Privacy policy

Last updated: October 2026 · This is a translation for your convenience. In case of doubt, the German version prevails.

Protecting your data matters to us. Here you can find out which data we process, for what purpose, on what legal basis and what rights you have. We process data exclusively in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

1. Controller

Müllner Performance & Trading GmbH
Seestrasse 20a, 7141 Podersdorf am See, Austria
Email: info@websiteerstellen.eu

2. Visiting the website

When you access our pages, the web server processes technically necessary data: IP address, date and time, page requested, browser and operating system. In addition, we log page views with IP address, approximate country (via our service provider Cloudflare), referring page and device type in order to detect misuse and evaluate the reach of our offer. The legal basis is our legitimate interest in secure and economical operation (Art. 6(1)(f) GDPR). These server logs are deleted automatically after 30 days at the latest; no cookies are set for this and the data is not passed on to third parties.

We use no analytics or advertising cookies and no tracking. Fonts are hosted locally; no data is transmitted to Google Fonts.

3. Brief and draft package

When you describe a website and order the draft package, we process the details from the form: name, email address, company name, industry, your description and wishes for the website, the desired website language and later your change requests. We use them to create your drafts, send you the access link and invoice, and perform the contract (Art. 6(1)(b) GDPR).

If you request an individual website, we process the details from the enquiry form (name, company, email address, phone, your description, links and uploaded files) in order to assess your project and make you an offer (Art. 6(1)(b) GDPR). To prepare the offer, we may have your description summarised by the Claude AI (see section 4). If no contract is concluded, we delete the enquiry including files after 12 months at the latest.

So that form entries are not lost when going back, they are temporarily stored in your browser’s memory (sessionStorage). This data does not leave your browser and is deleted when you close the tab.

4. Text creation with artificial intelligence (Claude)

To create the drafts, we transmit your brief and change requests to Anthropic PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA (provider of the Claude AI model). Your data is processed there only to create the response and, according to Anthropic’s commercial terms, is not used to train the AI models. The legal basis is performance of the contract (Art. 6(1)(b) GDPR). The transfer to the USA is based on the EU Commission’s standard contractual clauses (Art. 46 GDPR). Please do not include sensitive data in the brief that is not needed for your website.

5. Payment via PayPal

We process payments via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. When paying, you are redirected to PayPal and enter your payment details (PayPal account or card) directly there; we do not receive any card or account details, only name, email address, address where applicable, amount, transaction number and payment status. The legal basis is performance of the contract (Art. 6(1)(b) GDPR) and fraud prevention (Art. 6(1)(f) GDPR). PayPal is itself responsible for the processing on its side and may also transfer data to affiliated companies outside the EU. More: PayPal privacy statement.

6. Hosting and email

This website is hosted by Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA. All the data mentioned above is stored there and emails are sent from there. A data processing agreement is in place with Namecheap; the transfer to the USA is based on standard contractual clauses (Art. 46 GDPR).

Traffic to this website runs through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which makes the website faster and more secure (protection against attacks) and tells us the approximate country of origin of a request. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR); Cloudflare is certified under the EU-US Data Privacy Framework. More: cloudflare.com/privacypolicy.

7. Photos in examples and drafts

The photos in example websites and drafts are loaded from the image service Unsplash Inc. (Canada). Your IP address is transmitted to Unsplash so that the images can be displayed (legitimate interest in an attractive presentation, Art. 6(1)(f) GDPR). An adequacy decision of the EU Commission exists for Canada. More: unsplash.com/privacy.

8. Customer account, AI function and cookies

To sign in to the customer account, we send a one-time link to your email address. After signing in, we set a technically necessary session cookie that is deleted when you close the browser; the same applies to the admin area (Art. 6(1)(b) and (f) GDPR). The page with your drafts works via your personal link and needs no cookies.

If you use the AI function in your website’s CMS after buying, your website transmits the current texts and your request to our platform, which passes them on to Anthropic for processing (see section 4). We store how many AI edits have been used in order to manage your credits.

9. Storage period

We store briefs, drafts and contact details as long as necessary for the contract and the operation of your website. If you don’t buy a website, we delete the brief and drafts after 12 months. We keep invoices and accounting records for 7 years because the law requires it (§ 132 Austrian Federal Fiscal Code).

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15 to 21 GDPR). Simply write to us at info@websiteerstellen.eu.

If you believe that we are not processing your data lawfully, you can lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at, or with the authority in your country of residence.

11. Obligation to provide data

We need your name, email address and description to create and send you your drafts. Without these details we cannot accept the order. There is no automated decision-making within the meaning of Art. 22 GDPR; the AI only creates text suggestions.