Datenschutzerklärung / Privacy Policy
Last updated: 18 May 2026
This privacy policy explains how personal data is processed on eithneknappitsch.com. It is provided in accordance with the EU General Data Protection Regulation (GDPR) and the Austrian Datenschutzgesetz (DSG).
1. Controller / Verantwortliche Person
FH-Prof. Dr. Eithne Knappitsch
School of Management
Carinthia University of Applied Sciences
Europastraße 4
9524 Villach
Austria
Email: e.knappitsch@cuas.at
Eithne Knappitsch is the controller of personal data collected on this website in accordance with Article 4(7) GDPR.
2. What data is collected and why
2.1 Visiting the website
When you visit eithneknappitsch.com, the following data is automatically processed by the hosting infrastructure:
- IP address (anonymized where technically possible)
- Date and time of access
- Pages visited and time spent
- Browser type and version
- Operating system
- Referring website
This data is processed on the legal basis of Article 6(1)(f) GDPR (legitimate interest) for the purpose of secure website operation, fault analysis, and protection against malicious activity.
This data is processed by: Hostinger International Ltd. (hosting provider) — see Section 6.
Server log files are retained for a maximum of 30 days and then automatically deleted.
2.2 Newsletter subscription (Signal)
Eithne Knappitsch publishes a monthly long-form essay called “Signal” via Substack. If you subscribe via the embedded signup forms on this website, your email address is processed by Substack Inc. (USA) on the legal basis of Article 6(1)(a) GDPR (consent).
Data collected by Substack at signup:
- Email address
- Optional: first name, last name
- Subscription metadata (date, source page)
You can unsubscribe at any time using the link in any email sent to you, or by emailing e.knappitsch@cuas.at to request deletion.
Substack is based in the United States. International transfer of personal data to the US is conducted under Standard Contractual Clauses (SCCs) and Substack’s privacy framework. For details, see Substack’s Privacy Policy at https://substack.com/privacy.
2.3 Contact via email
If you contact Eithne Knappitsch via email at e.knappitsch@cuas.at, the data you provide (name, email content, attachments) is processed on the legal basis of Article 6(1)(b) GDPR (performance of a request) or Article 6(1)(f) GDPR (legitimate interest in responding to professional correspondence).
Email correspondence is retained as long as necessary for the purpose of the communication or as required by applicable retention laws.
3. Cookies
This website uses only strictly necessary cookies required for WordPress core functionality and security. No tracking, analytics, advertising, or third-party cookies are set by this site.
Cookies set:
- WordPress session cookies (strictly necessary)
- Cookies set by the embedded Substack subscribe form (only when the form is interacted with)
You can disable all cookies in your browser settings. Doing so may limit functionality of embedded forms.
4. Third-party services and embedded content
This website integrates content and forms from external services. When you view a page containing embedded third-party content, your browser establishes a connection with the third party’s servers, which may receive your IP address and basic browser information.
Third-party services used:
4.1 Substack (Substack Inc., USA)
Used for: newsletter subscription form (Signal)
Pages affected: home page, /writing, individual essay pages
Data transferred: IP address, browser metadata, subscription data (if user submits)
Privacy policy: https://substack.com/privacy
4.2 Hosting (Hostinger International Ltd.)
Used for: website hosting and delivery
Data transferred: as described in Section 2.1
Privacy policy: https://www.hostinger.com/legal/privacy-policy
4.3 Web fonts
Fonts (Source Serif 4 and Inter) are self-hosted on this website’s own server. No font data is loaded from third-party CDNs (Google Fonts, Adobe Fonts, etc.). No data is transferred to font providers when you visit this site.
5. Your rights under GDPR
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): You may request confirmation of whether your data is being processed, and if so, request a copy of that data.
- Right to rectification (Art. 16 GDPR): You may request correction of inaccurate personal data.
- Right to erasure (Art. 17 GDPR): You may request deletion of your personal data, subject to legal retention requirements.
- Right to restriction (Art. 18 GDPR): You may request restriction of processing under certain conditions.
- Right to data portability (Art. 20 GDPR): You may request your data in a structured, machine-readable format.
- Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests.
- Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw consent at any time.
- Right to lodge a complaint (Art. 77 GDPR): You may lodge a complaint with the Austrian data protection authority: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien, Email: dsb@dsb.gv.at, Web: www.dsb.gv.at
To exercise any of these rights, contact: e.knappitsch@cuas.at
6. Data processors
The following third parties process personal data on behalf of Eithne Knappitsch under data processing agreements (Art. 28 GDPR):
- Hostinger International Ltd. (hosting) — server location within the EU
- Substack Inc. (newsletter platform) — server location in the United States, transfers under Standard Contractual Clauses
7. Data retention
Personal data is retained only as long as necessary for the purposes outlined in this policy or as required by applicable law:
- Server log files: 30 days maximum, then automatically deleted
- Newsletter subscriber data: until you unsubscribe or request deletion
- Email correspondence: as long as necessary for the purpose, typically 3 years
- Data subject to statutory retention obligations (e.g., tax law) may be retained longer
8. Security
This website uses industry-standard security measures including HTTPS encryption for all data transmission. Despite security efforts, no method of transmission over the internet is 100% secure.
9. Changes to this policy
This privacy policy may be updated to reflect changes in legal requirements, technology, or website functionality. The current version is always available at eithneknappitsch.com/privacy. Material changes will be communicated to newsletter subscribers via email.
10. Contact
Questions about this privacy policy or about how your data is processed:
Eithne Knappitsch
Email: e.knappitsch@cuas.at
You may also contact the Austrian Data Protection Authority (see Section 5).
This privacy policy was last updated on 18 May 2026.