Privacy policy

The party responsible for data processing on this website is Ing. Wolfgang Ruthner. Address and contact details can be found in the legal notice.

For questions about data protection, an informal message to [email protected] is sufficient.

When you visit this website, access data is automatically recorded for technical reasons: IP address, timestamp, page requested, referrer and browser type. The legal basis is the legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). These logs are automatically deleted after seven days at the latest. For the music pages, the section Music: Sinfonia Technica also applies.

The website is delivered via Cloudflare — as a cache and as protection against overload and abuse attempts. For this purpose Cloudflare processes technical connection data, including the IP address (processing on behalf pursuant to Art. 28 GDPR, legitimate interest pursuant to Art. 6(1)(f) GDPR).

To fend off automated access, Cloudflare may set a technical cookie (usually __cf_bm, lifetime around 30 minutes). It serves solely to distinguish humans from machines, not for advertising and not for recognising you across websites. A consent banner is not required for this, because the cookie is technically necessary.

The fonts used (Fraunces, Manrope, JetBrains Mono — all under the SIL Open Font License) are stored on this server and are not loaded from Google Fonts or any other third-party service. No IP address is transmitted to third parties in the process.

The Klarsatz section contains a programming environment that runs entirely in the browser. Programs are not sent to the server and are not stored anywhere: the Python runtime is loaded into the browser and executes the source code there in an isolated background process. There is no server that runs Klarsatz programs.

Progress in the exercises. On the exercises page, the browser remembers which exercises have been solved — in the browser’s local storage (localStorage, key klarsatz-aufgaben-geschafft). This information stays on the device: it is not sent, not analysed and not linked to a person. If you clear the browser’s site data, you also clear the progress.

No tracking pixels, no advertising, no embeds. The Klarsatz section loads nothing from third-party servers — no fonts, no scripts, no videos, no social networks.

On the music pages (overview and the albums “Sinfonia Technica – Rewiring Classics”), usage is recorded statistically so that it is clear which songs are played, downloaded and shared. Events are stored with a timestamp and an assignment to album and song: page view, playback started or finished, download (song or ZIP), sharing, “like” (heart) and visits via a shared link.

What else is stored. The IP address is not stored in full: only a truncated form is kept (for IPv4 without the last segment, e.g. “203.0.113.x”, for IPv6 only the first 48 bits) together with an encrypted comparison value of the full address (HMAC with a secret key that exists only on the server), which allows the same connection to be recognised without the address being recoverable from it. In addition there is a short form of browser and operating system (e.g. “Chrome · Android”, not the full user agent), the browser’s main language (e.g. “de”, only when the page is loaded) and the language of the page requested – so it is clear which language versions are needed – as well as a daily-changing, irreversible identifier used to count visitors per day and limit abuse. The truncated address and comparison value are removed automatically after 30 days; the remaining non-personal counts are retained. The purpose is to distinguish own accesses from those of others, to avoid distorting the figures and to detect abuse.

The legal basis is the legitimate interest in audience measurement and in protection against abuse (Art. 6(1)(f) GDPR). The statistics set no cookies; no data is passed on to third parties and no profiles are built across multiple websites. The data is stored exclusively on this server and can only be viewed by the operator. If your browser sends “Do Not Track”, usage is not recorded. You can object to the recording at any time; an informal message to [email protected] is sufficient.

What stays in the browser. Which songs you have marked with a heart is remembered by your browser in local storage (localStorage, key st-likes-v1) so that the heart stays filled on your next visit. This information stays on your device and is not read out; if you clear the site data, you also clear it. The floating “Sinfonia Radio” player likewise remembers locally (localStorage, key sinfonia-radio-v1) the volume, selected mode, last song played and playback position, so that the music carries on from there after a reload. This too stays on your device. The songs, covers and scripts of the music pages are loaded without embeds from third-party servers.

Buy me a coffee. The “Buy me a coffee” button is an ordinary link to Buy Me a Coffee, an external provider. Only when you click on it does its page open and data is transmitted there; its own privacy policy applies. On the music pages, only the fact that the link was clicked is counted (without stating whether anything is paid).

On the music pages you can optionally sign in with your email address – without a password, via a link we send you by email. Everything keeps working without an account; the account only serves to save your favourite songs (hearts) across devices.

What is stored: your email address, an optional name (it appears in your account and is sent along in the link when you share your favourites), the time of registration and last sign-in, your favourites, the most recently played songs including playback position (at most the last 50) and – only if you switch it on – your “Notify me about new releases” setting. The data is held in a database on the operator’s own server in Austria.

Cookie: After sign-in, a single, technically necessary cookie (sk) is set that keeps you signed in (90 days from last use, HttpOnly, HTTPS only). It contains only a random identifier. Without signing in, no cookie is set; the statistics (see above) remain cookie-free.

Email delivery: Sign-in links (and, if you have agreed, notices about new albums) are sent via the email service Zoho (processor). New-release emails contain an unsubscribe link. The sign-in link is valid for 15 minutes and can be used only once.

Deletion: You can delete your account yourself at any time under My account and download your data there. Accounts that have not been used for 24 months are deleted automatically.

When you submit the contact form, your name, email address, subject and message are processed in order to answer your enquiry. The same applies to an email sent to one of the addresses given. The data is not passed on and is deleted as soon as the enquiry has been dealt with and no statutory retention obligation applies.

You have the right of access, rectification, erasure and restriction of processing of your data, as well as the right to data portability and to object. An informal message to [email protected] is sufficient.

Right to lodge a complaint. You can complain to the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, [email protected].