Privacy Policy / Datenschutzrichtlinie

Last Updated: 2025-04-28

As this site is operated from Europe by a European citizen who values privacy, I want to ensure your data is handled responsibly and transparently. This policy outlines how your personal information is collected, used, and protected.

If you have any questions, please reach out to me via thomas@vomtom.at.

I, Thomas Wiesner, act as the Data Controller for the personal data processed through this website.

What Data Do We Collect and Why?

Website Hosting (Vercel)

This website is hosted by Vercel Inc. (“Vercel”). When you browse this site, Vercel may automatically collect certain information for security and operational purposes, such as your IP address, browser type, and operating system. This processing is necessary for the legitimate interest of maintaining the security and performance of the website infrastructure. Vercel is GDPR compliant . By using this website, you acknowledge that your IP address may be processed by Vercel for these purposes.

Authentication (Clerk)

User authentication (signup, sign-in, profile management) is handled by Clerk Inc. (“Clerk”). When you sign up or sign in, you provide information directly to Clerk, which may include:

• Your email address
• Your chosen sign-in method (e.g., Google, GitHub, Facebook, email/password)
• A unique user ID assigned by Clerk
• Optionally, profile information you choose to provide (e.g., name, username)

Clerk acts as a Data Processor on our behalf for authentication purposes. By signing up or logging in, you agree to Clerk processing your personal data according to their terms and privacy policy to provide authentication services. Clerk is GDPR compliant  and implements appropriate security measures to protect your data. We, as the Data Controller, only access the necessary information from Clerk (like your user ID and email) to manage your account on our site.

Newsletter (MailerLite)

If you choose to subscribe to our newsletter, your email address will be collected and managed by MailerLite. Our newsletter subscription process uses a double opt-in method: you must confirm your subscription via a link sent to your email address. This ensures you genuinely want to receive emails from us. MailerLite acts as a Data Processor for our newsletter communications and is GDPR compliant . You can unsubscribe at any time using the link provided in every newsletter email.

Cookies and Analytics

Anonymous Users: When you browse this website without being logged in, we do not use tracking cookies for analytics (like Google Analytics) or advertising (like Facebook Pixel). Only essential cookies required for basic site functionality and security (e.g., from Vercel or Clerk for session management if applicable) may be used.

Signed-In Users: By signing up and logging into your account, you acknowledge and agree that certain features may embed content from third-party services, such as YouTube videos. These third-party services may set their own cookies directly on your device when you interact with or view this embedded content. For example, viewing an embedded YouTube video means you are subject to YouTube’s (Google’s) cookie and privacy policies. Your login signifies your acceptance of the potential use of such third-party cookies necessary for the functionality of these embedded features.

Opting Out (Signed-In Users): If you no longer wish to accept cookies from embedded third-party services after signing up, you can opt-out by refraining from logging into your account or by requesting the deletion of your account entirely (see Data Subject Rights).

(Note: If we introduce first-party analytics or advertising cookies in the future, we will update this policy and may implement a separate consent mechanism.)

Payments

Direct Purchases: If you purchase products or services directly through this website, payments are processed by our Merchant of Record, Paddle.com Market Limited (“Paddle”). When making a purchase, you provide payment information directly to Paddle, who acts as the Data Controller for that transaction. We receive information from Paddle necessary to fulfill your order (e.g., confirmation of payment, subscription status) but do not handle your full payment details directly. By purchasing through Paddle on our site, you are subject to Paddle’s terms and privacy policies. You can review Paddle’s GDPR compliance information here .

Third-Party Purchases: This website may contain links or references to products or services offered on third-party platforms (e.g., courses on Udemy). If you click on such links and make a purchase on a third-party website, that transaction is solely governed by the terms and privacy policy of that third party. We are not responsible for the data processing or privacy practices of external websites.

Data Subject Rights

As per GDPR, you have rights regarding your personal data:

• Right to Access: You can request details about the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate personal data.
• Right to Erasure (‘Right to be Forgotten’): You can request the deletion of your personal data, subject to certain conditions.
• Right to Restrict Processing: You can request limitations on how we process your data.
• Right to Data Portability: You can request a copy of your data in a machine-readable format.
• Right to Object: You can object to processing based on legitimate interests.

To exercise these rights, please contact me. For data held directly by Clerk or MailerLite, you may also need to contact them directly or use the tools provided within your account settings or their platforms.

Data Security

We rely on the security measures implemented by our Data Processors (Vercel, Clerk, MailerLite) who maintain industry-standard security practices.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, such as maintaining your account or complying with legal obligations. IP logs collected by Vercel are subject to their retention policies.

Complaints & Information Requests

As the Data Controller and sole operator of the site, you can file complaints or submit information requests directly to me:

Thomas Wiesner thomas@vomtom.at