Home / Privacy
Privacy notice
Because this work involves children and health-related information, privacy is taken more seriously here than on most websites. Here is what happens with what.
The German version prevails. This English text is provided for convenience; the German privacy notice is the binding version. It follows the GDPR and the Austrian Data Protection Act (DSG) but does not replace legal advice. One item must be resolved before going live: the hosting provider.
1. Controller
The controller within the meaning of Art. 4(7) GDPR is:
Julian Erhart
Blattur 68, 6840 Götzis, Vorarlberg, Austria
Email: julianerhart@hotmail.com
No data protection officer has been appointed under Art. 37 GDPR, as neither large-scale regular monitoring nor large-scale processing of special categories within the meaning of that provision takes place. To be reviewed as the client base grows.
2. Legal framework
Processing follows the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Austrian Data Protection Act (DSG, Federal Law Gazette I No. 165/1999 as amended), including the constitutionally guaranteed right to secrecy under § 1 DSG.
3. Access data and server log files
When this website is accessed, the hosting provider automatically processes technical data: IP address, date and time, page requested, volume transferred, browser type and version, operating system and referrer.
- Purpose: delivering the website, operational security, defence against attacks.
- Legal basis: Art. 6(1)(f) GDPR — legitimate interest in secure, stable operation.
- Retention: TODO — typically 7 to 30 days, then deleted automatically.
- Processor: TODO — hosting provider name and address; a data processing agreement under Art. 28 GDPR must be in place.
4. Getting in touch
This website deliberately contains no contact form. Contact happens directly by phone, WhatsApp or email — meaning the website itself collects no personal data and transmits none to third parties. When you write or call, the data transmitted is used solely to handle your enquiry and prepare a possible collaboration.
- Data: name, email address or phone number, details about the child and the content of your message — that is, exactly what you choose to tell me.
- Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR.
- Retention: until the enquiry is settled. Where a collaboration follows, statutory retention periods apply — in particular seven years under § 132 of the Austrian Federal Fiscal Code (BAO).
- Recipients: no transfer to third parties unless required to perform the contract or by law.
Email correspondence currently runs through a Hotmail account (Microsoft Ireland Operations Ltd.). Recommendation: move to an address on your own domain with a European provider — more professional and better for privacy.
5. Health-related information
Health-related information may be necessary for safe training — for example pre-existing conditions, injuries, allergies or physical limitations. This constitutes a special category of personal data under Art. 9 GDPR and is handled accordingly.
- Legal basis: solely your explicit consent under Art. 9(2)(a) GDPR. Without it, no health data is processed.
- Purpose: safe, health-appropriate training and injury prevention.
- Access: by Julian Erhart personally only. No disclosure to third parties without separate consent.
- Storage: kept separately from general contact data and only as long as required for the coaching relationship.
- Withdrawal: possible informally at any time, with effect for the future.
Please do not send diagnoses or details by message. A note that a health topic exists is enough — the specifics are discussed in person.
6. Data of children and teenagers
The service is aimed at children and teenagers. Enquiries and the contractual relationship therefore run through the legal guardians.
- Enquiries should be made only by legal guardians or with their consent.
- Under § 4(4) DSG, a child's consent to the processing of their data in connection with information society services is valid in Austria only from the age of 14. Below that age, guardian consent is required. Austria has lowered the threshold in Art. 8(1) GDPR from 16 to 14 years.
- Only minimal data is processed about children — normally first name and age group.
- Photo and video recordings of children are made only with the explicit written consent of the legal guardians. See section 7.
7. Video and photo recordings during training
Video recordings may serve movement and technique analysis. They are made only with prior consent, used solely for review and deleted afterwards. Any publication — for example on this website or on social media — requires separate written consent, which can be withdrawn at any time. Legal basis: Art. 6(1)(a) GDPR and § 78 of the Austrian Copyright Act (right to one's own image).
8. WhatsApp
If you use the WhatsApp link, the privacy terms of WhatsApp Ireland Ltd. also apply. That processing is outside our control. If you prefer to avoid it, email and telephone work just as well. Please do not send health data via WhatsApp.
9. Fonts
This website currently loads fonts from Google Fonts and Fontshare (Indian Type Foundry), which transmits your IP address to those providers. Strong recommendation: host the fonts locally. That removes the transfer entirely and this section can be deleted.
10. Cookies, analytics and reach measurement
This website sets no cookies and uses no analytics, tracking or advertising services. There is no profiling and no automated decision-making within the meaning of Art. 22 GDPR. A cookie banner is therefore not required.
TODO: as soon as analytics, Google Maps, embedded video, a booking tool or social media plugins are added, prior consent is required under § 165(3) of the Austrian Telecommunications Act 2021 in conjunction with Art. 6(1)(a) GDPR — including a working reject option and a way to withdraw consent.
11. Data security
The website is delivered over an encrypted TLS connection (HTTPS). Health-related notes are kept separately and access-protected. Technical and organisational measures under Art. 32 GDPR are applied appropriate to the state of the art and the risk involved.
12. Your rights
As a data subject you have the right to:
- Access the data processed (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing based on legitimate interests (Art. 21 GDPR)
- Withdraw consent with effect for the future (Art. 7(3) GDPR)
An informal message to julianerhart@hotmail.com is sufficient. A response follows within one month (Art. 12(3) GDPR).
13. Right to lodge a complaint
Without prejudice to other remedies, you have the right to lodge a complaint with the supervisory authority under Art. 77 GDPR and § 24 DSG:
Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: dsb.gv.at
14. Status
This privacy notice is dated TODO add date. It will be updated whenever the service changes.