Privacy policy
Last updated: 4 November 2026. The German version of this policy is legally binding.
This policy explains which personal data is processed when you visit and use techevents.felixuhmann.com, why, on which legal basis, and what rights you have.
1. Controller
Felix Uhmann
Franz-Koci-Straße 11 / 13 / 15, 1100 Vienna, Austria
Email: [email protected]
2. Hosting and server logs
The website runs on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data center in Finland. Hetzner processes data on our behalf under a data processing agreement (Art. 28 GDPR).
For every request, the server stores technically necessary access data: IP address, date and time, requested address, status code, amount of data transferred, referrer and browser identifier (user agent). We use this data only to keep the site secure and stable, for example to detect attacks and errors. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Logs are deleted after at most 90 days.
3. Cookies and local storage
We only use strictly necessary cookies and storage, which do not require consent (§ 165(3) Austrian Telecommunications Act 2021):
| Name | Purpose | Retention |
|---|---|---|
NEXT_LOCALE (cookie) | remembers your chosen language | end of browser session |
better-auth.session_token (cookie) | keeps you signed in after login | 7 days, or until you sign out |
theme (local storage) | remembers light or dark mode | until you clear it in your browser |
We do not use advertising or tracking cookies.
4. Analytics with Umami
To understand which pages are used, we use Umami, self-hosted on our own server. No data is shared with third parties. Umami sets no cookies and does not store IP addresses. It records visited pages, referrer, browser, operating system, device type and country. Visitors cannot be recognized across days or websites. The legal basis is our legitimate interest in improving the site (Art. 6(1)(f) GDPR).
5. Fonts
Fonts are served from our own server. Your browser does not connect to Google or any other font provider.
6. Images and storage (Cloudflare R2)
Images (for example event cover images) are stored on Cloudflare R2 (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). They are delivered through our own server, so your browser does not connect to Cloudflare. Cloudflare acts as our processor (Art. 28 GDPR). Images may be stored in data centers outside the EU, in particular in the United States. This transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Cloudflare is certified. The standard contractual clauses in Cloudflare's data processing agreement also apply.
7. User accounts
If you create an account, we process your name, email address and password. The password is stored only as a secure hash, never in plain text. For each sign-in we store the IP address and user agent, to detect abuse and to show you your active sessions. This session data expires after 7 days.
The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR). Your data is kept until you delete your account. You can request deletion at any time by emailing [email protected].
8. Event data from public sources
We import events from publicly available calendars (for example Meetup and Luma). This information may contain personal data, such as names of organizers and speakers in event descriptions (information under Art. 14 GDPR). We process it to inform people about the event. The legal basis is our legitimate interest in a complete event calendar, and the organizers' interest in reaching an audience (Art. 6(1)(f) GDPR). The data stays in the event archive. You can object at any time, and we will remove your data promptly.
9. Contacting us by email
If you email us, we process your details to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed.
10. Recipients
Only the processors named above (Hetzner, Cloudflare) receive your data. We never sell data, and only disclose it when legally required. There is no automated decision-making or profiling.
11. Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability (Art. 15–20 GDPR). You can object at any time to processing based on legitimate interests (Art. 21 GDPR). To exercise these rights, email [email protected].
You can also lodge a complaint with the supervisory authority: Österreichische Datenschutzbehörde (Austrian Data Protection Authority), Barichgasse 40–42, 1030 Vienna, [email protected], www.dsb.gv.at.
12. Changes
We update this policy when the website changes, for example when new features such as Google or GitHub sign-in are added. The version published here always applies.