Privacy

Data controller

Marsel Nenaj Seitenstettengasse 5/37 1010 Vienna, Austria

Visiting this website

This website displays static project information. It has no analytics or advertising services, embedded social media, contact forms or user accounts. Fonts, images and icons are loaded from the same origin as the website.

Loading a page necessarily sends connection data, such as your IP address and the requested address, to the server delivering it. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is providing a secure, working website.

This website cannot access your Microsoft sign-in, game installation, saves or launcher logs. The separately installed Flightdeck app and services used within it are not part of this website. Starting a game from the launcher connects the app to Microsoft/Xbox services for automatic save synchronization. Cloud saves are loaded before launch and local changes are uploaded after exit. Local copies of downloaded cloud saves and local backups are stored on your computer. Saves and sign-in tokens are not sent to this website.

Hosting, Cloudflare and recipients

We use IONOS to host this website. A data processing agreement pursuant to Article 28 GDPR is in place with the hosting provider. The website is delivered and secured through Cloudflare’s network. Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, receives your browser’s connection. Requests for locally hosted images and fonts also pass through Cloudflare; local hosting does not mean that no infrastructure provider is involved.

Delivery and security may involve processing the IP address, time, requested URL, HTTP status, amount of data transferred and browser-supplied browser and operating-system information. The purposes are delivering requested content, availability, troubleshooting and preventing attacks. The legal basis is Article 6(1)(f) GDPR; these purposes constitute our legitimate interests.

Recipients are the providers used for hosting, network delivery and IT security and their necessary subprocessors. Email enquiries additionally involve email service providers. The data is not sold for advertising.

Cloudflare operates an international network. Processing outside the European Economic Area, particularly in the United States, is possible. Cloudflare identifies the EU-US Data Privacy Framework for transfers from the EEA to the US and describes EU Standard Contractual Clauses and supplementary measures as a fallback or for other covered international transfers. The relevant contractual information is linked below; you may contact us for information about the recipients and transfer safeguards used for this website.

Technical network error reports

Cloudflare currently sends the HTTP headers “NEL” and “Report-To”. Supporting browsers can use them to send reports about failed network connections to a Cloudflare endpoint. This works without JavaScript. The current configuration does not request reports about successful requests (success_fraction: 0).

Reports may include the requested URL, error type, connection time and technical browser or network information; the IP address is also involved when a report is sent. The purpose is technical troubleshooting and website availability under Article 6(1)(f) GDPR.

The current header allows a browser to retain the reporting policy for up to seven days; another request may renew that period. This browser-policy lifetime does not specify how long Cloudflare retains reports on its servers. It is not an analytics or advertising cookie set by us.

According to Cloudflare’s documentation, the IP address is processed transiently in memory when handling a NEL report and is not logged in its NEL pipeline. This statement applies only to NEL reports, not to all CDN or security data.

Retention of technical data

The origin web server does not have a separate access log configured for individual page requests. This does not exclude technical operational and security data processed by the hosting or network provider.

Technically necessary data is retained according to the relevant delivery, troubleshooting or security purpose. Data relating to specific faults or attacks may be retained until clarification and, where necessary, for establishing or defending legal claims. Longer retention applies only where a legal obligation or a continuing specific purpose requires it. Cloudflare’s privacy information linked below describes its processing.

Your language choice

When you select DE or EN, you open the corresponding static language version of this page. The language choice is part of the requested address and is sent to the web server with that request.

The website does not store your language choice in cookies, sessionStorage or localStorage. Links within a language version retain that language. The main address opens the German version; the English version is available at /en/.

The static pages use no JavaScript and set no analytics or advertising cookies. Language selection requires no storage on your device. The technical network error reports described above are a separate mechanism.

External links and downloads

Links to GitHub and other external websites connect to those services only when you open them. Source code and release downloads take you away from this website to GitHub. The destination provider’s privacy information applies there, including its handling of connection data. External links from this website do not send a referrer.

Email contact

If you email us, we process your email address, message and any information you choose to provide to handle your enquiry. Our legitimate interest in responding is the legal basis under Article 6(1)(f) GDPR. The email providers involved handle delivery and storage.

We retain correspondence only as long as needed to handle and clarify the enquiry. Where statutory retention duties or the establishment or defence of specific legal claims require longer retention, we restrict further storage to that purpose.

Providing your data

You are not legally or contractually required to email us or provide personal information for an enquiry. Without a reachable contact address and the information needed for your enquiry, however, we may be unable to respond. Technical connection data is needed to deliver the requested web pages to your browser.

Your rights

Subject to the legal conditions, you have rights of access, rectification, erasure and restriction of processing. Data portability applies in particular to automated processing based on consent or a contract; it does not automatically apply to all processing based on legitimate interests.

Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. We will stop that processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or processing is needed for establishing, exercising or defending legal claims.

You may withdraw any consent you have given at any time for the future, without affecting the lawfulness of processing before withdrawal. We do not rely on consent for the ordinary website requests and contact enquiries described above.

Contact hallo@nenaj.at for privacy requests. We generally respond within one month of receipt. If a legally permitted extension is needed, we inform you within that month of the reasons and additional period.

You may complain to a supervisory authority, particularly in the place of your habitual residence, workplace or the alleged infringement. In Austria: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at, https://dsb.gv.at/.

We do not make solely automated decisions through this website that produce legal or similarly significant effects within Article 22 GDPR, or create advertising profiles. Automated technical security checks by the network provider are distinct from such decisions.