Privacy
Controller
Storylution GmbH, Dr.-Karl-Lueger-Platz 5, 1010 Vienna, Austria. Privacy enquiries: contact@story.one.
This notice applies to the Volker Viechtbauer author website, not to separate story.one services or linked retailers. Updated: 4 October 2026.
Hosting and technical access data
This website at www.volkerviechtbauer.com runs on a server in the infrastructure of netcup GmbH (Karlsruhe, Germany). Requests involve technical data, in particular IP address, time, requested address or file, HTTP status, and browser and device information. We process these data to deliver content, diagnose errors and prevent attacks. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in reliable and secure website operation.
Recipients of technical data are netcup GmbH as the infrastructure provider and the service provider we have engaged to operate the server. Hosting involves no transfer to countries outside the European Economic Area. The provider information linked below gives further details.
Technical logs are retained only for as long as required for delivery, error diagnosis and security analysis. Retention depends on the nature and scope of the technical activity and whether a specific security incident requires investigation. Entries relevant to an incident may be retained until the investigation is completed and, where necessary, for establishing or defending legal claims.
Your analytics consent
Google Analytics is loaded only after you choose “accept”. Without consent, our measurement code makes no Google Analytics requests and sets no analytics cookies. Reading, listening and links remain available if you decline. The legal basis is your consent under Article 6(1)(a) GDPR and Section 165(3) Austrian Telecommunications Act 2021.
We save your choice, its time and the consent version in local browser storage under vv-analytics-consent for up to 180 days. No individual identifier is assigned for this purpose. This storage is necessary to implement your privacy choice (Section 165(3) Austrian Telecommunications Act 2021; Article 6(1)(c) GDPR in conjunction with Article 7 GDPR). Your choice is not sent to Google as an analytics event.
You can reopen Privacy settings in the footer at any time. After consent, the footer also provides a direct “Withdraw tracking consent” button. Withdrawal stops further analytics and removes the analytics cookies set by us. Processing before withdrawal remains lawful. The choice applies only to this browser and website address.
Google Analytics 4
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC in the United States and other Google companies may also process data. We use Google Analytics to understand website usage and improve content and usability.
After consent, we measure page views and interactions such as navigation, retailer and press links, language changes, opened reading samples and audio controls. Data includes visited pages, predefined control identifiers and labels, cleaned link destinations, browser/device information, approximate location and pseudonymous cookie identifiers. Names, email addresses and contact messages are not sent to Analytics. URL query parameters are removed from our page and link events.
Connecting to Google necessarily transmits an IP address. Google states that Google Analytics 4 does not log or store IP addresses. This does not make all analytics data anonymous.
We do not use Google Signals, User-ID, advertising account links or personalised advertising. Advertising consent remains denied. Enhanced measurement is not used; our website code sends explicitly defined events.
Analytics cookies use the vv_ga prefix to distinguish browsers and sessions. Their lifetime is limited to the remaining consent period, no more than 180 days, and is not extended by further visits. A two-month retention period is set for detailed event and user data in Google Analytics; aggregated standard reports may remain longer.
Google: data use on partner websites
International transfers
Google Analytics may process data outside the European Economic Area, particularly in the United States. Google LLC participates in the EU-US Data Privacy Framework. Transfers covered by this framework rely on the adequacy decision under Article 45 GDPR. Google provides EU standard contractual clauses for other transfers where required. The following documents provide details and copies of the safeguards.
Google data transfer frameworks
European Commission adequacy decisions
Contact form and email enquiries
When you use the contact form, we process your name, email address, message, selected language and acknowledgement that you have read the privacy information. We use these data to handle and respond to your enquiry. Required fields allow us to identify and answer the enquiry; the form cannot be submitted without them. Acknowledging this notice does not constitute consent to advertising or analytics.
The legal basis is Article 6(1)(b) GDPR where your enquiry concerns a contract or pre-contractual steps with you, and Article 6(1)(f) GDPR for other enquiries. Our legitimate interest is responding appropriately to requests addressed to us. Contacting us does not require analytics consent.
Messages are forwarded to Volker Viechtbauer and, where appropriate, the persons responsible for handling the enquiry. Technical recipients include the hosting provider, Resend (Plus Five Five, Inc., United States) and the email providers of the mailboxes involved. Resend processes the sender, recipient, message and delivery information needed to deliver the email. Message contents are not transmitted to Google Analytics.
Resend stores sending data in the United States; choosing a European sending region does not change the storage location. Its data processing agreement includes EU standard contractual clauses. According to the provider, standard plans retain email and log data for 30 days, with backups persisting for seven days. The documents below explain transfers and deletion.
The website does not maintain its own database of contact enquiries. Correspondence in recipient mailboxes is deleted once the enquiry is resolved and further handling, statutory retention duties or establishing or defending legal claims no longer require it. Messages that constitute business records subject to mandatory retention are kept for the applicable statutory period.
To prevent automated messages, the server limits requests using technical connection information and temporary counters with a ten-minute window. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in preventing abuse. No external CAPTCHA service is embedded.
Resend data processing agreement
Resend storage locations and retention
External links and locally hosted content
Retailer, press and publisher sites open only when you click their links. Their privacy policies then apply. Links to story.one include campaign parameters identifying this author website, the language and link placement as the referral source. These parameters do not contain an individual visitor identifier. story.one is responsible for processing access data on its own services.
Book covers, fonts, logos, press images and audio excerpts are served by this website’s server. No external audio players or social media widgets are embedded.
Your rights
You may request access, correction, erasure, restriction and, where applicable, portability of your personal data. You may object to processing based on legitimate interests on grounds relating to your particular situation. Consent can be withdrawn at any time for the future. Our website does not make automated decisions with legal or similarly significant effects.
You do not need to consent to analytics or provide contact data to use this website. To respond to an enquiry, we need the contact details you choose to provide.
You may complain to a supervisory authority, including the Austrian Data Protection Authority or the authority where you habitually reside.