Marcel SchreiberAutomation and agents for small businesses

Privacy policy

This explains which data I process when you visit this site or write to me through the form. In short: no cookies, no cross-site tracking, and your enquiry only ends up as an email in my inbox.

1. Who is responsible?

Marcel Schreiber Leystraße 104/6/5, 1200 Wien Austria Email: contact@viewingperspective.at

There is no data protection officer, as none is required under Art 37 GDPR.

2. Overview

  • You can browse the site without entering any data. Only technical server data arises then (section 4).
  • There are no cookies and no local storage (section 5).
  • If you send the form, I receive your details by email (section 6).
  • For this I use service providers in the USA: Cloudflare and Resend (sections 7 to 10).
  • You have rights of access, rectification, erasure and more (section 12).
  • Art 6(1)(b) GDPR: processing that is necessary to answer your enquiry or to prepare a contract with you.
  • Art 6(1)(f) GDPR: my legitimate interest in a secure, stable site and in finding out how people reach me.

4. Hosting and server logs (Cloudflare)

The site runs on Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open the site, Cloudflare processes technically necessary connection data so that the site can be delivered and protected against abuse: IP address, date and time, requested address, browser and operating system (user agent), amount of data transferred and status code.

  • Purpose: delivering the site, stability, protection against attacks.
  • Legal basis: Art 6(1)(f) GDPR. Without this data the site could not be displayed.
  • Retention: The logs are held by Cloudflare and follow its retention periods. I do not store server logs myself and can only access them through the Cloudflare account.
  • Data processing agreement: A data processing agreement is in place with Cloudflare (Customer DPA).

5. No cookies

This site sets no cookies and uses no local storage or session storage in your browser. That is why there is no cookie banner. The consent requirement for access to your device under § 165(3) TKG 2021 therefore does not apply.

6. Enquiry form

When you send the form, I process these details:

  • Name (required)
  • Email address (required)
  • Business and industry (required)
  • “What costs you time today?” (required)
  • Current tools (required)
  • Budget range (optional)
  • “How did you find me?” (optional)

Purpose: I answer your enquiry and, if you want, prepare an offer.

Legal basis:

  • Required fields and optional budget range: Art 6(1)(b) GDPR (steps prior to entering into a contract at your request).
  • “How did you find me?”: Art 6(1)(f) GDPR. My interest is to learn which channels work. You can leave the field empty.

What does not happen: The enquiry is not saved in a database on the site. It exists only as an email in my inbox (contact@viewingperspective.at, provider: easyname GmbH, Vienna) and at the mail delivery service that sends it there (section 8).

Retention:

  • If no contract results, I delete your enquiry and the related email exchange 12 months after the last message.
  • If a contract results, I keep the documents for as long as the law requires (currently up to seven years for tax-relevant documents, § 132 BAO).

Provision of data: You do not have to provide any data. Without the required fields I cannot answer your enquiry, so the form cannot be sent without them. If you do not want to write to me, simply ignore the form.

7. Spam protection (Cloudflare Turnstile)

The form is protected by Cloudflare Turnstile. Turnstile checks in the background whether a request comes from a human and replaces puzzle images. For this, Cloudflare processes technical data of your browser and your IP address when you submit, in order to detect bots.

  • Purpose: protecting the form against spam and abuse.
  • Legal basis: Art 6(1)(f) GDPR.
  • Provider and contract: Cloudflare, Inc. (see section 4), Customer DPA.
  • Cookies: I set no cookies for this.

8. Email delivery (Resend)

To get the form to me, a service sends the email to my inbox. That is Resend, a provider based in the USA. Resend processes the content of the form (all fields you fill in) and delivery metadata.

  • Purpose: delivering your enquiry to me.
  • Legal basis: Art 6(1)(b) GDPR.
  • Contract: data processing agreement (Resend DPA).
  • Resend’s further service providers (sub-processors) are based in the USA, among them Amazon Web Services (AWS), Google, Cloudflare, Vercel and Anthropic. The current list is at resend.com/legal/subprocessors. Even if an EU region is selected for sending at Resend, the data stays in the USA according to Resend.
  • Retention: According to Resend, delivery logs are kept for up to 30 days (free plan).

9. Audience measurement (Cloudflare Web Analytics)

I use Cloudflare Web Analytics to measure how often pages are viewed and roughly where visits come from (for example country and device type). According to Cloudflare, Web Analytics sets no cookies and does no fingerprinting. The evaluation is aggregated, I do not see individual people.

  • Purpose: understanding which pages are read and improving the site.
  • Legal basis: Art 6(1)(f) GDPR (legitimate interest in simple, data-minimising audience measurement).
  • Provider and contract: Cloudflare, Inc. (see section 4), Customer DPA.
  • Objection: You can object to the measurement at any time (section 12), for example by email to contact@viewingperspective.at. I then remove your data from the evaluation, as far as it can be attributed in an aggregated measurement. You can also prevent the measurement with the Do Not Track signal or a content blocker.

10. Recipients and transfer to the USA

Your data goes only to the service providers named above, and only for the respective purpose:

  • Cloudflare, Inc. (hosting, server logs, spam protection)
  • Cloudflare, Inc. additionally for audience measurement (section 9)
  • Resend and its sub-processors (email delivery)
  • easyname GmbH, Vienna (mailbox)

I do not sell data and do not pass it on for advertising.

Cloudflare and Resend are based in the USA. With the EU-US Data Privacy Framework (DPF) the European Commission has adopted an adequacy decision for certified US companies. According to their contracts, both providers rely on it: Cloudflare names the DPF and, as a fallback, EU Standard Contractual Clauses; Resend names a DPF certification. You can check whether a company is currently certified at www.dataprivacyframework.gov/list. The legal basis for the transfer is Art 45 GDPR (adequacy decision) and, where the DPF does not apply, Art 46 GDPR (standard contractual clauses). You can get a copy of the safeguards on request.

More on the providers: Cloudflare sub-processors, Resend sub-processors.

11. Retention at a glance

  • Server logs at Cloudflare: according to Cloudflare’s retention periods (section 4).
  • Spam protection: only for the duration of the check when you submit.
  • Email delivery at Resend: up to 30 days (section 8).
  • Your enquiry in my inbox: 12 months after the last message if no contract results; otherwise according to statutory retention periods.
  • Audience measurement: aggregated values only, according to Cloudflare’s retention periods.

12. Your rights

Under the GDPR you have these rights:

  • Access to your data (Art 15)
  • Rectification of incorrect data (Art 16)
  • Erasure (Art 17)
  • Restriction of processing (Art 18)
  • Data portability (Art 20)
  • Objection to processing based on legitimate interest (Art 21). This concerns hosting, spam protection and the field “How did you find me?”. This also concerns audience measurement.

No processing is based on consent, so there is nothing to withdraw.

Write to contact@viewingperspective.at for this. I reply within one month (Art 12(3) GDPR).

13. Complaint

If you think I violate data protection law, you can complain to the supervisory authority (Art 77 GDPR, § 24 DSG):

Österreichische Datenschutzbehörde (Austrian Data Protection Authority) Barichgasse 40-42 1030 Vienna, Austria Email: dsb@dsb.gv.at www.dsb.gv.at

You may also complain to the supervisory authority of your country of residence. I would be glad if you wrote to me first, many things can be settled directly.

14. No obligation, no automated decision

You are not obliged to give me data. Without the required details I cannot process your enquiry, however. There is no automated decision-making and no profiling under Art 22 GDPR.

This site links to other sites. These are plain links. Nothing from these providers is embedded on this site, and no data is transferred to them as long as you do not click. When you click, the privacy policy of the respective site applies. I am not responsible for their content or data processing.

16. Changes

If providers or processes change, I update this policy. The date is below.

Last updated: 2 Nov 2026