Privacy.

The person responsible for processing personal data on this website (the controller under the GDPR) is:

Name

Matt Banton

Address

Address (shown in the browser)

Email

Email me

Questions about your data, or requests to use any of the rights below, can be sent to that email address.

This website is built and hosted with Webstudio (Webstudio, Inc.). When you open a page, your browser automatically sends technical information to the servers that deliver it: your IP address, the date and time, the page requested, the referring page, and your browser and operating system. This is needed to show you the website, keep it secure and fix errors.

Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). The data is used only for these purposes and not to identify you.

Fonts and images are loaded from the same hosting service. The website does not use Google Fonts or other external font services.

If you send an enquiry through the contact form, the details you enter (name, email address, topic, message and any file you attach) are sent to me by email through Webstudio's form service. If you email me directly, I receive your email address and whatever you write.

I use this information only to answer your enquiry and, if we work together, to prepare and carry out the project. Legal basis: steps prior to entering into a contract or performing a contract (Art. 6(1)(b) GDPR), otherwise my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Enquiries that don't lead to a project are deleted when they're no longer needed, at the latest after 12 months. Where I work with you, correspondence and invoices are kept as long as Austrian tax and commercial law requires (usually 7 years).

The form contains a hidden field that catches spam bots. It does not collect any data about you.

The website stores a small amount of information in your browser:

• Your cookie choice ("mb-consent" in local storage): remembers whether you accepted or declined Google Analytics, so the banner doesn't appear on every page. Kept for 12 months.
• The project list you're browsing (session storage): makes the "Previous / Next project" links follow the overview you came from. It contains no personal data and is deleted when you close the tab.

Both are strictly necessary for features you use, so they don't need consent (§ 165(3) TKG 2021). Google Analytics cookies are only set if you click "Accept" (see /05).

If you click "Accept" in the cookie banner, this website uses Google Analytics 4, a web analytics service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). It shows me which pages are visited, how visitors arrive and roughly where they come from, so I can improve the website. Nothing is loaded from Google before you accept.

Google Analytics sets cookies (names starting with "_ga") and processes information such as pages visited, time on the website, device and browser type, and approximate location. IP addresses are not stored in Google Analytics 4. The website does not allow Google to use this data for advertising. Data can be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection. Analytics data is deleted automatically after the retention period set in Google Analytics (at most 14 months).

Legal basis: your consent (Art. 6(1)(a) GDPR and § 165(3) TKG 2021). You can withdraw it at any time: click Cookie settings (also at the bottom of every page) and choose "Decline". Google Analytics then stops and its cookies are deleted.

More information: Google's privacy policy.

Films on this website are hosted on YouTube (Google Ireland Limited). A film is only loaded when you click play; until then, no connection is made to YouTube. The player uses YouTube's privacy-enhanced mode (youtube-nocookie.com). Once you click play, Google receives information such as your IP address and that you watched the video, and may store information in your browser. Data can be transferred to the USA (EU-US Data Privacy Framework, see /05).

Legal basis: by clicking play you ask for the video to be loaded (Art. 6(1)(a) GDPR). If you'd rather not, don't start the video.

This website links to other websites (for example LinkedIn). Those websites are only contacted when you click the link, and their own privacy policies apply.

Under the GDPR you have the right to:

• access the personal data I hold about you (Art. 15),
• have it corrected (Art. 16) or deleted (Art. 17),
• restrict its processing (Art. 18),
• receive it in a portable format (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw consent at any time, with effect for the future (Art. 7(3)).

To use any of these rights, Email me.

If you think your data is being processed unlawfully, you can complain to the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

• I don't sell personal data and don't use it for automated decision-making or profiling.
• Personal data is passed to service providers only as described above.
• This website uses an encrypted connection (HTTPS).
• I may update this policy when the website changes. The current version is always on this page.