Legal

Privacy Policy

Protecting your personal data is important to me. I process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Data Protection Act, Telecommunications Act). In this privacy policy I inform you about the key aspects of data processing within this website.

Controller

Mag. Barbara Schilcher
Steinbichlstraße 58c, 4812 Pinsdorf, Austria
Phone: +43 664 540 13 48
Email: office@barbaraschilcher.at

Contact form

When you use the contact form, I process the data you provide — first and last name, email address, phone number where given, the selected topic and your message — in order to handle your enquiry. This data is stored in my database (hosted by Neon Inc.). The legal basis is your consent (Art 6(1)(a) GDPR) and the initiation or performance of a contractual relationship (Art 6(1)(b) GDPR).

To send the newsletter I process your email address. Registration uses a double opt-in procedure on the basis of your consent (Art 6(1)(a) GDPR). You can unsubscribe at any time, thereby withdrawing your consent for the future.

Appointment booking

For online appointment booking I process your name, email address, phone number where given and the chosen appointment details in order to arrange and organise the appointment. The legal basis is the initiation or performance of a contractual relationship (Art 6(1)(b) GDPR).

Hosting & database (processors)

This website is hosted by Vercel Inc. The data collected via the contact form, the newsletter and appointment booking is stored in a database operated by Neon Inc. Both providers act as processors within the meaning of Art 28 GDPR. The newsletter and appointment booking are handled through my own systems; no third-party trackers are used.

Data transfers to third countries

Vercel Inc. and Neon Inc. are based in the USA; access from a third country can therefore not be ruled out. Both providers are certified under the EU-US Data Privacy Framework; in addition, the European Commission's standard contractual clauses apply (Art 44 et seq. GDPR). Database and hosting are configured to EU data centres (EU region).

Server log files

When you visit this website, the hosting provider automatically processes technical access data (such as IP address, date and time of access, page requested and browser type) in server log files. The legal basis is my legitimate interest in the secure and stable operation of the website (Art 6(1)(f) GDPR). The log files are deleted automatically after a short period.

Cookies

This website uses only technically necessary cookies — for instance for the access-protected administration area. No statistics, tracking or advertising cookies are used; a cookie banner is therefore not required.

Retention period

I store personal data only for as long as is necessary for the stated purposes or as required by statutory retention periods. The data is deleted thereafter.

Your rights

In principle you have the rights to access, rectification, erasure, restriction of processing, data portability and objection. If you believe that the processing of your data infringes data protection law, you may lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

If you have any questions about data protection, you can reach me at office@barbaraschilcher.at.