Last updated: 1 November 2026
Controller
The controller for this website and enquiries addressed to the operator is:
Tim Witter
Boschstraße 1/28, Tür 14, 1190 Wien, Österreich
hello@timwitter.com
Hosting and website delivery
The website is delivered through Cloudflare Workers Static Assets, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, and its service providers. Requests disclose technical data such as your IP address, requested URL, time, browser information and, when sent by your browser, referrer. Processing is necessary to deliver the pages and protect the service against abuse; the legal basis is Article 6(1)(f) GDPR (legitimate interests in reliable and secure website operation). Cloudflare processes traffic and customer logs on behalf of its customers and also processes certain network/security data for its own purposes as explained in its privacy policy. This static application does not maintain a separate visitor database or application request log.
Contact by email
The mailto links open your email application; clicking alone does not submit a message through this website. If you email hello@timwitter.com, your email address, name if supplied, message, attachments and delivery metadata are processed to handle your enquiry. Email delivery and storage use Fastmail Pty Ltd, PO Box 234, Collins Street West, VIC 8007, Australia, and its service providers. The legal basis is Article 6(1)(b) GDPR for enquiries about a possible or existing contract, and Article 6(1)(f) GDPR for other correspondence (the legitimate interest in answering enquiries). Providing this information is voluntary, but an answer requires a return address and enough information to handle the request. Correspondence is not used to subscribe you to a newsletter.
Optional analytics and your choice
Website analytics is disabled until you consent. If configured, a banner asks for your consent before Cloudflare Web Analytics is loaded. The purpose is to measure page visits and loading performance to improve the website's content and usability; the legal basis is Article 6(1)(a) GDPR. Consent is also obtained before optional access to device information under Section 165(3) of the Austrian Telecommunications Act 2021 (TKG). Declining does not restrict access to the website. You can withdraw consent at any time without giving a reason through Analytics settings in the footer. Withdrawal does not affect the lawfulness of processing before it was withdrawn.
If configured and you accept, Cloudflare Web Analytics loads from static.cloudflareinsights.com and sends page-load and performance data to Cloudflare. This can include the page path, referrer and browser/device information. Cloudflare says its analytics beacon does not use cookies or browser storage; network requests still transmit information to Cloudflare. This site does not load its beacon before you accept.
When you make an analytics choice, it is saved locally in your browser under timwitter.analytics-consent.v1 so that your choice is respected on later visits. No consent choice is stored when analytics is not configured. Choosing a light or dark theme saves that display preference locally under timwitter.theme.v1; it is not sent to a server. Selecting System removes the saved theme preference. Choosing accessibility settings (text size, contrast, font, text spacing, link underlines, focus outline or reduced motion) saves them locally under timwitter.a11y.v1 so they apply on later visits; they are not sent to a server, and resetting them removes the saved entry. The website does not set advertising cookies, embed third-party fonts or use your information for automated decisions with legal or similarly significant effects.
Retention and transfers
Correspondence is kept for as long as necessary to handle the enquiry and any resulting contractual relationship. It is then deleted unless retention is necessary to meet legal record-keeping duties or establish, exercise or defend legal claims; in those cases retention ends when that duty or purpose ends. The browser's consent choice remains until you change it or clear the site's browser storage. Cloudflare and Fastmail retain operational data as needed for service delivery, security and their legal obligations, according to their linked policies. Deleting a message from the active mailbox does not imply immediate deletion from provider backups. No fixed retention period for all provider data is asserted here.
Cloudflare and Fastmail operate internationally; processing outside the EEA, including in the USA and Australia, is possible. An EU mail server address does not guarantee exclusively European processing. Cloudflare states that it uses the EU–US Data Privacy Framework for covered US transfers and standard contractual clauses for other relevant transfers or as a fallback. Fastmail states that it uses safeguards such as standard contractual clauses for EU/UK transfers. The providers' policies describe these safeguards and their service providers. You can contact the operator for information about applicable safeguards or a copy where available.
Your rights
Depending on the circumstances, you may request access, rectification, erasure, restriction or portability of your personal data, object to processing and withdraw consent. Contact the operator by email to exercise these rights. Rights may be subject to statutory exceptions.
You may lodge a complaint with a supervisory authority, in particular where you live, work or consider an infringement to have occurred. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde); contact and complaint information is linked below.
For questions about this site or your data, email hello@timwitter.com.