1. General information

The protection of your personal data matters to us. This privacy policy explains which data we process on abfall-abfrage.com, for what purpose, on which legal basis, and which rights you have.

This is a hobby project. There is no advertising, no profiling and no sale of data.

2. Controller

Controller for data processing on this website:

Abfall-Abfrage Converter
E-mail: support@abfall-abfrage.com

3. Hosting and server log files

The website is operated on a web server of a hosting provider. When you visit the site, the web server automatically stores technical access data in log files, in particular:

• IP address
• date and time of the request
• requested URL
• referrer URL (if transmitted)
• browser and operating system (User-Agent)

This data is required to deliver the website, ensure stability and detect abuse. The hosting provider processes it as a processor. Logs are deleted on a regular basis according to the host’s settings.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website).

4. Converter service (link codes and calendars)

If you generate a personal link, we store the data needed to keep the iCal, JSON and XML feeds working:

• Link code and the associated calendar source (iCal/ICS URL, scanned page, uploaded file or Umweltprofis address parameters)
• Optional title mappings (renamed or hidden waste types) for that code
• Uploaded ICS/CSV files as a local file on the server, referenced by the link code
• Local cache of fetched collection dates so feeds can continue if a source is temporarily unavailable

This storage is not temporary in RAM only. The source URL (which may contain address data or access tokens) remains stored until you ask us to delete the code.

Calendar sources are fetched by our server. The provider therefore sees our server, not your IP address. For Umweltprofis, the district, municipality, street and house number you entered are sent to umweltprofis.at so the collection dates can be retrieved.

Legal basis: Art. 6(1)(b) GDPR (processing requested by you to provide the service).

5. Contact form

If you use the contact form or e-mail us, we process:

• name, e-mail address, subject and message
• date and time of the request

The data is used solely to handle your enquiry. It is deleted once the matter is fully resolved, unless statutory retention duties apply. A confirmation e-mail may be sent to the address you provided.

Legal basis: Art. 6(1)(b) GDPR (handling your request) and Art. 6(1)(f) GDPR (documentation and abuse prevention, including CAPTCHA/honeypot).

6. Cookies

We use first-party cookies. They are not deleted automatically when you close the browser, except the session cookie.

6.1 Necessary cookies

• Session cookie (PHPSESSID): session management (e.g. CSRF protection). Deleted when you close the browser.
• cookie_consent: stores your cookie choice (necessary / analytics). Duration: 1 year.
• lang: stores the language (German/English). Duration: 30 days.
• visit_count: simple visit counter for the site. Duration: 30 days.

After you have made a cookie choice, convenience cookies may also be set (duration 30 days): last used link code (last_code), documentation settings (docs_code, docs_day_switch_time) and optional waste-type names (waste_title_mappings).

Legal basis: Art. 6(1)(f) GDPR (necessary operation and stored preferences).

6.2 Analytics cookies (consent only)

Analytics cookies are set only with your explicit consent and can be withdrawn at any time in the cookie settings.

Legal basis: Art. 6(1)(a) GDPR (consent).

7. Usage analytics (consent only)

If you allow analytics cookies, we store the following data for 30 days:

• Anonymised IP address: IPv4 last octet set to 0 (e.g. 192.168.1.0); IPv6 shortened to the first two blocks
• Browser type: Chrome, Firefox, Safari, Edge or Other
• Pages visited and actions (e.g. link generation)
• Timestamp, session ID, referrer and, where applicable, the link code used

This data is not shared for advertising. You can withdraw consent in the cookie settings; no new analytics events will then be stored.

8. Umweltprofis address logs (consent only)

If you use the Umweltprofis function and have allowed analytics cookies, we additionally store for 90 days:

• entered address (district, municipality, street, house number) and technical IDs
• anonymised IP address (as above)
• full User-Agent string, session ID, timestamp
• success/failure and number of collection dates found

Purpose: debugging, identifying frequent regions and improving the service. The data is not sold or used for advertising.

9. Technical API and security logs

Independently of cookie consent, technical logs are written when feeds are retrieved or suspicious requests are detected, in particular:

• link code and endpoint (API/XML/ICS)
• IP address and User-Agent
• response time, status code and, where applicable, error message

Purpose: operation, troubleshooting and protection against abuse.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a stable, secure service).

10. External services

• Google Fonts (Google Ireland Limited / Google LLC): fonts are loaded from Google servers. Your IP address and browser data are transmitted. A transfer to the USA may occur. Google privacy policy
• Font Awesome via Cloudflare CDN (cdnjs): icons are loaded from cdnjs.cloudflare.com. IP address and browser data are transmitted. Cloudflare privacy policy
• Umweltprofis / municipal calendar sources: if you use such a source, we request the collection dates from that provider. For Umweltprofis, the address you entered is transmitted. The provider’s privacy policy applies to that processing.

No data is transferred to third parties for advertising or marketing.

11. Legal bases (summary)

• Art. 6(1)(a) GDPR: analytics and Umweltprofis address logs
• Art. 6(1)(b) GDPR: converter service and contact requests
• Art. 6(1)(f) GDPR: hosting/logs, necessary cookies, API/security logs

12. Storage period

• Link codes, source URLs, title mappings, uploads, calendar cache: until you request deletion, as long as the feed is provided
• Analytics: 30 days
• Umweltprofis address logs: 90 days
• Cookies: see section 6
• Contact messages: until the request is fully handled
• Server, API and security logs: as long as needed for operation and security, then deleted or anonymised

13. Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR) where processing is based on legitimate interest
• Withdraw consent (Art. 7(3) GDPR) with effect for the future, via the cookie settings
• Lodge a complaint (Art. 77 GDPR) with a supervisory authority, in Austria the Data Protection Authority (DSB), Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at

To exercise your rights, e-mail support@abfall-abfrage.com. If you want a link code deleted, please include the code.

There is no automated decision-making including profiling (Art. 22 GDPR).

14. Security

Transmission is encrypted via HTTPS. Access to the server and database is restricted. This does not provide absolute security, but we take appropriate technical and organisational measures.

15. Changes

We may update this privacy policy when the service or the law changes. The current version is always available on this page.

16. Contact

Questions about data protection: support@abfall-abfrage.com

Last updated: August 2026