Last updated: 11 August 2026
This notice explains what happens to personal data when you visit stefanpalan.com. It is provided in accordance with Article 13 of the General Data Protection Regulation (GDPR).
1. Who is responsible
The controller within the meaning of Art. 4(7) GDPR is:
Stefan Palan
Department of Finance, University of Graz
Universitätsstrasse 15/F2, 8010 Graz, Austria
Email: stefan.palan@uni-graz.at
Phone: +43 (316) 380-7306
This website is operated by Stefan Palan personally; the address above is his professional contact address. The site is not an official publication of the University of Graz, and the University is not the controller for the processing described here. A data protection officer is not required for this website and none has been appointed.
2. When you visit this website (server log files)
Each time a page is requested, the hosting provider’s web server automatically records:
- your IP address
- the date and time of the request
- the page or file requested
- the HTTP status code and the amount of data transferred
- the referring page, where your browser sends one
- your browser type and version and your operating system
Purpose: delivering the requested content, keeping the site stable and secure, and investigating technical faults or misuse.
Legal basis: Art. 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of the website.
Retention: log entries are deleted as soon as they are no longer needed for these purposes and are not kept beyond the period required to detect and investigate faults and misuse. They are not combined with other data and are not used to identify individual visitors.
3. Cookies, analytics and tracking
This website sets no cookies of its own. There is no web analytics, no tracking pixel, no advertising, no social media plugin and no profiling of visitors. That is why you are not asked to accept anything when you arrive.
Fonts are self-hosted and served from this website’s own server, so viewing a page establishes no connection to Google Fonts or any other external font provider.
4. Embedded YouTube videos
Two pages on this site embed a video hosted on YouTube. These embeds use YouTube’s privacy-enhanced mode (youtube-nocookie.com).
- When you open such a page, your IP address and basic technical information about your browser are transmitted to YouTube in order to load the player.
- No cookies are set unless you actually start playing the video.
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the United States on the basis of the European Commission’s adequacy decision for the EU–U.S. Data Privacy Framework.
- Legal basis: Art. 6(1)(f) GDPR — the legitimate interest in making referenced material directly viewable in context.
- Google’s own privacy information: policies.google.com/privacy
If you would rather not load the player at all, simply do not open those two pages, or block third-party frames in your browser; the rest of the site is unaffected.
5. Contacting me by email
If you write to me, your email address, your message and any information you choose to include are processed for the purpose of replying.
Legal basis: Art. 6(1)(f) GDPR (the interest in answering enquiries addressed to me), or Art. 6(1)(b) GDPR where your message concerns a contract or steps taken prior to entering into one.
Retention: correspondence is kept for as long as needed to deal with the matter, and longer only where a statutory retention obligation applies.
6. What this website does not do
Comments are disabled on all posts. There is no newsletter, no registration, no contact form, no online shop and no visitor accounts. No personal data is sold or made available to third parties for marketing. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.
7. Recipients and processors
Hosting: ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, acting as a processor under a data processing agreement pursuant to Art. 28 GDPR. The servers are located in Germany.
Apart from the YouTube embeds described in section 4, no personal data is passed on to third parties.
8. Whether you have to provide data
You are under no statutory or contractual obligation to provide personal data. The technical data listed in section 2 is transmitted automatically by your browser and cannot be avoided if you wish to view the site; there are no further consequences.
9. Your rights
Under the GDPR you have the right to:
- request access to the personal data held about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- have data erased (Art. 17)
- have processing restricted (Art. 18)
- receive your data in a structured, commonly used and machine-readable format (Art. 20)
- object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) (Art. 21)
- withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3))
To exercise any of these rights, write to the address given in section 1.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority in Austria is the Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, Austria — dsb@dsb.gv.at — www.dsb.gv.at.
10. Changes to this notice
This notice will be updated if the website changes in a way that affects how personal data is handled. The date at the top indicates the current version.