Privacy notice

The protection of your personal data is a genuine concern to me — not just because the law requires it.

1. Controller

Controller within the meaning of the GDPR is:
Mag. Markus Weigl, MSc Coaching, MWCC Markus Weigl Consulting & Coaching e.U., Schlossgasse 30, 2100 Stetten, Austria.
kontakt@markusweigl.at · +43 664 210 29 81

2. Data collected

2.1 Server logfiles

Upon visiting this site the hosting provider stores technically necessary data: IP address, date and time, page requested, transferred data volume, browser type, operating system. This data serves security and technical stability.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Retention: max. 14 days.

2.2 Contact (e-mail, phone, form)

When you contact me, the information you provide (name, e-mail address, phone where given, content of the enquiry, timestamp) is processed to handle your matter. With form use the IP address is additionally logged for 24 hours to prevent misuse, then automatically deleted.

Processing chain: the form is received by the web hosting (World4You, Austria). The enquiry is then delivered to my mailbox kontakt@markusweigl.at at Microsoft 365 (Microsoft Ireland, EU Data Boundary). The automated confirmation message to you is sent via the mail service Brevo (Sendinblue SAS, Paris, EU). Details on both processors are in section 4.

Data is deleted after the matter is concluded, at the latest after six months. Where a business relationship arises, business-relevant records are archived in accordance with statutory retention obligations (§§ 132 BAO, 212 UGB: 7 years).
Legal bases: Art. 6(1)(b) GDPR (contract initiation/performance), (a) (consent on form), (f) (abuse prevention, deliverable reply), (c) (archival duties).

2.3 Newsletter „Stay in touch"

For subscription only your e-mail address is collected. Subscription is via double opt-in: you receive a confirmation e-mail with a personal link; only by clicking it are you entered into the list.

Additionally stored: time of subscription, time of confirmation, subscription IP (proof of consent under Art. 7 GDPR). Storage of the subscriber list: file newsletter.json on the web space at the hosting provider (World4You, Austria). For the actual sending of confirmation and newsletter mails, the recipient's address is each time transmitted to Brevo (Sendinblue SAS, Paris, EU) — see section 4. No linkage with other data; in particular no open or click tracking.
Legal basis: Art. 6(1)(a) GDPR (consent).
Retention: until withdrawal; on unsubscribe the entry is marked „unsubscribed" and — if no new subscription follows — fully deleted after 12 months. The subscription IP is deleted after 3 years.
Withdrawal: every e-mail contains a personal unsubscribe link (one click); alternatively a short note to kontakt@markusweigl.at.

2.4 Cookies and tracking

This website sets no cookies. No tracking, no profiling, no analytics, no social-media plugins, no embedded videos or map services. Should this change, this notice will be updated accordingly in advance.

3. Fonts

This website uses the fonts „Cormorant Garamond" and „Mulish" self-hosted locally (woff2 files under /assets/fonts/). No connection to Google Fonts, Adobe Fonts, Bunny Fonts or any other external font service; no data is transmitted to third parties.

4. Processors & data recipients

The following external providers are used to deliver this website and the related communication. With providers processing personal data on my behalf there is in each case a data processing agreement pursuant to Art. 28 GDPR:

Disclosure to authorities only where legally required (tax authorities, law enforcement).

5. Third-country transfer

An active transfer of personal data to third countries outside the EU/EEA does not take place. All processors named above have their processing location within the EU.

A theoretical residual access by US authorities to Microsoft 365 (Sendinblue/Brevo is a French company without US parent) remains possible under the US Cloud Act, even though data is processed within the EU Data Boundary. This residual risk is covered by the EU Standard Contractual Clauses (Modules 2 and 3) within the Microsoft DPA, supported by additional technical and organisational measures.

6. Your rights as a data subject

You have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17 subject to retention obligations), restriction (Art. 18), portability (Art. 20), objection (Art. 21), and the right to withdraw consent at any time with effect for the future. An informal note to the contact details above will suffice; I respond promptly.

7. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent authority in Austria is the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, dsb.gv.at.

8. Updating

This privacy notice is updated as services, legal situation or processing activities change. The current version is available at markusweigl.at/en/privacy.html.

Status: May 2026 · Subject to change.