Last updated: July 2026 · in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG)
The controller within the meaning of Art. 4(7) GDPR is:
Ben McElligott
Statzinger Straße 3
4225 Luftenberg, Austria
Email: hello@firn.media
Protecting personal data is important to me. Personal data is processed exclusively within the framework of applicable data protection law. This website is deliberately data-minimal: no analytics or tracking services, no advertising networks, and no social media plugins are used.
When this website is accessed, the web server (or an upstream service) automatically collects and stores information in server log files: the accessing device's IP address, date and time of access, the requested URL and amount of data transferred, HTTP status code, referrer URL, and the browser, its version, and operating system used.
This data is technically required to deliver the website, ensure its stable and secure operation, and defend against attacks. This data is not combined with other data sources, and no individual identification takes place.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technically error-free and secure operation of the website).
Retention: Log data is deleted or anonymised after 180 days at the latest, unless it is needed for longer to investigate a specific security incident.
This website is hosted by the following provider, acting as a processor under Art. 28 GDPR:
Contabo GmbH
Aschauer Straße 32a, 81549 Munich, Germany
Contabo processes the server log data described above on my behalf for the purpose of operating the website. A data processing agreement (DPA) is in place with Contabo. Processing takes place in a data centre within the EU/EEA.
Note: please confirm the actual server location for Firn Media and adjust if it differs from the other projects.
To deliver this website securely, quickly, and reliably, and to defend against attacks (e.g. DDoS), the Cloudflare service is used:
Cloudflare, Inc.
101 Townsend St, San Francisco, CA 94107, USA
Cloudflare acts as a reverse proxy in front of this website, meaning traffic is routed through Cloudflare's servers, and Cloudflare processes visitors' IP addresses and request data. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and availability). Cloudflare may also transfer data to the US; a Data Processing Addendum and the EU Standard Contractual Clauses are in place as appropriate safeguards under Art. 44 et seq. GDPR. Details: cloudflare.com/trust-hub/gdpr.
This website loads web fonts (Fraunces, Inter, IBM Plex Mono) via the Google Fonts content delivery network (fonts.googleapis.com, fonts.gstatic.com). Loading the page therefore establishes a connection to servers operated by Google LLC / Google Ireland Limited, and the visitor's IP address is transmitted to Google.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a consistent, performant presentation of the website). More on how Google handles user data: policies.google.com/privacy.
Note: unlike i3mc.eu, which self-hosts its fonts, Firn Media currently uses the Google Fonts CDN. Fonts can be self-hosted here too on request, to avoid this data transfer.
Two kinds of cookies are used for the regular operation of this website, both technically
necessary: a session cookie set when logging into the non-public admin area (CMS), used solely
to maintain the logged-in session, and a cookie (firn_consent) that stores your
choice regarding embedded YouTube videos (see section 8), so you don't have to make that choice
again on every page visit.
Legal basis: Art. 6(1)(f) GDPR / §165(3) TKG 2021 (technically necessary, no consent required to store these cookies themselves).
Individual project pages may embed videos from YouTube. These are embedded in Google's
privacy-enhanced mode via the youtube-nocookie.com domain.
Videos are not loaded automatically. Initially, only a thumbnail with a play button is shown. Only once you actively click that button, or consent to the use of embedded content via the cookie notice at the bottom of the screen, is a connection established to Google's servers and the video loaded. Doing so transmits your IP address and possibly other device data to Google; Google may link this data to an existing Google account and transfer it to the US.
The controller for this processing is:
Google Ireland Limited
Gordon House, Barrow Street, Dublin 4, Ireland
(Parent company: Google LLC, USA)
Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time, with effect for the future, via the "Cookie settings" link in this website's footer.
More information on how Google processes data is available in Google's privacy policy and YouTube's terms of service.
If you submit an inquiry via this website's contact form, the data you provide (name, email address, and message content) is processed and stored for the purpose of handling your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual measures) or Art. 6(1)(f) GDPR (responding to the inquiry). This data is not passed on to third parties and is deleted once it is no longer required for its purpose, unless statutory retention obligations apply.
Note: once the contact form is connected to an actual delivery/storage path (e.g. email delivery, an external form service), please update this section with the specific technical route and any additional processor involved.
You have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). An informal message to the email address above is sufficient to exercise these rights.
If you believe the processing of your data violates data protection law, you have the right to lodge a complaint with the supervisory authority. In Austria, this is:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna
Email: dsb@dsb.gv.at · Web: www.dsb.gv.at
This website uses TLS/SSL encryption for secure data transmission (recognisable by "https" in the browser's address bar).
This page is based on i3mc.eu's privacy policy, adapted for Firn Media (in particular section 6 on Google Fonts, section 8 on embedded YouTube videos, and section 9 on the contact form, which don't appear on i3mc.eu). It is an informational translation — the German version is legally authoritative — and does not constitute legal advice.