Privacy notice

How we handle your request data

This notice covers this website, the “Start a project” form and e-mail contact with us.

Who is responsible

LazyHead e.U. (ORT301 is its brand), owner Andrii Snikhovskyi, Morizgasse 2/2/14, 1060 Vienna, Austria, FN 682664 v, Handelsgericht Wien. E-mail: office@ort301.com. Full details in the imprint.

What we process and why

• Name, company (optional), email, your message, budget and timeline (optional) — to answer your request and prepare a scope or proposal. Legal basis: steps prior to entering into a contract (Art. 6(1)(b) GDPR) and your consent given in the form (Art. 6(1)(a) GDPR).
• A salted hash of your IP address — kept only to limit abuse of the form (rate limiting). The address itself is not stored. Legal basis: legitimate interest in protecting the service (Art. 6(1)(f) GDPR).

Where the data goes

Into our own internal system (ORT301 CRM) on servers in the EU. Requests are read by a person. Until the CRM is connected to the website, form requests reach our mailbox by e-mail through Resend (Resend, Inc., USA; data processing agreement with EU standard contractual clauses). To sort requests and prepare a first reply we may process the text of your message with an AI model provider acting as our processor; the reply is always reviewed and sent by a person. We never pass your data to advertising networks.

Hosting, e-mail and technical data

This website is delivered by Cloudflare (Cloudflare, Inc., USA, with Cloudflare Germany GmbH as EU representative; data processing agreement with EU standard contractual clauses and EU-US Data Privacy Framework certification). To deliver pages and protect against attacks Cloudflare processes technical connection data (IP address, request headers, time); short-lived security logs are kept by Cloudflare. Legal basis: legitimate interest in a secure, fast website (Art. 6(1)(f) GDPR). E-mails to office@ort301.com pass through Cloudflare Email Routing and are delivered to our mailbox; Cloudflare does not keep the content after delivery.

How long we keep it

Requests that do not lead to a project are deleted 12 months after our last contact. If a contract follows, the data becomes part of the project file and is kept for the statutory retention periods.

Your rights

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time with effect for the future. Contact us through the form or the address in the imprint. You may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at).

Cookies and tracking

This website sets no cookies of its own and uses no analytics or tracking. Cloudflare may set a strictly necessary security cookie (for example __cf_bm) that does not identify you across sites. Fonts are served from this site only.

Version 1.0 — 11 September 2026.