Legal
Privacy Policy
Which personal data this website processes, for what purpose, on what legal basis, and for how long.
This is an English translation provided for convenience. The German version is the legally binding one.
1. Controller
The controller responsible for data processing on this website is Tom Häusler, LEXORA, Böcklinstraße 36-40/3/15, 1020 Vienna, Austria, office@lexora.at. There is no data protection officer; none is required.
2. Hosting and server logs
This is a static website hosted on a server operated by LEXORA at Hetzner Online GmbH (Industriestraße 25, 91710 Gunzenhausen, Germany), located in the EU. When you visit, the IP address, time of access, page requested, browser and operating system are processed in server logs as a technical necessity. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). The logs are used solely for error analysis and to defend against attacks, are not merged with other data, and are rotated automatically, so they are not kept longer than that requires. A data processing agreement under Art. 28 GDPR is in place with Hetzner.
3. Fonts
The fonts Hedvig Letters Serif and Inter are served from our own server and are not loaded from Google Fonts. Visiting the website therefore opens no connection to Google and transmits no IP address to Google. No cookies are set in the process.
4. Appointment booking (cal.com)
The contact page can embed a booking calendar from Cal.com, Inc. It loads only after you have consented (the "Booking calendar" group in the cookie banner, or the button next to the calendar itself). Without consent, no connection to cal.com is made. The legal basis for loading the calendar and for the storage entries it sets is your consent under Art. 6(1)(a) GDPR in conjunction with § 165(3) of the Austrian Telecommunications Act (TKG 2021); you can withdraw it at any time via the . Once loaded, Cal.com processes your IP address and the data you enter when booking (name, email address, chosen slot, optional notes); LEXORA also receives this data in order to hold the appointment (Art. 6(1)(b) GDPR). Cal.com's privacy notice: cal.com/privacy.
5. Contact form and email
If you use the contact form or email us, we process the data you provide (name, company, email address, website, message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR. The form is delivered through the service FormSubmit (formsubmit.co), which forwards your entries to us as an email; the provider's information: formsubmit.co/privacy. The data is deleted once the enquiry is settled and no statutory retention obligations stand in the way.
6. Audience measurement (Google Analytics 4)
This website may use Google Analytics 4, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). The service is loaded only if you have consented in the "Statistics" group. Without consent, no Google script is loaded, no analytics cookies are set and no data is sent to Google. We use Google Consent Mode v2; before any consent, all signals are set to "denied".
With your consent, Google processes pseudonymised usage data (truncated IP address, pages viewed, time and duration of the visit, approximate location at city level, device and browser) and sets cookies (including _ga) to recognise returning visits. Advertising features, Google Signals and sharing with advertising products are disabled. The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with § 165(3) TKG 2021. A transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework, and standard contractual clauses apply in addition.
You can withdraw your consent at any time with effect for the future via the ; the cookies set by Google are deleted when you do. Information from Google: policies.google.com/privacy.
As of today, measurement is not active: no Google Analytics ID has been entered yet, so nothing is loaded even with consent. Once an ID is entered, this section applies unchanged.
7. Free tools
The free tools on this website run entirely in your browser. Your entries are neither transmitted nor stored.
8. Consent, and how your decision is stored
On your first visit, a notice asks whether statistics and the booking calendar may be loaded. Until you decide, neither is loaded; declining takes one click, on the same level as accepting, and nothing is pre-selected. Simply reading on or dismissing the notice does not count as consent.
Your decision is stored locally in your browser (localStorage, key lexora.consent), together with the time and the version of the notice text. This lets us demonstrate what you consented to without sending the information to a server. The entry is technically necessary so that you are not asked again on every visit; it contains no identifier that could recognise you. The language you choose via the EN | DE switcher is stored locally in the same way (lexora.lang), so that you land there on your next visit; without this entry, the language on arrival follows your browser's language setting. If you clear your browser data, you will be asked again.
Withdraw at any time via the , also in the footer of every page. Withdrawal takes effect for the future; the lawfulness of processing up to that point is unaffected (Art. 7(3) GDPR).
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time with effect for the future. To do so, contact office@lexora.at. Complaints are handled by the Austrian Data Protection Authority: dsb.gv.at.
10. Changes
This policy is updated when the website or the services it uses change. The version published here applies.