Privacy notice

Last updated: August 9, 2026

1. Controller

Danijel Bumbar, BB Webagentur, Bozner Platz 2, Staircase 2, Unit 9, 6020 Innsbruck, Austria
Email: info@webagentur-bb.com, phone: +43 660 43 34 156

2. Hosting, delivery and server logs

The website is hosted on Hetzner infrastructure and delivered and protected through Cloudflare. Processing may include IP address, time, requested URL, referrer, browser and device information and technical security data. We process this data to provide a secure, stable and fast website based on our legitimate interests under Article 6(1)(f) GDPR.

3. Essential cookies

Laravel uses essential session and CSRF cookies for secure form submission, session handling and protection against abusive requests. The legal basis is Article 6(1)(f) GDPR. These cookies are required for operation.

4. Contact form and email

When you contact us, we process your name, email address, optional phone number and message as well as technical data such as IP address, user agent and source page. The information is stored in the website database and emailed to us; a confirmation is sent to the address provided. Processing is required to respond and take pre-contractual steps under Article 6(1)(b) GDPR and for secure communication and abuse prevention under Article 6(1)(f) GDPR. We delete the data when it is no longer required, unless statutory retention duties or legal claims require longer storage.

5. Google reCAPTCHA

The contact form uses Google reCAPTCHA to prevent automated submissions. Device, browser, interaction and IP data may be transmitted to Google. Processing is based on our legitimate interest in website security and spam prevention under Article 6(1)(f) GDPR. The provider is Google Ireland Limited; transfers to affiliated companies in third countries may occur.

6. Microsoft Clarity

Microsoft Clarity is loaded only after you accept analytics cookies. It helps us understand use of the website through interaction and technical usage data. The legal basis is your consent under Article 6(1)(a) GDPR. You can withdraw consent at any time through “Cookie settings” in the footer. The provider is Microsoft Ireland Operations Limited; transfers to affiliated companies in third countries may occur.

7. Recipients and international transfers

Data is shared only with service providers required for hosting, security, email delivery, form protection and – after consent – analytics. Where data is processed outside the EEA, providers rely on an adequacy decision, the EU-US Data Privacy Framework or EU Standard Contractual Clauses where applicable.

8. Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent at any time for the future. Contact info@webagentur-bb.com. You may also complain to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

9. Changes

We update this notice when website functions, service providers or legal requirements change.