Privacy
In short: you can use einfach.wien without an account and without cookies. What you enter stays in your browser unless you explicitly choose an account or an e-mail reminder.
Contents
Controller: Vidoslav Poryazov, 2486 Landegg. E-mail: info@einfach.wien
Without an account
Your browser stores your answers, plans and dates on your device until you delete them. Only your answers, ticks and dates are stored. You can remove any plan on its page with “Delete on this device”, or everything at once via “Manage my data” below. With “Keep only for this tab” in the settings, storage ends when you close the tab. Search, the help bot, the letter helper and text recognition work in your browser. Nothing is sent to us.
Storage on your device
einfach.wien only stores on your device what the functions you use need: your plans and dates, settings such as reading view and colour scheme, the help bot history for this session, your consent to the city map for this session and, when you are signed in, a session cookie. This storage is technically necessary so that the site does what you explicitly want (§ 165(3) of the Austrian Telecommunications Act 2021). It needs no separate consent. There are no advertising or tracking cookies.
Account (optional)
We store your e-mail address, a check value of your password (not the password) and your plans. The plans are encrypted in your browser, so we cannot read them. While you are signed in there is a technically necessary session cookie. The legal basis is the use of the account (Art. 6(1)(b) GDPR). You can delete the account and data yourself at any time. Storage period: the account data is kept until you delete the account. The session cookie ends when you sign out, at the latest after 30 days.
E-mail reminders (optional)
For a reminder we store your e-mail address, the date and the short label you choose. Nothing is sent until you confirm your address via a link. Every e-mail has an unsubscribe link. After sending, at the latest 30 days after the date, we delete the reminder. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. So that nobody can flood other people’s addresses with requests, we store a non-reversible check value (hash) of your network address, not the IP address itself, until you confirm. It is deleted on confirmation, at the latest after 48 hours. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). Sent via Cloudflare Email Service (Cloudflare, Inc., USA) as a processor.
E-mails to us
When you write to info@einfach.wien, Cloudflare Email Routing (Cloudflare, Inc., USA) forwards your message to the operator’s personal mailbox. The provider of that mailbox also stores the message. We use your message only to reply to you. The legal basis is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the message once your enquiry is settled, at the latest after 12 months. Please do not send ID documents, official decisions or health data by e-mail.
Anonymous statistics and feedback
We only count how often pages and functions are used: without cookies, without IP addresses and without profiles. Ratings and error reports are stored without any link to you and deleted after 13 months. The legal basis is our legitimate interest in a better website (Art. 6(1)(f) GDPR). We also delete the counts after 13 months. An optional comment on a rating is stored only with your consent. Before that we remove anything that looks like personal details, and we delete it after 90 days. Please still do not write names, addresses or numbers in it.
We also count which website a visit comes from, whether it comes from a phone or a computer, and from which country. Cloudflare derives the country from the connection; we do not store the IP address. Browsers with “Do Not Track” are not counted at all.
Hosting and map
The site runs on Cloudflare (Cloudflare, Inc., USA) as a processor. When you visit, Cloudflare processes technically necessary connection data such as the IP address to deliver the site and protect it from attacks. The transfer to the USA is based on the EU-US Data Privacy Framework. To prevent abuse, the site counts requests briefly in memory without storing them. How long Cloudflare keeps this connection data is set out in Cloudflare’s privacy policy.
The office map first shows only a simple sketch, without any request to other servers. Only when you click “Show city map” does it load map images of the basemap.at base map from the City of Vienna’s map server (maps.wien.gv.at). That server then sees your IP address. The legal basis is your consent given by this click (Art. 6(1)(a) GDPR). Your choice applies only to this session in your browser.
Obligation to provide data and automated decisions
You do not have to give us any data. You can use everything without an account and without reminders; only for these do we need your e-mail address. There is no automated decision-making and no profiling.
Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection. Write to the e-mail address above. You can also complain to the Austrian Data Protection Authority (dsb.gv.at).
No advertising, no selling of data, no third-party AI services.
As of: 17 October 2026
Manage my dataChoose a plan