Legal
Privacy Policy
This Privacy Policy explains how personal data is processed when you use sourceoftrust.com.
Last updated: 5 June 2026
1. Controller
Controller: Stefan Mayr
Legal form: Sole proprietorship
Address:
Wittenbauerstrasse 61
8010 Graz
Austria
Email: [email protected]
VAT ID: ATU72681948
2. General information
We process personal data only where this is necessary to provide this website, protect its security, communicate with users, analyze website usage or comply with legal obligations. Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian data protection laws.
3. Access data and server logs
When you visit this website, technical access data may be processed automatically. This may include the IP address, date and time of access, requested URL, referrer URL, browser type, operating system, device information and similar technical information.
This data is processed to deliver the website, ensure technical stability, detect errors, prevent abuse and maintain website security.
The legal basis is our legitimate interest in operating a secure and functional website according to Article 6(1)(f) GDPR.
4. Cloudflare
This website uses services provided by Cloudflare, Inc. Cloudflare is used as a content delivery network, security service and performance optimization provider. When you access this website, requests may be routed through Cloudflare infrastructure.
Cloudflare may process technical data such as IP addresses, security events, DNS information, request metadata and other technical information required to provide security, caching and delivery functions.
The purpose of this processing is to protect the website against attacks, improve loading speed, increase reliability and provide secure delivery of website content.
The legal basis is our legitimate interest in secure and efficient website operation according to Article 6(1)(f) GDPR.
Further information is available in Cloudflare’s privacy information: Cloudflare Privacy Policy .
5. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics helps us understand how visitors use this website. The information collected may include visited pages, session duration, approximate location, device and browser information, referrer information and interactions with the website.
Google Analytics is only used after you have given your consent through the cookie or consent banner, where such consent is required. You can withdraw your consent at any time through the cookie settings on this website.
The legal basis is your consent according to Article 6(1)(a) GDPR. For access to or storage of information on your device, the applicable legal basis is your consent under the relevant cookie and telecommunications privacy rules.
Google may process data in the United States and other countries. Where required, Google relies on appropriate safeguards for international data transfers.
Further information is available here: Google Analytics Privacy Disclosures and Google GDPR information .
6. Cookies and consent
This website may use technically necessary cookies or similar technologies to provide core website functionality, security features and consent management. These cookies are required for the website to function properly.
Analytics cookies or similar technologies are only used with your consent, where required. You can change or withdraw your consent at any time through the cookie settings on this website.
7. Email communication
If you contact us by email, we process the personal data you provide, such as your email address, your name if provided, the content of your message and related communication metadata.
This data is processed to respond to your request, handle communication and document business correspondence where necessary.
The legal basis may be Article 6(1)(b) GDPR where the communication relates to a contract or pre-contractual request, Article 6(1)(f) GDPR based on our legitimate interest in responding to inquiries, or Article 6(1)(c) GDPR where legal retention obligations apply.
8. Use of website tools
Source of Trust may provide website analysis tools, such as structured data or JSON-LD checks. If you enter a URL into such a tool, the submitted URL and technical analysis results may be processed to perform the requested check and display the result.
Unless explicitly stated otherwise, these checks are used to provide the requested functionality and are not used to create user profiles for advertising purposes.
The legal basis is Article 6(1)(b) GDPR where the processing is necessary to provide the requested tool functionality, and Article 6(1)(f) GDPR based on our legitimate interest in improving and securing the service.
9. Recipients and processors
Personal data may be processed by technical service providers that help us operate, secure and analyze this website. These providers may include hosting providers, Cloudflare and Google Analytics.
Where required, such providers are used on the basis of data processing agreements or other legally recognized safeguards.
10. Retention
Personal data is stored only for as long as necessary for the purposes described in this Privacy Policy, unless statutory retention obligations require a longer retention period.
Technical logs are generally retained only for a limited period required for security, debugging and operational purposes. Email communication may be retained for the duration required by business, tax or legal documentation obligations.
11. Your rights
Under the GDPR, you may have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability and objection to processing. Where processing is based on consent, you may withdraw your consent at any time with effect for the future.
To exercise your rights, please contact us at [email protected].
12. Right to lodge a complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority.
In Austria, the competent authority is:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
Austria
www.dsb.gv.at
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, services, legal requirements or technical setup. The current version is always available on this page.