Privacy notice

This notice describes which personal data are processed when you visit this website. It reflects how the website actually works: there are no user accounts, no forms, no advertising and no embedded third-party content. Fonts are served by this website itself.

1. Controller

Apartment Meister, David Rozsa
Wirtsfeldweg 4/6, 5522 St. Martin am Tennengebirge, AT
Email: hello@apartmentmeister.at
Data protection officer: No data protection officer has been appointed, as the conditions of Art. 37 GDPR are not met. For all data protection requests, the controller, David Rozsa, can be contacted directly (contact details above).

2. Hosting and delivery

The website is delivered via Vercel Inc. (San Francisco, USA). On every request Vercel processes technically necessary connection data: IP address, time, requested address, browser identifier and, where sent, the referring page. The purpose is to deliver the pages and keep the service secure; the legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Vercel also processes data in the USA. According to Vercel, it is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR).

• Data processing agreement with Vercel: Vercel Inc. (Pro plan) processes the data as a processor under Vercel's Data Processing Addendum (Art. 28 GDPR).
• Retention of connection data at Vercel: On the Pro plan, Vercel keeps runtime logs containing connection data for one day; after that they are deleted.

3. Server-side processing and logs

Almost all pages are static. A small server function runs in two cases only: for requests whose browser identifier declares itself as a known search or AI crawler (for example GPTBot, ClaudeBot or Bingbot), and for requests to unknown English addresses, which receive an English error page. For crawler requests we write one log line with the crawler name, the path without parameters, the time and the environment, without IP address and without the full browser identifier. For every function call Vercel also stores its own log data, such as time, path, status code and browser identifier. Vercel keeps these runtime logs for a limited time depending on the plan; on the Hobby plan currently reported for this project, one hour according to Vercel's documentation. The purpose is operating the website and measuring whether search engines and AI services fetch the content (Art. 6(1)(f) GDPR).

4. Storage in your browser

We only store what is needed for a function you asked for (§ 165(3) of the Austrian Telecommunications Act 2021, TKG 2021):

• Local storage “am-consent-v1”: your choice about optional analytics services, so the notice does not appear again. Kept until you delete it in your browser or change your choice.
• Local storage “am-plans-v1”: step lists you explicitly save. They are not sent to us and stay until you remove them or clear your browser storage.
• Cookie “am_lang” (content only “de-AT” or “en”, lifetime one year): set only when you explicitly choose a language, so the home page respects your choice. It is not used for analytics.

The legal basis is our legitimate interest in a working website (Art. 6(1)(f) GDPR). You can delete these entries at any time in your browser settings.

5. Optional analytics only with consent

The following services are prepared in the code. They only load if they are activated for this website and you have explicitly consented (Art. 6(1)(a) GDPR, § 165(3) TKG 2021). Before that, no request is made to these services. Page addresses are sent without parameters; there is no session recording. The status shown reflects the version of this website you are viewing.

• Vercel Web Analytics (Vercel Inc., USA): Page views per page and origin, without cookies. Status: activated, only with consent.
• Google Analytics 4 (Google Ireland Ltd.): Where visits come from (search engines, AI assistants) and use of the plan feature. Analytics only, no advertising. Status: not currently activated.
• PostHog (EU servers) (PostHog Inc., data processed in the EU): Flow from item to route to saved plan, without session recording. Status: activated, only with consent.

Only if activated: after consent, Google Analytics sets cookies (names starting with “_ga”); advertising features and Google Signals are switched off; Google may transfer data to the USA. After consent, PostHog stores a pseudonymous identifier in your browser; processing takes place on EU servers. Vercel Web Analytics works without cookies. You can withdraw your consent at any time with effect for the future.

Contracts, retention and transfer basis for each activated service: Vercel Web Analytics runs under Vercel's Data Processing Addendum. PostHog (PostHog Inc., data processing in the EU) processes usage data after your consent as a processor under the PostHog Data Processing Agreement (Art. 28 GDPR). Google Analytics is not in use at the moment.

Your settings

6. Contact by email

If you email us, we use your details only to handle your enquiry (Art. 6(1)(b) or (f) GDPR). Statutory retention periods remain unaffected.

Email provider and retention period for enquiries: E-mails to hello@apartmentmeister.at are processed by Google (Google Workspace, Google Ireland Ltd.) as a processor. We keep enquiries as long as needed to handle them and any follow-up questions, then delete them unless a statutory retention obligation applies.

7. Links to external sites

We link to pages of the City of Vienna, to data.gv.at, to AnachB (VOR) and to other services. Their content is not embedded. Only when you click a link do you go to that site, where its own privacy rules apply.

8. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. To exercise them, write to the email address above. You can also complain to the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at.