Privacy Policy

1. Data Controller

I am the data controller for all personal data processed through this website and in connection with my services.

2. Personal Data I Collect

2.1 Data you provide directly

When you contact me, book a session, or fill out my questionnaire (via Fillout), you may provide:

• Name
• Email address
• Phone number
• Any free-text notes you submit (like training goals, health-relevant information you choose to share, availability and preferences, etc.)

2.2 Automatically collected data

When you browse my website, standard technical data may be collected:

• IP address
• Browser type and version
• Device information
• Date/time of access
• Pages viewed

This data is collected via server logs and Google Analytics.

3. How I Use Your Data

I process your data only when legally permitted. Purposes include:

• Responding to inquiries and client requests
• Preparing personal training consultations
• Delivering training services
• Managing communication (email, phone)
• Scheduling sessions
• Maintaining client records
• Website functionality and security
• Fulfilling legal obligations (e.g., Austrian tax law)

I do not use your data for automated decision-making or profiling.

4. Legal Bases for Processing

I process personal data based on:

• Art. 6(1)(b) GDPR - performance of a contract or steps prior to entering a contract
• Art. 6(1)(a) GDPR - your consent (e.g., in the questionnaire)
• Art. 6(1)(c) GDPR - legal obligations
• Art. 6(1)(f) GDPR - legitimate interests (secure website operation, communication)

If you provide health-related information, this falls under Art. 9 GDPR, and I only process it with your explicit consent or if necessary for providing the training services you requested.

5. Data Sharing

I do not sell or rent your personal data.

I may share your data with the following categories of processors, strictly for operational purposes:

5.1 Fillout (Form Tool)

I use Fillout (fillout.com) to collect incoming client requests through a questionnaire. Fillout processes the information you enter on my behalf.

Data location: US-based with GDPR compliance measures (standard contractual clauses). Fillout's privacy policy: https://www.fillout.com/privacy

5.2 Hosting Provider

My website hosting provider processes technical data such as server logs.

5.3 Email and Communication Tools

If I communicate with you by email or phone, your data is processed by the respective service providers (e.g., Gmail, phone carriers).

5.4 Legal/Accounting

If required by Austrian law, data may be shared with tax authorities or my certified accountant.

6. How Long I Store Data

I store personal data only as long as necessary for the relevant purpose.

• Inquiry data: up to 12 months after last contact
• Client records: 7 years (Austrian tax law)
• Health-related data: deleted after service period unless legally required otherwise
• Server logs: up to 6 months, unless needed for security reasons

7. Your GDPR Rights

You have the following rights:

• Right to access (Art. 15 GDPR)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent at any time

To exercise these rights, contact me at: I.s.traninger+trainer@gmail.com

You also have the right to lodge a complaint with the Austrian Data Protection Authority: www.dsb.gv.at

8. Cookies

If my website uses cookies, these will be clearly described in the cookie banner and/or Cookie Policy.

Essential cookies may be used to ensure website functionality.

Analytics cookies (if any) are disabled unless you opt in.

9. Data Security

I take appropriate technical and organizational measures to protect your data:

• Encrypted communication (HTTPS)
• Secure storage of client records
• Restricted access
• Regular security updates

No method of online transmission is fully secure, but I follow best practices.

10. International Data Transfers

If data is transferred outside the EU (e.g., via Fillout or email tools), this is done under legally recognized safeguards such as:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Additional security measures

11. Updates to This Privacy Policy

I may update this policy to reflect changes in services or legal requirements.

The latest version will always be available on this website.

12. Contact

If you have questions about this Privacy Policy or how your data is handled: