Datenschutzerklärung pursuant to the GDPR (DSGVO) and the Austrian Data Protection Act (DSG).
The controller responsible for processing personal data on this website is Matthias Scheiber, MATIVIA. Full contact details are listed in the Impressum. For any privacy-related question or request, email mativia.design@outlook.at.
I only process personal data where it's needed to run this website and to answer your inquiries. This site uses no cookies, no advertising and no tracking across other websites, and I never sell your data.
This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you visit the site, Netlify automatically processes the technical data your browser sends: IP address, date and time of the request, requested page, referrer URL, browser and operating system. This is technically necessary to deliver the website and protect it against attacks, and is based on my legitimate interest in a secure, reliable website (Art. 6(1)(f) GDPR). Netlify stores this data only as long as needed for these purposes.
Netlify is certified under the EU–U.S. Data Privacy Framework, which the European Commission has recognised as providing an adequate level of data protection (Art. 45 GDPR). More information: netlify.com/privacy.
If you send me a message via the contact form, I process the data you enter (name, email address, brand / Instagram handle, project type and message) to answer your inquiry and, if it leads to one, to prepare and carry out a project (Art. 6(1)(b) GDPR). Only name, email address and project type are required; everything else is optional.
Form submissions are processed and stored by Netlify (see above) and forwarded to my email inbox. To filter out spam, Netlify checks submissions automatically with the Akismet service (Automattic Inc., USA). Your data is not shared with anyone else.
If you contact me by email or Instagram direct message, I process the data you send me for the same purposes and on the same legal basis as form submissions. My email is hosted by Microsoft (Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Instagram messages are processed by Meta Platforms Ireland Ltd. under Meta's own privacy policy.
Inquiries that don't lead to a project are deleted after six months at the latest. If a project comes about, I keep the related correspondence and invoices for as long as Austrian law requires — generally seven years (§132 BAO) — and delete them afterwards.
To see how many people visit this website and which pages they view, I use the web analytics built into Netlify (see Hosting above). The statistics are calculated on Netlify's servers from the same technical request data described in the hosting section. No tracking code runs in your browser, no cookies are set and nothing is stored on your device. I only see aggregated figures such as page views, the number of unique visitors, the most visited pages and referring websites — never data about individual visitors.
The legal basis is my legitimate interest in understanding and improving my website (Art. 6(1)(f) GDPR).
This website does not set any cookies and does not store or read any information on your device.
All fonts are hosted on this website itself. Your browser does not connect to Google or any other font provider.
This website contains plain links to my Instagram profile. No Instagram content, buttons or tracking is embedded. Data is only sent to Meta Platforms Ireland Ltd. once you click a link and leave this site; from then on, Instagram's privacy policy applies.
This website uses TLS encryption (HTTPS), so data you send, for example through the contact form, can't be read by third parties while it's being transmitted.
Under the GDPR you have the right to access your personal data (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on legitimate interests (Art. 21). To exercise any of these rights, just send me an email. There is no automated decision-making or profiling on this website.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
Last updated: September 2026
