The Protection of Your Personal Data

Protecting your personal data is of utmost importance to us. Therefore, we process your data exclusively in accordance with legal regulations (GDPR, TKG 2003).  

 

1. Contacting Us

For questions or complaints, please contact the person responsible for this website:  

Name: Lorena Eloy  

Address: Available upon request  

Phone: Available upon request  

Email: lorenafitsyou@gmail.com  

 

2. Data Subject Rights

You have the following rights:  

- Right of access (Art. 15 GDPR);  

- Right to rectification (Art. 16 GDPR);  

- Right to erasure (Art. 17 GDPR);  

- Right to restriction of processing (Art. 18 GDPR);  

- Right to data portability (Art. 20 GDPR);  

- Right to object (Art. 21 GDPR);  

- Right to withdraw consent (Art. 7(3) GDPR).  

 

If you believe that the processing of your data violates data protection laws or that your data protection rights have otherwise been infringed, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). In Austria, this is the Data Protection Authority.  

 

3. Collection and Storage of Personal Data

a) When Visiting the Website

When accessing our website, your browser automatically sends information to our website’s server (so-called log files). The following data is collected:  

- Date and time of access;  

- Name and URL of the accessed file;  

- Website from which access is made;  

- IP address of the requesting computer;  

- Browser used, the operating system of the user and its interface, as well as the name of your access provider.  

 

The aforementioned data is required to ensure smooth use of the website, maintain system security, and for administrative purposes. The legal basis for this data processing is Art. 6(1)(f) GDPR. The data is deleted or anonymized after the session ends. In the case of log file storage, data is deleted after 3 days.  

 

b) When Booking  

The data you provide is necessary for fulfilling the contract or processing bookings. Without this data, we cannot conclude the contract with you. Data is not shared with third parties, except for:  

- Transmission of credit card details to the payment service provider for processing payment;  

- Transmission to Wix Payments for managing course bookings.  

 

The legal basis for this data processing is Art. 6(1)(b) GDPR. In case of a contract conclusion, all data related to the contract is stored for the statutory retention period (7 years) or a longer period as required by law.  

 

c) When Using Our Contact Form

To facilitate communication, we provide a contact form on our website. Mandatory fields (email address, name, phone) are required to ensure the best possible response to your inquiry. Data processing for contacting us is based on Art. 6(1)(a) GDPR with your voluntary consent. Unless a business relationship ensues, the data collected via the contact form is entered into a customer database to better address future inquiries. Data is automatically deleted after one year of inactivity.  

​

4. Data Sharing

Your personal data is shared with third parties only if:  

- You have expressly consented under Art. 6(1)(a) GDPR;  

- The sharing is necessary under Art. 6(1)(f) GDPR for asserting, exercising, or defending legal claims, and there is no reason to assume that you have an overriding legitimate interest in non-disclosure;  

- There is a legal obligation to share under Art. 6(1)(c) GDPR; or  

- Sharing is legally permissible and necessary under Art. 6(1)(b) GDPR for fulfilling contractual obligations with you.  

 

5. Social Media Plug-Ins  

Pursuant to Art. 6(1)(f) GDPR, plug-ins, links, and buttons for social media websites are used for advertising and informational purposes. When these elements are integrated, data is transmitted to the respective social media providers upon accessing our site, potentially including transfers to third countries. This data is stored and processed by the providers in accordance with their terms of use.  

 

6. Data Security

The protection of your personal data is ensured through appropriate organizational and technical measures. These measures particularly aim to safeguard against unauthorized, unlawful, or accidental access, processing, loss, misuse, and manipulation.  

 

7. Status and Updates of this Privacy Policy 

This privacy policy is effective as of December 20, 2024. We reserve the right to update this privacy policy as necessary to improve and/or adapt our data protection practices.