Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Manuel Fally

• Website: www.manuelfally.com

• Email: contact@manuelfally.com

Further legal and contact information can be found in the Imprint of this website.

2. General Principles

I process personal data only where there is an appropriate legal basis for doing so.

Depending on the individual situation, processing may in particular be based on:

• Article 6(1)(a) GDPR - Consent, where you have actively consented to a particular type of processing

• Article 6(1)(b) GDPR - Contract or pre-contractual measures, where processing is necessary in connection with a request made by you or a contractual relationship

• Article 6(1)(c) GDPR - Legal obligation, where processing is necessary to comply with a legal requirement

• Article 6(1)(f) GDPR - Legitimate interests, where processing is necessary for a legitimate interest and your interests or fundamental rights and freedoms do not override that interest

I only retain personal data for as long as it is necessary for the respective purpose or as long as I am legally required to retain it. Where an exact retention period cannot reasonably be specified in advance, the criteria described in the relevant section below apply.

3. Hosting and Google Sites

This website is created and hosted using Google Sites, a service provided by Google.

When you access the website, technical information necessary to establish and maintain the connection may be processed by Google. Depending on the circumstances, this may include information such as your IP address, browser and device information, the requested page, date and time of access, and other technical information.

This processing is necessary to deliver the website, maintain its security and ensure its reliable operation. To the extent that I determine this processing, my legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and technically reliable operation of my website.

Google may process data on servers in different countries, including outside the European Economic Area (EEA). Google LLC participates in the EU-U.S. Data Privacy Framework. Where applicable, Google may also use other legally recognised safeguards for international data transfers.

Further details about Google's processing of data are available in Google's Privacy Policy and its information about how Google uses data from websites and apps that use Google services.

4. Cookies and Consent on Google Sites

Google Sites uses cookies and similar technologies for the operation of websites and Google services.

For visitors in regions where consent is required, Google Sites provides a consent notice through which non-essential cookies can be accepted or rejected.

Essential or technically necessary technologies may be used without consent where they are required to provide the website or a service explicitly requested by you.

Where non-essential cookies or comparable technologies require consent, the legal basis for the associated processing is Article 6(1)(a) GDPR in conjunction with the applicable rules on storing or accessing information on your device.

You may reject non-essential cookies through the Google Sites consent dialog. You can also delete previously stored cookies through your browser settings.

Please note that the exact technical implementation of the consent mechanism is provided by Google as part of the Google Sites platform and is therefore not independently developed or operated by me.

5. Google Analytics

I use Google Analytics to obtain statistical information about how my website is used. This helps me understand, for example, which parts of the website are visited and how visitors interact with its content.

Google Analytics may process information such as:

• Pages visited

• Approximate geographic information

• Browser and device information

• Date and time of access

• Interactions with the website

• Session information

• Technical identifiers

For users in the European Union, Google states that individual IP addresses are not logged or stored in Google Analytics. IP addresses may be used temporarily to derive approximate location information before being discarded.

Google Analytics uses cookies or similar technologies to distinguish users and sessions. Where consent is required, Analytics is used on the basis of Article 6(1)(a) GDPR and the corresponding consent choice provided through Google Sites.

If you reject non-essential cookies in the Google Sites consent dialog, Google Sites is intended to respect this choice for Analytics data collection.

For my Google Analytics property, event-level data subject to the Analytics retention settings is currently retained for 2 months, while user-level data is retained for 14 months. These retention settings do not affect most standard aggregated reports. Google may retain certain aggregated or other data separately in accordance with its applicable policies.

You can additionally prevent Google Analytics measurement using browser privacy settings or Google's Google Analytics opt-out browser add-on.

Google may process Analytics data outside the EEA. Google LLC participates in the EU-U.S. Data Privacy Framework and may use other recognised safeguards where applicable.

6. Google Fonts and Other Google Resources

Because this website is operated using Google Sites, Google-hosted resources such as fonts or other technical assets may be loaded when the website is displayed.

When such a resource is requested from a Google server, your browser necessarily establishes a connection to Google. Technical information such as your IP address and browser information may therefore be transmitted.

Where this processing is necessary for the presentation and operation of the website, I rely on Article 6(1)(f) GDPR. My legitimate interest is providing a functional, consistent and readable website.

Google states that the Google Fonts Web API is designed to limit the collection and use of data and that data collected through the Fonts API is not used to create end-user profiles or for advertising.

7. Android App

My website is also available as an Android app. The app primarily functions as a web view and displays content from manuelfally.com. Therefore, when you use the app, the same website services and data processing described in this Privacy Policy may apply.

The app is available through the Google Play Store and may also be downloaded directly as an APK file through my website.

If you install the app through the Google Play Store, Google may process information related to accessing, downloading, installing and using the app. This processing is carried out by Google and is subject to Google's own privacy policies and the privacy settings of your Google account and device.

If you download the APK file directly, the provider hosting the download may receive technical connection data such as your IP address and browser information. Where the APK is hosted through one of the external services described in this Privacy Policy, the corresponding section of this Privacy Policy applies.

I do not intentionally use the app itself to collect additional personal information beyond the data processing required to display and operate the website, unless a particular feature expressly states otherwise.

Technical data may nevertheless be processed by your device and operating system, Google services, the app distribution platform, or external services used by the website content. Such processing may also be subject to the privacy information and settings of the respective provider.

8. Calculators and Browser-Based Tools

I provide various calculators and small tools on my website.

Where a tool is described as operating locally, calculations are performed directly in your browser using technologies such as HTML, CSS and JavaScript. Input entered into such a tool is not intentionally sent to me or stored by me.

Some tools, however, need to retrieve current external information such as exchange rates. In these cases, a connection to an external API may be established as described below.

9. Third-Party APIs

Some of my tools retrieve current information from third-party APIs. Depending on the tool, these may include:

Frankfurter API

I use the Frankfurter API to retrieve current and historical fiat currency exchange rates.

Requests may contain information necessary to obtain the requested exchange rate, such as the selected currencies. As with any direct internet connection, the API server technically receives connection information such as the requesting IP address.

According to Frankfurter's current information, it does not store personal data, IP addresses or requested URLs and only collects anonymous aggregate usage statistics.

CoinGecko API

Some tools use the CoinGecko API to retrieve cryptocurrency prices and market information.

The request may include information such as the selected cryptocurrency and other parameters necessary to obtain the requested market data. A direct connection to CoinGecko may also expose technical connection information such as your IP address to the provider.

CoinGecko processes data in accordance with its own Privacy Policy.

ExchangeRate-API

ExchangeRate-API may be used to retrieve exchange rates or as a fallback if another exchange-rate service is unavailable.

When your browser communicates directly with the service, technical connection data such as your IP address may be processed in addition to the requested currency parameters. ExchangeRate-API states that it uses infrastructure in several countries and describes its data processing in its own privacy information.

Where an API request is initiated because you actively use a tool requiring current external data, the processing is necessary to provide the function requested by you. Depending on the circumstances, the legal basis is Article 6(1)(b) GDPR or Article 6(1)(f) GDPR. My legitimate interest is providing functional and up-to-date tools.

I do not intentionally transmit your name, email address or similar identifying information to these APIs merely for the purpose of retrieving exchange-rate or market data.

10. Contact Form and Direct Contact

If you contact me by email or through a contact form, I process the information you provide in order to read and respond to your message.

Depending on what you provide, this may include:

• Your name

• Your email address

• The subject of your message

• The content of your message

• Other information you voluntarily include

My contact form may use SSL-Contact.de, a service operated by Vitas GmbH in Germany. Information submitted through the form may therefore be processed by that service in order to transmit your message to me.

If your message concerns a contract or steps you request before entering into a contract, processing is based on Article 6(1)(b) GDPR. For other general inquiries, processing is based on Article 6(1)(f) GDPR. My legitimate interest is being able to communicate with visitors and respond to legitimate inquiries.

I retain correspondence only for as long as it is reasonably necessary to handle the inquiry and any related follow-up, unless legal obligations or legitimate documentation requirements require longer retention.

Please do not send sensitive personal information unless it is genuinely necessary for your inquiry.

11. Chat Services

I provide access to third-party chat services that allow visitors to communicate with me and with other users.

When you use a chat service, the respective provider may process technical and usage data necessary to provide, secure and moderate the service. Depending on the provider and how you use the chat, this may include your IP address, browser and device information, account information and the content of messages you send.

Chatango

I use Chatango as a third-party chat service.

When you use the Chatango chat, Chatango may process information such as your IP address, browser and device information, account information and messages sent through the service.

As the operator of the chat, I may also have access to information made available through Chatango's moderation functions. This can include the IP addresses associated with users or messages. I may use such information where necessary to moderate the chat, prevent abuse, enforce restrictions or protect the security of the service.

Processing is based on Article 6(1)(f) GDPR where necessary for the operation, security and moderation of the chat, and on Article 6(1)(b) GDPR where processing is necessary to provide a service requested by you.

Minnit Chat

I also use Minnit as a third-party chat service.

When you use the Minnit chat, Minnit may process information such as your IP address, browser and device information, account information and messages sent through the service. IP addresses may in particular be used by Minnit for security, abuse prevention and moderation-related functions.

I do not currently use Minnit's functionality for displaying users' IP addresses to me. Minnit may nevertheless process IP addresses and other technical information as part of providing and securing the chat service.

Processing is based on Article 6(1)(f) GDPR where necessary for the operation, security and moderation of the chat, and on Article 6(1)(b) GDPR where processing is necessary to provide a service requested by you.

12. AI Chatbots

I may provide access to AI-powered chatbots through my website. These services can be used to provide quick assistance, answer questions or help visitors find information.

Depending on the chatbot and how it is integrated, no data may be transmitted to the provider until you actively open or use the chatbot. When you use a chatbot, the provider may process technical information such as your IP address, browser and device information, as well as the content of your conversation and any information you voluntarily provide.

Please do not enter passwords, financial information, health information or other sensitive or confidential personal data into these chatbots unless it is genuinely necessary and the service is specifically intended for that purpose.

Elfsight AI Chatbot

I provide access to an AI chatbot powered by Elfsight. The chatbot is currently made available through an external link rather than being directly embedded into my website. Therefore, merely visiting my website does not establish a connection to Elfsight through the chatbot. A connection is established when you choose to open and use it.

When you use the chatbot, Elfsight may process technical information such as your IP address, operating system and browser type. The content of your conversation and any contact information you voluntarily provide may also be processed and stored as part of the chatbot service.

I may receive or have access to chatbot conversations and related information through my Elfsight account. I use this information to understand inquiries, respond where appropriate and improve the usefulness of the chatbot.

Where processing is based on your voluntary use of the chatbot and consent is required, the legal basis is Article 6(1)(a) GDPR. Where processing is necessary to respond to an inquiry you initiate, Article 6(1)(b) GDPR may apply. Security-related technical processing may also be based on legitimate interests under Article 6(1)(f) GDPR.

Chat information accessible to me is retained only for as long as it is reasonably necessary for the relevant inquiry, operation and improvement of the service, unless a longer period is required by law or is technically determined by the provider's applicable retention settings.

Elfsight uses infrastructure and subprocessors that may involve processing outside the EEA. Elfsight provides further information about its processing and international transfers in its own Privacy Policy.

13. Social Media and Sharing Links

My website contains links or buttons that allow you to visit or share content on social networks such as Facebook, LinkedIn, X and Reddit.

These buttons are intended to function as links. I do not intentionally transmit information to the respective social network merely because a sharing link is displayed, unless the technical resource used to display the button itself requires an external connection.

When you click a social media link, you leave my website and establish a connection with the respective provider. That provider may then receive information such as your IP address, browser information and the page from which you followed the link. If you are logged into an account with that provider, it may be able to associate your visit with your account.

The subsequent processing is controlled by the respective social media provider and is subject to that provider's privacy policy.

14. Font Awesome and Cloudflare

I use Font Awesome icons for parts of the website. Where Font Awesome resources are loaded through an external content delivery network (CDN), your browser connects to the relevant CDN in order to retrieve the required files.

Font Awesome states that its CDN may collect information about requested icon files and technical information relating to the request. Its CDN infrastructure may use Cloudflare. Technical information such as your IP address, user agent and approximate country may therefore be processed when the resource is delivered.

The purpose is to display icons and website elements reliably and efficiently. To the extent that I determine this processing, I rely on Article 6(1)(f) GDPR. My legitimate interest is providing a functional and visually consistent website.

Font Awesome and Cloudflare provide their own information about data processing and international transfers. Both providers may process information outside the EEA and describe safeguards for such transfers in their respective privacy documentation.

15. Downloads and External File Hosting

Some files and media used on my website are hosted through external services. Depending on how a file is provided, a connection to the respective provider may be established either when you actively download a file or when externally hosted media is loaded by a tool on my website.

Google Drive Downloads

Some files available for download on my website are hosted on Google Drive.

When you follow a download link, your browser establishes a connection to Google Drive. Google may process technical information necessary to provide the file, such as your IP address, browser and device information, and information relating to your interaction with the service.

I do not control Google's independent processing after you access Google Drive.

Google LLC participates in the EU-U.S. Data Privacy Framework and may use other legally recognised safeguards for international data transfers where applicable.

Dropbox Media Hosting

I use Dropbox to host some music and sound files used by tools on my website.

When a tool loads or plays a file hosted on Dropbox, your browser may establish a direct connection to Dropbox. This may occur without you separately visiting the Dropbox website. Dropbox may receive technical information necessary to deliver the file, such as your IP address, browser and device information.

I use Dropbox in this way to provide audio files required by certain tools on my website. To the extent that I determine this processing, the legal basis is Article 6(1)(f) GDPR. My legitimate interest is providing the functionality and media content of these tools.

Dropbox states that data may be stored and processed in the United States and other countries. For transfers from the EEA, Dropbox describes safeguards including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

16. Financial Support and External Payment Platforms

My website may contain links that allow visitors to support me financially through external platforms.

I do not process or store payment-card or banking information on my own website merely because such a link is provided.

If you choose to follow a support or payment link, you leave my website and interact directly with the external provider. The provider may process personal and payment information according to its own privacy policy and terms.

Please review the privacy information of the respective provider before submitting payment or personal information.

17. External Links

My website contains links to websites and services operated by third parties. This includes, for example, links to sources, scientific papers, research publications, books, journals, news articles, social media platforms and other external resources referenced in my articles or elsewhere on my website.

When you follow an external link, you leave my website and establish a connection with the respective third-party website or service. The external provider may process technical information such as your IP address, browser and device information in accordance with its own privacy practices.

I do not control how independent third-party websites process personal data or how their content may change after I have linked to them.

External links and references are generally selected based on the information available when the respective content is published or updated. I cannot guarantee that external content will remain available, unchanged or up to date over time.

Please review the privacy information of the respective third-party service before providing personal information to it.

18. International Data Transfers

Some of the services described in this Privacy Policy are operated by companies located outside Austria or outside the European Economic Area.

Where personal data is transferred to a country outside the EEA, such a transfer must have an appropriate legal basis under the GDPR.

Depending on the provider and destination, safeguards may include:

• An adequacy decision of the European Commission

• Participation in the EU-U.S. Data Privacy Framework for eligible U.S. organisations

• Standard Contractual Clauses approved by the European Commission

• Another transfer mechanism permitted by the GDPR

The EU-U.S. Data Privacy Framework replaced the former EU-U.S. Privacy Shield as a relevant adequacy mechanism for participating U.S. organisations. I do not rely on the former Privacy Shield as a current legal basis for data transfers.

Where a third-party provider determines its own international transfers, further details can be found in that provider's current privacy documentation.

19. Data Security

I take reasonable technical and organisational measures within my control to protect personal data against accidental or unlawful loss, alteration, disclosure or access.

At the same time, no method of transmitting or storing information on the internet can provide absolute security. Services provided by third parties are also subject to the security measures and systems of those providers.

For particularly sensitive information, please use an appropriately secure communication method rather than public chat functions or other public areas of the website.

20. Your Rights under the GDPR

If the GDPR applies to the processing of your personal data, you may have the following rights, subject to the conditions and limitations provided by law:

• Right of access - You may request information about whether and how I process personal data relating to you and request a copy of that data.

• Right to rectification - You may request correction of inaccurate personal data and completion of incomplete data.

• Right to erasure - You may request deletion of your personal data where the legal requirements for erasure are met.

• Right to restriction of processing - You may request that processing be restricted in certain circumstances.

• Right to data portability - Where the legal requirements are met, you may request personal data you provided in a structured, commonly used and machine-readable format.

• Right to object - Where processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR, you may have the right to object to that processing for reasons relating to your particular situation.

• Right to withdraw consent - Where processing is based on your consent, you may withdraw that consent at any time for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

• Right to lodge a complaint - You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

In Austria, the supervisory authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).

You may also contact me first if you have a question or concern about data relating to you. I will do my best to address legitimate privacy requests appropriately.

21. Automated Decision-Making

I do not use personal data collected through this website to make decisions about you based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

The presence of an AI chatbot does not mean that I use its conversations for automated decisions of this kind.

22. Children

This website is intended as a general website and is not specifically designed to collect personal data from children.

I do not knowingly ask children to provide unnecessary personal information. Public chat functions and third-party services may have their own age requirements and terms, which should be observed.

If you believe that personal information relating to a child has been provided to me inappropriately, please contact me.

23. Changes to this Privacy Policy

I may update this Privacy Policy from time to time, for example if the services used on my website change or if legal requirements are updated.

I recommend reviewing this Privacy Policy periodically for any changes. Changes become effective when the updated Privacy Policy is published on this page.

Last Updated: September 27, 2026