Privacy notice

Gerald Strobl, Seitenstettengasse 5/37, 1010 Vienna, Austria. Email: ahoi@gstrobl.at.

No data protection officer is appointed; there is no obligation to appoint one under Art. 37 GDPR.

We process the URL you submit or the files and text you upload, the content extracted from them, and a salted hash of your IP address to prevent abuse. The IP address itself is not stored.

The legal basis is Art. 6(1)(b) GDPR for delivering the check you asked for and Art. 6(1)(f) GDPR for abuse prevention.

Extracted text and images are sent to Anthropic PBC for analysis. That content is not used to train models.

The privacy check loads the address you give it in a browser, as a first-time visitor would see it. It records the third parties contacted, the cookies and storage entries set, the legal documents linked, and a screenshot of the landing page.

For cookies and storage entries only the names are evaluated, never their values. The legal basis is Art. 6(1)(b) GDPR.

Results, screenshots and submitted content are held in EU object storage and deleted automatically after 30 days, so you can reopen and share a report within that window. A storage lifecycle rule expires anything remaining after 31 days.

Newsletter data is kept until you unsubscribe. Request data is kept for up to 24 months after the last correspondence.

The newsletter uses double opt-in. We store your email address, language, the time of confirmation and the source of the sign-up.

The legal basis is Art. 6(1)(a) GDPR. You can withdraw consent at any time using the unsubscribe link in every email.

When you send a request we process your details in order to answer it. The legal basis is Art. 6(1)(b) GDPR.

Only if you tick the box in the form are your details, and where applicable the related result, forwarded to a law firm. The recipients are lawyers established in the European Union specialising in IT, AI and data protection law; they are separate controllers and bound by professional confidentiality.

The legal basis for forwarding is Art. 6(1)(a) GDPR. You can withdraw that consent at any time with future effect. No fee is received for an introduction.

Website: Vercel Inc., USA. Application and database: Railway Corp., USA. Object storage: Amazon Web Services, Europe (Frankfurt) region, eu-central-1. Analysis of checked content: Anthropic PBC, USA. Email delivery: Resend, Inc., USA.

Processing agreements under Art. 28 GDPR are in place with all of them. Transfers to the USA rely on standard contractual clauses under Art. 46(2)(c) GDPR or on certification under the EU-US Data Privacy Framework.

Fonts are served locally; no connection is made to an external font provider.

This site sets no cookies and embeds no third-party analytics, advertising or tracking services. There is no consent banner because there is nothing to consent to.

Technically necessary preferences such as your language or colour scheme are stored locally in your browser and never transmitted.

When pages are requested, the hosting providers process IP address, timestamp, requested address, browser identifier and referrer in order to deliver the site and defend against attacks. The legal basis is Art. 6(1)(f) GDPR, and the logs are deleted after 30 days at the latest.

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time (Art. 15 to 21 and Art. 7(3) GDPR). Contact ahoi@gstrobl.at to exercise them.

You also have the right to lodge a complaint with a supervisory authority. The competent one is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb.gv.at.