At a glance
- No advertising or visitor-analytics scripts are added to this website.
- The booking calendar loads only after you choose to enable Calendly.
- You can contact me by email without using the booking calendar.
Who is responsible
The controller responsible for the processing described here is Patryk Kozak, operating under the brand Datasound Consulting. Contact: consulting@datasound.cloud. Further operator information is in the Impressum.
Personal data means information that identifies you or can be linked to you, such as your email address or IP address. This notice covers datasound.cloud, its ChatGPT Sites address, related enquiries and consultation bookings. A client project may require additional information and a separate data-processing agreement.
The relevant framework is the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and, for storage or access on your device, § 165(3) of the Austrian Telecommunications Act 2021 (TKG).
When you browse the website
Your browser sends technical data needed to deliver pages: IP address, requested URL, date and time, browser/device information and, where your browser supplies it, the referring page. Hosting infrastructure may process request, error and security logs to operate the website, diagnose faults and prevent abuse.
The website is hosted using OpenAI’s ChatGPT Sites and Cloudflare infrastructure. The legal basis is the legitimate interest in providing a reliable, secure website (Article 6(1)(f) GDPR). Technical data is not used by this website to build advertising profiles.
The website loads images and fonts from its own domain and does not add advertising or visitor-analytics scripts. External services used for booking are described below.
When you send an enquiry
If you email me, I receive your email address, name if supplied, message, attachments and associated email metadata. I use this to respond, clarify your request and, where relevant, prepare or manage an engagement. Email and communication providers process the information needed to deliver and store that correspondence.
For steps you request before a contract, or to fulfil a contract with you, the basis is Article 6(1)(b) GDPR. General enquiries and correspondence with someone acting for a business are handled on the legitimate interest in responding and managing business relationships (Article 6(1)(f)). Legal record-keeping obligations use Article 6(1)(c).
Providing contact details is voluntary, but a usable reply address and enough information about your request are needed to respond. Please avoid unnecessary sensitive personal data, credentials or confidential client records.
When you use Calendly
Opening the booking dialog initially offers a choice between loading the calendar and sending an enquiry by email. Only selecting “Load booking calendar” connects the embedded calendar to Calendly, LLC, a US provider. Calendly can then receive your IP address, browser/device information and technical usage data. Its own cookie controls remain available.
Permission to load this optional service is based on your consent (Article 6(1)(a) GDPR and, where applicable, § 165(3) TKG). If you book, your name, email, selected time, time zone and any answers you enter are processed to arrange and manage the consultation under Article 6(1)(b) GDPR. For business representatives, Article 6(1)(f) applies to arranging the business conversation.
Calendly processes scheduling data on the organiser’s behalf and handles certain service data for its own purposes. See its Privacy notice and Data Processing Addendum. Processing may take place in the United States.
Close the dialog to stop loading the embedded calendar. Consent to load it is not saved between openings. Closing does not delete an existing booking or cookies already placed by Calendly; manage those through Calendly’s controls or your browser. You can withdraw consent for future processing or ask about a booking at consulting@datasound.cloud. Withdrawal does not affect processing that was lawful before it. Email remains an alternative.
Cookies and browser preferences
The website stores a language preference (pk-language) or colour-theme preference (pk-theme) in your browser’s local storage when you select one. These values remember the setting you requested; they are not advertising identifiers and are not sent to Datasound Consulting as profile data.
They remain until you change the preference or clear this website’s browser data. They support your expressly requested display settings; any processing of personal data for this purpose is based on Article 6(1)(f) GDPR. No consent is required for device storage that is strictly necessary for a service you expressly request under § 165(3) TKG.
The website itself does not set analytics or marketing cookies. Hosting providers may use necessary security cookies; Calendly may use cookies after you enable the calendar. Calendly’s own controls govern its optional cookies.
How long data is kept
Enquiries and booking correspondence are kept for the time needed to answer, follow up and manage the relevant relationship. Records are then deleted or limited to what is necessary for applicable legal obligations or identifiable legal claims. The criteria are the purpose, whether the matter is closed, and any relevant statutory retention or limitation period.
Where Austrian tax and accounting rules apply, relevant business records generally need to be kept for seven years from the end of the relevant calendar year; proceedings or specific statutory exceptions can require longer. This does not mean every ordinary enquiry is kept for seven years.
Hosting/security logs follow the infrastructure provider’s operational retention and are kept as needed for delivery, troubleshooting and incident handling. Calendly’s own service-data retention is explained in its notice. Browser preference storage is explained above.
Your choices and rights
Subject to the GDPR’s conditions, you can request access to your personal data, correction, deletion, restriction of processing and a portable copy of data covered by the portability right. You may withdraw consent at any time for future processing.
Right to object: where processing relies on legitimate interests, you may object for reasons relating to your particular situation. Processing must then stop unless compelling legitimate grounds override your interests and rights, or it is needed for legal claims. An objection to direct marketing must always be respected.
Send requests to consulting@datasound.cloud. Requests are normally answered within one month. If complexity or the number of requests requires up to two additional months, you will be informed within the first month, with reasons. Only proportionate information needed to verify your identity may be requested.
You may complain directly to the Austrian Data Protection Authority (Datenschutzbehörde), or another competent EU/EEA supervisory authority, particularly where you live or work or where an alleged infringement occurred. You do not have to contact me first.
This website does not make solely automated decisions with legal or similarly significant effects on you, including such profiling.
Changes and questions
This notice will be updated when the website’s processing changes. The date above identifies this version. New processing that requires consent will not be justified simply by changing this notice.