Privacy Policy

1. Controller

Leon Kogler, Michael-Gaismair-Straße 15/37, 6020 Innsbruck, Österreich. E-mail: leon@leonkogler.at

2. What data I process and why

Booking and contract: name, e-mail address, optionally phone number, billing address for invoices above €400, course data (location, date, course, participants), payment status and booking number. Legal basis: performance of the contract (Art. 6 (1) (b) GDPR). Without this data no booking is possible.

E-mails: booking confirmation, invoice, cancellation notices are sent to the address given (Art. 6 (1) (b) GDPR). I do not send marketing e-mails or newsletters.

Invoices: booking and invoice data are kept for seven years under § 132 of the Austrian Federal Fiscal Code (Art. 6 (1) (c) GDPR).

Server logs: when you visit the website, IP address, time, page and browser identifier are logged briefly to ensure secure operation (legitimate interest, Art. 6 (1) (f) GDPR).

3. Payment via Stripe

Online payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Stripe’s payment form is embedded directly in this website (a frame provided by Stripe); you enter your card or account details directly with Stripe, I never receive them. The Stripe script this requires (js.stripe.com) is only loaded once you click “Book now (payment required)”; Stripe then receives your IP address and technical browser data and sets its own cookies for fraud prevention. For some payment methods (e.g. SEPA direct debit, PayPal) Stripe briefly redirects you to your bank or PayPal for authorisation. I transmit booking number, amount, course name and your e-mail address to Stripe; Stripe reports the payment status to me. Legal basis: performance of the contract (Art. 6 (1) (b) GDPR). Stripe may transfer data to Stripe, Inc. in the USA; Stripe is certified under the EU-US Data Privacy Framework and uses standard contractual clauses. See Stripe’s privacy policy: https://stripe.com/privacy

4. Hosting and e-mail

Website, booking system and mailbox are operated by European providers (currently easyname GmbH, Fernkorngasse 10, 1100 Vienna, Austria; servers in Europe) on the basis of a data processing agreement (Art. 28 GDPR).

5. Map and external content

The location map loads map tiles from OpenStreetMap (OpenStreetMap Foundation, St John’s Innovation Centre, Cambridge, UK), which transmits your IP address to the OpenStreetMap Foundation. Legal basis: my legitimate interest in a clear presentation of the locations (Art. 6 (1) (f) GDPR); privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

Fonts and images are served from my own server; some location photos are currently still loaded from the image service Unsplash (Unsplash Inc., Montreal, Canada), transmitting your IP address to Unsplash (Art. 6 (1) (f) GDPR).

6. Cookies and local storage

The website itself sets no cookies and uses no analytics or tracking services. Your language choice is stored only in your browser’s local storage; this is technically necessary and is not transmitted to me. Only when you pay for a booking does the page load Stripe’s payment form; Stripe then sets its own, technically necessary cookies for fraud prevention (see section 3 and Stripe’s cookie notice).

7. Retention

Booking data is kept as long as needed to run the course, answer questions and meet the statutory retention period for invoices (7 years). Incomplete bookings (payment not made) are cancelled and deleted at the latest after the retention period. Logs are deleted after a short time.

8. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. Contact leon@leonkogler.at. If you believe the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.