Privacy Policy

Information on the processing of personal data in accordance with the EU General Data Protection Regulation (GDPR).

Last updated: 25 July 2026

1. Controller

The controller responsible for data processing on this website is:

Stefan Hassler
Marc-Aurel-Park 3/1/10
3430 Tulln
Austria
Email: diving@stefun.at

2. Data protection contact

For questions about this privacy policy or your rights, please contact the address above.

3. Scope

This policy applies to the website www.stefun.at and describes what personal data we process, for what purposes, on what legal basis, and for how long.

4. Hosting and server log files

When you visit this website, our hosting provider automatically collects data in server log files, including:

• IP address (shortened or anonymised where configured)
• Date and time of the request
• Requested URL and HTTP method
• Referrer URL and browser type / operating system

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation of the website).
Retention: 30 days
Processor: easyname GmbH, Canettistraße 5/10, 1100 Wien, Vienna, Austria

5. Contact form

If you use the contact form, we process the data you enter:

• Name
• Email address
• Message content
• Captcha answer (to prevent abuse; not stored long-term beyond the session)

Purpose: To handle your enquiry and reply to you.
Legal basis: Art. 6(1)(b) GDPR (steps prior to entering a contract / your request) and Art. 6(1)(f) GDPR (legitimate interest in responding to messages).
Retention: until the enquiry is resolved, then deleted after 1 months unless legal retention applies
Storage: Messages may be stored in a database on the hosting server and a notification email sent to diving@stefun.at.

You are not obliged to provide this data, but without it we cannot process your contact request.

6. Cookies and local storage

This website uses no non-essential cookies. Non-essential cookies (analytics, marketing) are not used.

If you use only technically necessary cookies, legal basis is Art. 6(1)(f) GDPR. For any optional cookies you must obtain consent under Art. 6(1)(a) GDPR and provide a cookie banner.

7. External services and third-country transfers

Depending on which pages you visit, data may be processed by third parties:

• Google Fonts — fonts may be loaded from Google servers (IP address transferred). Provider: Google Ireland Limited / Google LLC (USA). Legal basis: Art. 6(1)(f) GDPR. You may self-host fonts to avoid this transfer.

8. No automated decision-making

We do not use your personal data for automated decision-making or profiling within the meaning of Art. 22 GDPR.

9. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR), where applicable
• Objection (Art. 21 GDPR) to processing based on legitimate interests
• Withdraw consent (Art. 7(3) GDPR) at any time, without affecting prior processing

To exercise these rights, contact us using the details in section 1. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Supervisory authority (Austria):
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria
www.dsb.gv.at

10. Security

We use appropriate technical and organisational measures (e.g. HTTPS, access restrictions on the server) to protect your data. Complete security cannot be guaranteed for internet transmission.

11. Changes to this policy

We may update this privacy policy when the website, legal requirements, or our processing activities change. The current version is always available on this page.