Legal
Privacy & cookies
How this site handles personal data under the EU GDPR, what cookies it sets, and how to exercise your rights.
Controller
The controller responsible for data processing on this site is:
Harald Walter Palma, Servitengasse 8/18, 1090 Vienna, Austria
Email: hello@haraldpalma.com
What we collect and why
This is a static website. We do not require you to create an account or provide personal data to read it. Personal data is only processed in two cases: when you contact us, and — only with your consent — for privacy-respecting analytics.
Contact form & email
If you send a message through the contact form or by email, we process the data you provide (name, email address and your message) solely to respond to your enquiry. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries). Form submissions are handled by our hosting provider, Netlify, acting as a processor. We keep enquiry correspondence only as long as needed to deal with your request and any follow-up.
Hosting
This site is hosted by Netlify (Netlify, Inc.). When you visit, your browser transmits technical data (including your IP address) to the host, which is processed to deliver the site securely. Legal basis: Art. 6(1)(f) GDPR. A data processing agreement is in place with the provider.
Cookies & analytics
No analytics or tracking cookies are set unless you explicitly accept them in the consent banner. We use Google Consent Mode v2: all analytics signals default to denied, and nothing loads until you choose. You can change your choice at any time via in the footer.
| Cookie / storage | Purpose | Type | Retention |
|---|---|---|---|
hp-theme | Remembers your light/dark theme choice | Strictly necessary (localStorage) | Until cleared |
hp-consent | Remembers your cookie consent choice | Strictly necessary (localStorage) | Until cleared |
_ga / _ga_* | Google Analytics — only if you accept analytics | Analytics (optional, consent-based) | Up to 2 years |
Analytics is currently not active. When enabled, IP anonymisation is applied and Google acts as a processor under Art. 6(1)(a) GDPR (your consent).
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- rectification of inaccurate data (Art. 16);
- erasure (Art. 17) and restriction of processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interests (Art. 21);
- withdraw consent at any time, without affecting prior lawful processing (Art. 7).
To exercise any of these, email hello@haraldpalma.com.
Right to complain
You have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), dsb.gv.at.
Changes
We may update this policy to reflect changes to the site or the law. Last updated: July 2026.