Privacy
Privacy policy
This website is deliberately built to collect as little as possible: no cookies, no tracking, no external fonts, scripts, maps or video platforms. What is actually processed is described here – checked against the finished build of the site. This is a translation for information; the German version is authoritative.
Controller
The controller for data processing on this website is:
Manuel Wechner – Berth brandMitteregg 56622 BerwangAustriaEmail: office@berthsoftware.com
No data protection officer has been appointed. The conditions of Art. 37 GDPR are not met: this is a sole proprietorship without large-scale processing of special categories of data and without systematic monitoring.
Hosting and server log files
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA, and delivered through their global content delivery network.
Data processed: when the website is requested, Netlify automatically processes in its server logs the data your browser transmits: IP address, date and time of access, the URL requested, the previously visited page (referrer) and details of your browser and operating system.
Purpose: technical delivery of the website as well as its security and stability, in particular protection against attacks and overload.
Legal basis: Art. 6(1)(f) GDPR. The legitimate interest lies in the secure and performant operation of the website.
Retention: Netlify does not publicly state a fixed retention period for these log data. They are not analyzed for statistical or advertising purposes, neither by the controller nor on the controller’s behalf.
Processing on our behalf: Netlify processes these data as a processor. The basis is the Data Processing Agreement that forms part of the Netlify terms and conditions.
Transfer to the USA: Netlify, Inc. declares compliance with the EU-U.S. Data Privacy Framework; for certified organizations an adequacy decision of the European Commission applies (Implementing Decision (EU) 2023/1795). In addition, the EU standard contractual clauses under Implementing Decision (EU) 2021/914 apply. Because delivery runs through a global network, processing outside the European Union cannot be ruled out.
Contact form
A form is available on the contact page. It transmits the details you enter there: name, email address and your message.
Purpose: handling and answering your enquiry.
Legal basis: Art. 6(1)(b) GDPR where your enquiry is directed at concluding or performing a contract (pre-contractual measures), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The confirmation in the form acknowledges this policy; it is not a consent under Art. 6(1)(a) GDPR.
Processing by Netlify: the form is handled through the “Netlify Forms” service of Netlify, Inc. Submissions are stored there and can be retrieved by the controller. The statements in section 02 apply to the transfer to the USA.
Spam filtering by Akismet: Netlify checks every submission with the Akismet spam filter of Automattic Inc. (USA). The content of the submission and technical metadata are transmitted to Akismet in the process. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in protecting the form against automated abuse. Akismet states retention periods of between two weeks and ninety days for the majority of its spam-related data.
No reCAPTCHA: no captcha service is used. The only additional protection is a hidden form field (“honeypot”), which sends no data to third parties.
Retention: submissions are deleted once your enquiry has been dealt with. Where the exchange counts as business correspondence, the statutory retention period of seven years under § 132 of the Austrian Federal Fiscal Code (BAO) applies. Netlify does not delete submissions automatically; deletion is carried out by the controller.
Contact by email
If you write directly from your own email program instead of using the form, the details you transmit – usually your name, email address and the content of your message – are processed solely to handle and answer your enquiry.
Legal basis and retention correspond to the statements in section 03.
Cookies and local storage
This website sets no cookies. It also writes no entries to your browser’s local storage or session storage.
There is no tracking. No analytics, statistics or advertising tools are embedded, and no profiles are created.
Because no consent is required, this website has no cookie banner. That is not an oversight; it follows from how the site is built.
Fonts, images and embedded content
All fonts and images are stored on this website’s own server and delivered from there. There is no connection to Google Fonts or to any other third-party font, script or media server.
No external scripts, maps, video platforms, social media plugins or other third-party content are embedded. Requesting these pages therefore establishes no connection to any provider other than the host named above.
External links
This website links to a small number of external pages, such as the Austrian legal information system and the Austrian Data Protection Authority. These links are plain references: no content, scripts or tracking pixels of those providers are embedded in these pages.
You leave this website only when you click such a link. From that point on, the privacy policy of the respective provider applies.
Your rights
You have the following rights towards the controller:
- Access to the data processed about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on a legitimate interest (Art. 21 GDPR)
- Withdrawal of a consent given, with effect for the future (Art. 7(3) GDPR)
An informal email to office@berthsoftware.com is sufficient for all of these.
If you believe that the processing of your data infringes data protection law, you can lodge a complaint with the supervisory authority:
Austrian Data Protection AuthorityBarichgasse 40–421030 Viennadsb@dsb.gv.atAutomated decisions and security
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. Your data is not evaluated to assess personal aspects.
The website is delivered exclusively over a TLS-encrypted connection (recognizable by “https://” in the address bar). In addition, security directives are set that prevent third-party content from being loaded and prevent these pages from being embedded in other websites.
Status of this policy
Last updated: 24 September 2026. This privacy policy describes the actual technical state of this website. If the technology or the legal situation changes, it will be updated. The version published here is the one that applies.