can be based on the European Commission’s adequacy decision pursuant to Art. 45 GDPR, insofar as the respective processing is covered by the certification. For transfers not covered by an adequacy decision, Google states that it uses the European Commission’s standard contractual clauses pursuant to Art. 46 GDPR. Google publishes information on the bases for transfers under Privacy frameworks for data transfers; the certification can be viewed in the Data Privacy Framework List .
A retention period of two months is set for event data and a retention period of 14 months for user data. The “Reset on new activity” function is enabled. With new activity, the retention period of the affected data at user level is set to 14 months again. This does not extend the two-month retention period for event data. These retention settings do not cover all aggregated standard reports.
_ga_ga_L1509L3LWQThe cookie duration is renewed on repeated use after consent has been given. Browsers may additionally limit the actual duration.
You can withdraw your consent at any time without giving reasons via “Privacy settings”. Select “Reject” there. The withdrawal applies to the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.
After withdrawal, further analytics transmissions are prevented, including on the page that is already open. The analytics cookies set by this website that are technically accessible are deleted; the page is reloaded once for this purpose. The withdrawal does not automatically delete data that has already been transmitted retroactively. Your statutory rights, in particular any right to erasure, remain unaffected.
Further information can be found in the Google privacy policy and under Privacy in Google Analytics.
This website contains a link to my LinkedIn profile. It is an ordinary external link. By clicking it, you leave this website and open LinkedIn. The privacy information of the provider there applies to processing on the target page. The same applies to the link to the agents4you website at agents4you.ai.
Subject to the statutory requirements, you have in particular the following rights:
To exercise your rights, you can reach me at office@denise-stadtegger.com.
Insofar as I process your data on the basis of Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation. I will then no longer process the data concerned unless there are demonstrable compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
You can lodge a complaint with a data protection supervisory authority, in particular in the place of your habitual residence, your place of work or the place of the alleged infringement.
In Austria, this is the:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
Within the scope of the processing described here, I do not make any decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.
Last updated: 25 October 2026