PRIVACY.
Controller
DI(FH) Helmut R. Schatzl
Trading name: CREAPE
Kapsamerstraße 31, 4625 Offenhausen, Austria
Email: office@creape.at
Hosting and technical access data
This website is hosted by World4You Internet Services GmbH, Wolfgang-Pauli-Straße 2, BT3, 4020 Linz, Austria. When you visit the website, technically necessary access data is processed. This includes, in particular, your IP address, date and time, requested resource, browser and operating system information and, where applicable, the previously visited page.
This processing enables the website to operate, supports troubleshooting and protects against abusive access. The legal basis is my legitimate interest in reliable and secure operation under Article 6(1)(f) GDPR.
The retention period for technical logs depends on the hosting configuration and their necessity for operation, troubleshooting and investigating security incidents. I do not carry out any additional visitor logging or audience measurement. Information on processing by the provider is available from World4You.
Contact form and email
When you contact me, I process your name, email address and the content of your message. When you submit the contact form, these details are sent to the web server and forwarded to my mailbox by email. There is no separate database for contact enquiries.
These details are used to handle your enquiry and, where applicable, to prepare and fulfil a contract. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and Article 6(1)(f) GDPR for other enquiries, based on my legitimate interest in responding.
Providing these details is voluntary. Without a working contact address, I cannot respond to your enquiry. Please do not send sensitive information that is unnecessary for your enquiry.
Contact form protection
To protect against automated enquiries, the form uses a time-limited security token, a hidden honeypot field and a limit on submission attempts. Security tokens are valid for 30 minutes. To prevent duplicate submissions, only token hashes and a shared limit on submission attempts are used, without IP addresses or visitor profiles. Used token hashes are disregarded after one hour and cleared during subsequent submission attempts. Form data is not stored in these protection files. No cookies are set for this purpose. The legal basis is my legitimate interest in protection against spam and abuse under Article 6(1)(f) GDPR.
Email service and recipients
To receive, handle and retain emails, I use Microsoft 365, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. World4You processes data necessary for hosting and form submissions; Microsoft processes email communications. Any further disclosure takes place only where necessary for a contract or required by law.
Microsoft 365 may also involve processing outside the European Economic Area. The contractual safeguards for this are described in the Microsoft Data Protection Addendum and include EU Standard Contractual Clauses. Further information on possible transfers is provided by Microsoft .
Retention and deletion
I delete enquiries that do not result in a contract once they have been handled and it is clear that no contract will be concluded, unless legal obligations or necessary grounds for safeguarding legal claims require otherwise.
Where a contract is concluded, the necessary documents and emails are retained for the duration of its fulfilment and afterwards for as long as statutory retention obligations or the establishment, exercise or defence of legal claims require. The relevant factors are the type of document, applicable statutory periods and any ongoing proceedings. Blanket indefinite storage is not intended.
Cookies, fonts and analytics
This website does not use visitor statistics, Google Analytics, advertising trackers or externally embedded Google Fonts. Fonts and design elements are provided locally. No cookies are set for analytics or advertising purposes.
Your rights
Subject to the statutory requirements, you have the right of access, rectification, erasure, restriction of processing and data portability. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. Any consent you have given may be withdrawn with effect for the future.
For enquiries about your data, you can contact me at office@creape.at. You may also lodge a complaint with a data protection supervisory authority, in particular the Austrian Data Protection Authority.
No automated decision-making, including profiling, takes place.
Last updated: 7 October 2026