Privacy Policy (Datenschutzerklärung)

Last updated: November 2026

Protecting your personal data matters to me. This policy explains what data is processed when you visit this website, why, and what rights you have under the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

1. Controller

Philip Jaime del Alcázar
Paniglgasse 18-20/11, 1040 Vienna, Austria
Email: me@philipalcazar.com

2. Hosting

This website is built and hosted with ChatGPT Sites, a service of OpenAI OpCo, LLC, 1455 3rd Street, San Francisco, CA 94158, USA. OpenAI acts as my data processor under the ChatGPT Sites Data Processing Addendum and uses subprocessors for web hosting and content delivery (Cloudflare, Hosttech). When you visit the site, technical data such as your IP address, browser type, date and time of access and the pages requested are processed so the website can be delivered securely.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website).

Data may be processed outside the EU, in particular in the USA. Such transfers are based on the EU Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework.

3. Contact by email

If you contact me by email, I process the data you provide (name, email address, organisation if given, and your message) to answer your inquiry and, if applicable, to prepare an offer.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

I delete inquiries no later than 12 months after our correspondence ends, unless a business relationship results, in which case statutory retention periods apply (generally 7 years under § 132 BAO).

4. Website analytics

This website uses the built-in analytics of ChatGPT Sites to understand how many people visit the site and which pages they view. The data is used only in aggregated form. No cookie-based tracking and no advertising or third-party tracking tools are used.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the website).

5. YouTube videos

This website embeds YouTube videos in privacy-enhanced mode (youtube-nocookie.com). Videos load only after you click on them. Until then, no connection to YouTube is made. Once you click, data such as your IP address is transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and possibly to Google LLC in the USA, and YouTube may set cookies. For details, see Google's privacy policy at policies.google.com/privacy.

Legal basis: Art. 6(1)(a) GDPR (your consent by clicking to load the video). You can withdraw consent at any time by not loading further videos and clearing your browser cookies.

6. Links to social media

This website contains simple links to my profiles on YouTube, LinkedIn and Instagram. No data is transferred to these platforms until you click a link. After that, the privacy policy of the respective platform applies.

7. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, email me@philipalcazar.com.

8. Right to lodge a complaint

If you believe the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, Austria, dsb@dsb.gv.at, www.dsb.gv.at

9. Changes

I may update this privacy policy when the website or legal requirements change. The current version is always available on this page.