Privacy Policy

1. Data Controller

No Data Protection Officer (DPO) has been appointed, as this website does not process personal data on a large scale or in a manner requiring mandatory DPO appointment under Art. 37 GDPR.

2. Data We Process

Driving Autonom is a read-only editorial website. We do not operate user accounts, comment systems, online shops, or contact forms that collect structured personal data. The categories of data that may be processed are limited to:

• Technical access data (server logs) — processed automatically when you visit any website
• Anonymised usage statistics — collected via self-hosted Matomo analytics (with consent-based cookie tracking)

We do not collect, sell, or share personal data with third parties for marketing purposes.

3. Server Logs

When you access this website, your browser automatically transmits data to our web server. This data is stored in server log files and includes:

• IP address (anonymised after processing; last octet zeroed)
• Date and time of the request
• URL and HTTP method requested
• HTTP response code and data volume transferred
• Referring URL (if transmitted by the browser)
• Browser type and version (User-Agent string)

Legal basis: Art. 6(1)(f) GDPR Legitimate interest — ensuring the technical operation of the website, detecting and preventing attacks, and troubleshooting errors.

Server logs are retained for a maximum of 14 days and are then deleted automatically, unless a specific log entry is required for ongoing security investigation.

4. Analytics — Matomo

This website uses Matomo, an open-source web analytics platform. Matomo is self-hosted on our own server infrastructure — no data is transferred to Matomo's cloud or any third party.

Matomo uses analytics cookies to track visits across sessions. These cookies allow us to measure page views, session duration, referrer sources, geographic region, browser type, and screen resolution. No data is shared with third parties.

The following cookies may be set by Matomo:

• _pk_id.* — persistent identifier cookie (13-month lifetime) used to recognise returning visitors
• _pk_ses.* — session cookie (30-minute lifetime) used to track the current visit

Legal basis: Art. 6(1)(a) GDPR Consent — you will be asked for your consent via a cookie banner before any analytics cookies are set. You can withdraw your consent at any time using the opt-out option below.

IP addresses are anonymised (last octet set to zero) before any processing. No full IP addresses are stored.

Opt-out: You can withdraw consent and prevent all analytics tracking at any time by clicking "Decline" in the cookie banner, or by enabling the "Do Not Track" (DNT) signal in your browser. Matomo honours DNT signals.

5. Fonts & Third-Party Resources

No other external CDN resources (JavaScript libraries, analytics SDKs, social media widgets, or advertising scripts) are loaded from third-party servers.

6. Cookies

This website uses two categories of cookies:

Strictly Necessary Cookies

Technical session cookies may be set by the web server (e.g., load-balancing). These cookies contain no personal identifiers, are deleted when you close your browser, and are strictly necessary for website delivery. Under TKG 2021 §165(3) DSGVO, these do not require consent.

Analytics Cookies (Consent Required)

Consent Required Matomo analytics cookies (_pk_id.*, _pk_ses.*) are only set after you give your explicit consent via the cookie banner displayed on your first visit. You can withdraw consent at any time. See Section 4 for full details on what these cookies track.

Cookie banner: A consent banner is displayed on first visit to this website. Your choice is remembered for 13 months. You may change your preference at any time by clearing your cookies or via your browser settings.

7. Third-Party Services

Unsplash (Article Images)

Hero images on blog articles are served directly from Unsplash's CDN (images.unsplash.com). When your browser loads an article page, your IP address is transmitted to Unsplash Inc. (USA) to retrieve these images. Image URLs are embedded at build time and do not include user-identifying parameters.

Legal basis: Art. 6(1)(f) GDPR Legitimate interest in delivering licensed editorial imagery. You may block image loading via browser settings; articles remain fully readable.

Unsplash's privacy policy is available at unsplash.com/privacy.

Tailwind CSS CDN

The website's stylesheet is loaded from cdn.tailwindcss.com. Your IP address is transmitted to this CDN on each page load. No personal data is processed beyond standard server log data.

Planned migration: We intend to self-host the compiled CSS to eliminate this transfer.

8. Your Rights under GDPR (DSGVO)

As a data subject under EU Regulation 2016/679, you have the following rights with respect to personal data concerning you:

1. Right of access (Art. 15 GDPR) — You may request confirmation of whether we process personal data about you, and if so, obtain a copy.
2. Right to rectification (Art. 16 GDPR) — You may request correction of inaccurate personal data.
3. Right to erasure (Art. 17 GDPR) — You may request deletion of your personal data, subject to legal retention obligations.
4. Right to restriction (Art. 18 GDPR) — You may request that we restrict processing of your data under certain conditions.
5. Right to data portability (Art. 20 GDPR) — Where processing is based on consent or contract and carried out by automated means, you may receive your data in a structured, machine-readable format.
6. Right to object (Art. 21 GDPR) — You may object at any time to processing based on legitimate interest (Art. 6(1)(f) GDPR). We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
7. Right to withdraw consent (Art. 7(3) GDPR) — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at vincenz@doerteam.com. We will respond within one month (Art. 12(3) GDPR). No fee is charged for reasonable requests.

9. Data Retention

We retain personal data only for as long as necessary for the stated purpose or as required by applicable law:

• Server log files: Maximum 14 days, unless retained for security investigation
• Matomo analytics data: Aggregated, anonymised data retained indefinitely; no individual-level data is stored

10. Changes to this Policy

We may update this Privacy Policy to reflect changes in our data processing practices, legal requirements, or technology. Material changes will be noted with an updated "Last updated" date at the top of this page. We recommend reviewing this page periodically.

11. Contact & Right to Lodge a Complaint

For any questions, requests, or concerns regarding data protection, contact us at:

You have the right to lodge a complaint with the competent supervisory authority at any time. In Austria, this is the: