Legal

Privacy Policy (Datenschutzerklärung)

Last updated: October 2026

The protection of your personal data is important to me. This Privacy Policy explains what personal data may be collected when you use this website, how it is used, stored and shared, and what rights you have under the General Data Protection Regulation (GDPR) and applicable Austrian data protection law.

1. Controller Responsible for Data Processing

Hereinafter referred to as “I”, “me” or “the Controller”.

2. What Data I Collect and Why

The type of personal data processed depends on how you interact with this website.

2.1 Server Log Files

When you visit this website, certain technical information may automatically be transmitted by your browser to the web server. This may include:

• IP address;
• browser type and version;
• operating system;
• date and time of access;
• requested pages or files;
• referring website;
• technical information required to deliver and secure the website.

This information is processed to ensure the security, stability and technical functioning of the website, to detect and prevent technical problems and misuse, and to maintain the website.

Legal basis: Art. 6(1)(f) GDPR — legitimate interests in operating and securing the website.

Server log data is generally retained only for as long as necessary for these purposes and is subsequently deleted or anonymised, unless longer retention is required for legal or security purposes.

2.2 Contact Form

If you contact me through a contact form, I may collect:

• your name;
• email address;
• company and/or job title, if provided;
• telephone number, if provided;
• the content of your message;
• technical information associated with the submission, where applicable.

I use this information to respond to your enquiry, communicate with you and, where applicable, discuss or prepare a potential business relationship.

Legal basis: Art. 6(1)(b) GDPR where the communication relates to taking steps at your request before entering into a contract; and/or Art. 6(1)(f) GDPR where processing is necessary for my legitimate business interests in responding to business enquiries.

If the enquiry does not result in a business relationship, the information will generally be deleted when it is no longer required, subject to applicable legal obligations and legitimate interests in maintaining business records.

2.3 Newsletter and Marketing Communications

If you voluntarily subscribe to my newsletter or other marketing communications, I may process your:

• name;
• email address;
• subscription and consent information;
• information about your interaction with marketing emails, where supported by the service used.

Marketing communications are sent only where there is an appropriate legal basis. Where consent is required, I will ask for your consent before sending such communications.

Legal basis: Art. 6(1)(a) GDPR — consent, where consent is required.

You can withdraw your consent at any time by using the unsubscribe link in the relevant email or by contacting me directly. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

2.4 Free Resources and Downloads

If you request a free resource, such as a guide, checklist, template, report or other downloadable material, I may ask for information such as:

• name;
• email address;
• company;
• professional position;
• LinkedIn profile or other professional information, if requested;
• any other information necessary to provide the requested resource.

The information is used to provide the resource you requested and, where you separately consent, to send you relevant marketing communications.

Legal basis: Art. 6(1)(b) GDPR where processing is necessary to provide the requested resource, and Art. 6(1)(a) GDPR for optional marketing communications where consent is required.

2.5 Booking and Scheduling Tools

I may use third-party scheduling tools, such as Calendly, to allow visitors to schedule consultations, discovery calls or meetings.

When you book a meeting, the relevant provider may process information such as:

• name;
• email address;
• selected date and time;
• meeting details;
• information entered into the booking form;
• technical information required for the booking service.

I use this information to arrange and conduct the requested meeting and, where applicable, to take steps towards a potential business relationship.

Legal basis: Art. 6(1)(b) GDPR where the processing is necessary for pre-contractual steps or performance of a contract.

Where the scheduling provider uses non-essential cookies or similar technologies on this website, the relevant processing may additionally require your consent under applicable cookie and data protection requirements.

3. Cookies and Similar Technologies

This website may use cookies and similar technologies.

Cookies are small files stored on your device by your browser. They may be used for different purposes, including:

• necessary cookies, which are required for the website to function;
• preference cookies, where applicable;
• analytics cookies, which help understand website usage;
• third-party content cookies, for example in connection with embedded videos or other external services.

Technically necessary cookies may be used without consent where permitted by applicable law.

Non-essential cookies and similar technologies are activated only after you have provided the required consent.

You can change or withdraw your cookie preferences at any time through the cookie settings available on the website.

4. Third-Party Service Providers

I may use selected third-party service providers to operate the website and provide my services.

Depending on the website configuration, these may include providers of:

• website hosting;
• cloud storage;
• website analytics;
• newsletter and email marketing;
• scheduling and booking;
• video hosting;
• website security;
• technical support.

Where a provider processes personal data on my behalf, I take appropriate contractual and organisational measures as required by GDPR.

Some providers may process personal data outside the European Economic Area (EEA). Where this occurs, I ensure that the requirements of Chapter V GDPR are met, for example through an adequacy decision or appropriate safeguards such as Standard Contractual Clauses, where applicable.

I do not sell your personal data.

Personal data may also be disclosed where required by law, to competent authorities or courts, or where necessary to establish, exercise or defend legal claims.

5. Data Retention

I retain personal data only for as long as necessary for the purpose for which it was collected or as required by applicable law.

The retention period depends on the type of data and the purpose of processing.

For example:

• Contact enquiries: generally retained only for as long as necessary to handle the enquiry and any resulting business relationship.
• Newsletter data: retained until you unsubscribe or consent is otherwise withdrawn, unless another lawful basis for retention applies.
• Booking information: retained for as long as necessary for the meeting, business relationship and applicable legal or accounting purposes.
• Analytics data: retained according to the configuration and retention settings of the relevant analytics service.
• Contractual and accounting records: retained for the periods required under applicable Austrian legal and tax obligations.

After the applicable retention period expires, personal data is deleted or anonymised unless continued retention is legally required or necessary for the establishment, exercise or defence of legal claims.

6. Your Rights Under the GDPR

Subject to the applicable legal requirements and limitations, you have the following rights:

Right of access

You may request information about whether your personal data is being processed and obtain a copy of your personal data.

Right to rectification

You may request correction of inaccurate or incomplete personal data.

Right to erasure

You may request deletion of your personal data where the legal requirements for erasure are met.

Right to restriction of processing

You may request that processing of your personal data be restricted in certain circumstances.

Right to data portability

Where the applicable requirements are met, you may request to receive personal data that you have provided to me in a structured, commonly used and machine-readable format.

Right to object

You may object to certain processing activities, particularly where processing is based on legitimate interests.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right concerning automated decision-making

You have rights regarding decisions based solely on automated processing where the conditions of Art. 22 GDPR apply.

To exercise your rights, please contact:

Where necessary to protect against unauthorised disclosure of personal data, I may request information necessary to verify your identity.

7. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes the GDPR or applicable Austrian data protection law, you have the right to lodge a complaint with a data protection supervisory authority.

In Austria, the competent authority is:

You may also have the right to lodge a complaint with the supervisory authority in another EU Member State, particularly where you live or work or where the alleged infringement occurred.

8. Data Security

I implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration or other unlawful processing.

Depending on the nature of the processing, these measures may include:

• access controls;
• secure passwords and authentication;
• restricted access to personal data;
• secure cloud services;
• encryption where appropriate;
• software and security updates;
• backups;
• confidentiality obligations;
• appropriate data deletion procedures.

No electronic transmission or storage system can be guaranteed to be completely secure. I nevertheless take reasonable and proportionate measures to protect personal data against foreseeable risks.

9. International Data Transfers

Some of the technology and service providers used for this website or my business may process personal data outside the European Economic Area.

Where personal data is transferred to a third country, the transfer will take place in accordance with Chapter V GDPR.

Depending on the circumstances, this may be based on:

• an EU Commission adequacy decision;
• EU Standard Contractual Clauses;
• another legally recognised transfer mechanism.

Where relevant, additional safeguards may be implemented to protect personal data transferred outside the EEA.

10. Links to External Websites

This website may contain links to websites operated by third parties.

I am not responsible for the privacy practices or content of external websites. When you follow an external link, the privacy policy of the respective website operator applies.

I recommend reviewing the privacy information of external websites before providing them with personal data.

11. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in:

• my services;
• the technologies used on the website;
• third-party service providers;
• applicable legal requirements; or
• data processing practices.

The current version will always be published on this website and will include the date of the latest update.

Last updated: October 2026