--- title: "Privacy Policy | Austrian Photographer Network | ZERA" description: "ZERA is an Austrian photographer network from Styria: storytelling photography, video and editing, plus blogs and projects by our members." canonical_url: "https://zera.at/privacypolicy" locale: en meta: author: "Zera Photography Network" "og:description": "ZERA is an Austrian photographer network from Styria: storytelling photography, video and editing, plus blogs and projects by our members." "og:image": "https://zera.at/meta.webp" "og:image:alt": ZERA "og:title": "Privacy Policy | Austrian Photographer Network | ZERA" --- > Index of every page on this site: [llms.txt](https://zera.at/llms.txt) Legal # Privacy Policy Last updated: October 15, 2026 Protecting your data matters to us. This policy explains which personal data we process when you visit zera.at and use your account, for what purpose and on which legal basis (General Data Protection Regulation, GDPR; Austrian Telecommunications Act 2021, TKG). This is a convenience translation; the German version is binding. ### 1. Controller Jonas Skof \[Straße Hausnummer – bitte ergänzen] \[PLZ Ort – bitte ergänzen], Austria Email: [hello@zera.at](mailto:hello@zera.at) ### 2. Hosting and server logs The website runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, with whom we have a data processing agreement. Whenever a page is requested, the web server processes technically necessary data: IP address, date and time, requested address, referrer, browser and operating system. This is required to deliver the site and to fend off attacks (Art. 6(1)(f) GDPR). Log data is kept only briefly for troubleshooting and is not combined with other data. ### 3. Cookies and local storage Without your consent we only set cookies and storage entries that are strictly necessary for the website (§ 165(3) TKG, Art. 6(1)(f) GDPR): - **Sign-in** ( `sb-…`): keeps you signed in after login. - **Session state** ( `authStore`, `blogStore`, `projectStore`): remembers your sign-in status with profile details and the IDs of content you are currently editing. - **Cookie choice** ( `zera_consent`, 6 months): stores your choice in the cookie notice. - **Appearance** (local storage): light or dark mode. Advertising cookies (see section 9) are only set if you choose “Accept all” in the cookie notice (Art. 6(1)(a) GDPR). You can change or withdraw your choice at any time via cookie settings (also in the footer). ### 4. Account and content For an account we process your email address, password (stored only as a hash), name and optional profile details (profile and background image, biography, links to Instagram, X or your website). In addition, we process the content you create: projects, blog posts, comments, likes, chat messages, media files, course progress and achievements, as well as your online status and the time of your last activity. The legal basis is the performance of the user agreement (Art. 6(1)(b) GDPR). Your profile, published projects and blog posts, and comments are publicly visible. Chat messages are only visible to their participants. You can delete your account at any time in the settings; this removes your profile, content and uploaded files. Accounts, database and files are operated for us by Supabase Inc. (USA) as a processor. The data is stored in a data centre in London (United Kingdom, covered by an EU adequacy decision). Where Supabase accesses it from outside the EU, this is based on the EU Standard Contractual Clauses. ### 5. Sign in with Google If you sign in with Google, we receive your name, email address and profile picture from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Art. 6(1)(b) GDPR). Google's [privacy policy](https://policies.google.com/privacy) applies to processing by Google. ### 6. Contact, membership requests, bug reports and email The contact form transmits your name, email address, subject and message; the membership request also transmits first name, last name, city, equipment, availability and message. We use this data only to handle your request (Art. 6(1)(b) or (f) GDPR). Forms and system emails (e.g. welcome emails) are sent via Resend, Inc. (USA); emails to ZERA addresses are received via Resend and stored in our database. Transfers to the USA are based on the EU Standard Contractual Clauses. Bug reports submitted on the support page (email address, description, steps) are stored so that we can fix the issue and reply to you if needed. ### 7. Post editor When you write blog posts or courses, your browser loads the TinyMCE editor from servers of Tiny Technologies, Inc. (USA), which receives your IP address. This only concerns signed-in users in the editor and is required for this feature (Art. 6(1)(b) GDPR). ### 8. Videos in the Academy Academy courses may contain videos from YouTube (Google Ireland Limited, privacy-enhanced mode) or Vimeo (Vimeo.com, Inc., USA, with “Do Not Track”). Only when you open such a lesson does your browser connect to the provider, transmitting your IP address among other data. ### 9. Advertising (Google AdSense) Only if you consent do we show ads from Google AdSense on blog pages (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google uses cookies and similar technologies to deliver, measure and, where applicable, personalise ads, processing your IP address and device information among other data. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, § 165(3) TKG), which you can withdraw at any time with effect for the future via cookie settings. See [Google's advertising information](https://policies.google.com/technologies/ads) for details. ### 10. Fonts and images All fonts are hosted on our own server; no connection to Google Fonts or other font providers is made when you visit the site. Images are loaded from our server or from storage at Supabase (section 4). ### 11. Retention We keep data only as long as necessary for its purpose: account data and content until you delete your account, requests until they have been fully handled, unless statutory retention obligations apply. ### 12. Your rights You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. Please write to [hello@zera.at](mailto:hello@zera.at). If you believe we process your data unlawfully, you can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, [www.dsb.gv.at](https://www.dsb.gv.at)). ### 13. Changes We update this policy when the website or the legal situation changes. The version published here applies. ```json {"@context":"https://schema.org","@graph":[{"@id":"https://zera.at/#website","@type":"WebSite","description":"Austrian photographer network: stories, projects and photography blogs.","inLanguage":"en-US","name":"Austrian Photographer Network | ZERA","url":"https://zera.at/","publisher":{"@id":"https://zera.at/#identity"},"workTranslation":{"@id":"https://zera.at/de#website"}},{"@id":"https://zera.at/privacypolicy#webpage","@type":"WebPage","description":"ZERA is an Austrian photographer network from Styria: storytelling photography, video and editing, plus blogs and projects by our members.","name":"Privacy Policy","url":"https://zera.at/privacypolicy","isPartOf":{"@id":"https://zera.at/#website"},"potentialAction":[{"@type":"ReadAction","target":["https://zera.at/privacypolicy"]}],"primaryImageOfPage":{"@id":"https://zera.at/#logo"}},{"@id":"https://zera.at/#identity","@type":"Organization","alternateName":"Zera Photography Network","email":"hello@zera.at","name":"ZERA","url":"https://zera.at","logo":{"@id":"https://zera.at/#logo"},"sameAs":["https://www.instagram.com/zera.network"]},{"@id":"https://zera.at/#logo","@type":"ImageObject","caption":"ZERA","contentUrl":"https://zera.at/logo.svg","inLanguage":"en-US","url":"https://zera.at/logo.svg"}]} ``` ## Sitemap See the full [sitemap](https://zera.at/sitemap.md) for all pages.