Privacy policy

Last updated: 20 October 2026

Controllers and contact

For privacy questions and to exercise your rights, contact us at . You may contact either controller.

Legal basis

Personal data processing is governed in particular by Regulation (EU) 2016/679 (GDPR) and the Austrian Data Protection Act (DSG). This notice provides information under Article 13 GDPR. Storage of information on devices and access to it are governed by section 165(3) of the Telecommunications Act 2021, based on Article 5(3) of Directive 2002/58/EC (ePrivacy Directive), as amended.

Website delivery and security

This static website is hosted on Cloudflare Pages. When you visit, Cloudflare processes in particular your IP address, time of access, requested URL, technical browser and device information and security-related connection data. This is necessary to deliver the website, keep it functioning and prevent attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a reliable and secure website. The recipient is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, together with the affiliates and subprocessors used to provide the service.

Cloudflare also processes data outside the European Economic Area, particularly in the USA. Transfers to the appropriately certified US recipient are covered by the adequacy decision for the EU–US Data Privacy Framework; where necessary, the contractual data protection terms provide for EU Standard Contractual Clauses. Further details are available in Cloudflare’s privacy policy and its Data Processing Addendum.

Cookies and local storage

The website itself uses no analytics or advertising cookies, visitor tracking, externally loaded fonts or embedded social media content. Cloudflare may deliver technical security checks and JavaScript to prevent automated access and may use strictly necessary cookies for enabled security features, for example to detect automated access or remember a completed security check. See Cloudflare’s cookie documentation for details.

Strictly necessary storage and access are exempt from consent under section 165(3) of the Telecommunications Act 2021. Non-essential analytics or advertising technology would require your prior consent; no such features are currently integrated.

Your browser language is evaluated exclusively on your device. If you explicitly select a language, we store only that choice (de or en) in your browser’s local storage under “mamo-yama-language”. It remains until you clear this website’s data in your browser and serves only your requested language setting, not identification or analytics. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is to provide your chosen language. This access serves the feature you expressly requested within the meaning of section 165(3) of the Telecommunications Act 2021.

Contact by email or telephone

If you contact us by email or telephone, we process your email address or telephone number, the content of your enquiry and any other details you provide in order to handle it. Depending on the enquiry, this is based on Article 6(1)(b) GDPR (pre-contractual or contractual communication) or Article 6(1)(f) GDPR (our legitimate interest in responding to other enquiries). Email service providers process messages for delivery and mailbox provision.

Management of our social media channels

Independently of visits to this website, we manage our own channels on Google/YouTube and Meta/Facebook, Instagram and Threads using a self-hosted management application. Where a channel is connected, this involves account identifiers, access permissions, post content and statistics supplied by the service. Our accounts are connected by the respective authorised persons. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is to maintain and evaluate our own channels.

Merely visiting this website does not establish a connection to these platforms. Processing on the platforms themselves is also subject to Google’s privacy policy and Meta’s privacy policy. We use data received from Google APIs in accordance with the Google API Services User Data Policy, including the Limited Use requirements.

Retention

Technical connection and security data are processed to deliver and protect the website and retained only as long as necessary to detect and investigate disruptions or attacks. We retain contact enquiries until they have been fully handled; longer retention applies only where required by statutory retention obligations or the establishment, exercise or defence of legal claims. Channel permissions remain valid until disconnection, revocation or expiry; post content remains stored in accordance with its publication and management.

Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may withdraw consent at any time with effect for the future.

You may lodge a complaint with a data protection supervisory authority, particularly the Austrian Data Protection Authority.

Provision of data and automated decisions

The technical connection requires the connection data described above. Contacting us by email is voluntary; without the information needed to respond, we may be unable to handle your enquiry. We do not make automated decisions with legal or similarly significant effects and do not profile website visitors.