Privacy Policy
This privacy policy informs you about the nature, scope, and purpose of the processing of personal data within our online services and associated websites, functions and content, as well as external online presences (e.g. social media profiles).
The processing of your personal data is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws.
Controller
The controller responsible for data processing on this website is:
Kathleen Louisa Brandhofer
Oberpuchenauerstraße 11a/2
4048 Puchenau
Austria
Email: info@kathleenbrandhofer.com
Website: www.kathleenbrandhofer.com
Types of Data Processed
We process the following categories of personal data:
Master data (e.g. name, address)
Contact data (e.g. email address, phone number)
Contract data (e.g. booked courses, services, payment information)
Content data (e.g. text entries, comments, messages)
Usage data (e.g. visited pages, access times)
Meta/communication data (e.g. IP address, browser type, operating system)
Categories of Data Subjects
The following individuals may be affected:
Website visitors
Participants in online courses
Participants in live lessons (online or in person)
Purchasers of digital content
Newsletter subscribers
Individuals using contact forms
Purposes of Processing
Data is processed for the following purposes:
Provision and operation of the website
Delivery of online courses and digital offerings
Organization of lessons (online and in person)
Handling inquiries
Contract processing and invoicing
Provision of downloadable content
Sending newsletters
Marketing and reach analysis
Security measures and prevention of misuse
Legal Bases for Processing
The processing of personal data is carried out in accordance with Art. 6 GDPR on the following legal bases:
Art. 6(1)(a) GDPR – Consent
Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
Art. 6(1)(c) GDPR – Legal obligation
Art. 6(1)(f) GDPR – Legitimate interest
Our legitimate interest lies in particular in:
the economic operation of our website
communication with interested parties
improving our online services
Hosting and Website Operation (Squarespace)
This website is hosted and operated via Squarespace, Inc.
Squarespace provides the technical infrastructure for hosting, content management, e-commerce functions, and website analytics.
Provider:
Squarespace Inc.
225 Varick Street
New York, NY 10014
USA
When using this website, personal data such as IP addresses or technical usage data may be processed.
The processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in the secure and efficient operation of our website.
Further information:
https://www.squarespace.com/privacy
Contract Processing and Online Courses
If you book courses, workshops, or digital content via our website, we process personal data for:
performance of the contract
organization of online lessons
provision of learning materials
payment processing
communication with participants
Processed data may include:
name
email address
billing data
booked services
payment information
Legal basis: Art. 6(1)(b) GDPR (performance of a contract)
Online Lessons (Live)
For live online lessons, communication platforms or video services may be used.
The following data may be processed:
name
email address
communication data
video or audio data (only during participation)
Processing is carried out exclusively for the purpose of conducting the lesson.
Legal basis: Art. 6(1)(b) GDPR
Newsletter and Email Communication (Brevo)
We use the service Brevo (formerly Sendinblue) to send newsletters and automated emails.
Provider:
Sendinblue GmbH
Köpenicker Straße 126
10179 Berlin
Germany
When you subscribe to our newsletter, the following data is processed:
email address
name (if provided)
time of registration
Registration takes place via a double opt-in procedure.
Legal basis: Art. 6(1)(a) GDPR
Further information:
https://www.brevo.com/en/legal/privacypolicy/
Integration of YouTube
Videos from the YouTube platform are embedded on this website.
Provider:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
When accessing a page with an embedded YouTube video, a connection to YouTube servers may be established.
Data may be transmitted, in particular:
IP address
browser information
usage data
Further information:
https://policies.google.com/privacy
SoundCloud
Audio content from SoundCloud may be embedded on our website.
Provider:
SoundCloud Limited
Rheinsberger Straße 76/77
10115 Berlin
Germany
When playing audio content, usage data may be collected.
Legal basis: Art. 6(1)(f) GDPR
Further information:
https://soundcloud.com/pages/privacy
Social Media Presences
We maintain online presences on social networks in order to communicate with users and inform them about our services.
This includes in particular:
Facebook
Instagram
Provider:
Meta Platforms Ireland Ltd
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland
When visiting our social media profiles, the privacy policies of the respective platforms apply.
Cookies
Our website uses cookies.
Cookies are small text files stored on your device that save certain information.
Cookies may be used in particular for:
technical functionality of the website
analysis of usage
marketing purposes
You can delete or disable cookies at any time via your browser settings.
Please note that this may limit the functionality of the website.
Storage Duration
Personal data is stored only as long as necessary for the respective purposes.
In addition, statutory retention obligations apply, in particular under:
tax law
commercial law
Your Rights
You have the following rights under the GDPR:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority.
In Austria, this is:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
https://www.dsb.gv.at
Changes to This Privacy Policy
I reserve the right to adapt this privacy policy to ensure it always complies with current legal requirements or to reflect changes in my services.