Privacy
Responsible person and contact
Klaus Cinibulk, Vienna, Austria, is responsible for KC Genuine Exposure at https://kc-genuine-exposure.pages.dev/. This is a private, non-commercial photography website.
Email contact: cini01@gmail.com
Requests and local resources
Loading a page transmits technical connection data to Cloudflare, including the IP address, requested URL, time of request and browser/request headers. These data are needed to deliver pages and assets and to maintain availability and security. Photographs, icons and scripts are served from this website; fonts use the device’s system fonts.
- Cloudflare Web Analytics is disabled. This website uses no own tracking tools, contact forms, newsletters, social embeds, external webfonts or externally embedded media. The application itself sets no cookies.
Cloudflare Pages hosting and legal basis
The website is hosted on Cloudflare Pages. Cloudflare processes technical connection data to deliver pages, detect faults and protect the website from misuse. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in providing a reliable and secure personal photography website. Processing is limited to these technical purposes; Cloudflare Web Analytics is disabled.
Cloudflare may process data outside the European Economic Area. Its published data processing addendum describes processing on customers’ behalf and safeguards for restricted transfers, including standard contractual clauses where applicable. Cloudflare’s privacy policy explains its own processing; its published subprocessor list identifies service providers by service. These documents are linked below. No exclusively EU-based processing or specific account-level contractual arrangements are asserted here.
Technical data are processed for the delivery and security purposes described above. Retention depends on the data category and the applicable Cloudflare service. No fixed account-specific access or security log retention period is stated here; Cloudflare’s privacy policy describes its general retention criteria.
Network Error Logging (NEL)
Cloudflare supplies NEL and Report-To headers. Supporting browsers can send network-failure diagnostics to Cloudflare’s reporting endpoint to help detect connectivity problems. This browser reporting is separate from server access logs and Web Analytics. According to Cloudflare’s NEL documentation, client IPs are processed only during the reporting request and not logged in that pipeline.
The observed policy has success_fraction 0 and max_age 604800 seconds (seven days). This is the browser policy lifetime, not a report or access-log retention period. Browsers may retain the reporting configuration for that time.
Theme preference in localStorage
After an explicit theme change, the browser stores dark or light under genuine-exposure-theme and reads it on later visits across both languages. This appearance preference is not a visitor identifier and is not sent to a server by the application.
There is no programmed expiry. The preference remains until cleared, overwritten or removed by the browser. Remove it using the browser’s site-data settings for this website; clearing it restores the dark default on the next page load. Without storage access, switching still works on the current page.
The purpose is to remember the appearance explicitly requested by the visitor. This requested preference is stored under the necessary-service exception in section 165(3) TKG 2021; the associated processing is based on Article 6(1)(f) GDPR, the interest in retaining the chosen appearance. The preference is not used for tracking.
Social links
Instagram and Facebook are ordinary external links. Loading this website does not load their embeds, scripts or media. Only following a link opens the destination in a new tab and establishes a connection with that provider. Links use noopener noreferrer. The destination then processes connection data under its own privacy practices.
Photographs of identifiable people
This website presents original photographic works for personal photographic expression. Published photographs may include identifiable people, including performers at public cultural events. The publication is considered in its photographic context, taking account of artistic expression, legitimate interests and the rights of the people depicted. Public visibility or participation in an event does not in itself imply consent.
Where personal data are processed on the basis of legitimate interests, Article 6(1)(f) GDPR applies; where consent is the basis, Article 6(1)(a) applies. Applicable rules on artistic expression and image/personality rights remain unaffected. For questions or objections concerning a photograph, contact Klaus Cinibulk at the email address above and identify the photograph or URL. Photographs remain available while they serve the portfolio’s purpose and their continued publication is justified; substantiated objections are reviewed individually.
Your rights and supervisory authority
Where the GDPR applies, you may request access, rectification, erasure, restriction and, where its conditions apply, portability. You may object to processing based on legitimate interests on grounds relating to your situation. Consent may be withdrawn at any time without affecting earlier lawful processing. Contact Klaus Cinibulk using the email address above.
You may lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria; dsb@dsb.gv.at. Official information on rights and complaints is linked below.
Changes to this information
This information concerns the current personal, non-commercial website. It will be updated when relevant processing changes, including any future commercial use or addition of analytics, forms, embeds or other services.