Data Privacy
We take the protection of your personal data seriously. This privacy policy explains which personal data is processed when you visit this website, for what purposes, on which legal basis and what rights you have. We process your data exclusively in accordance with the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).
Controller
Masha Ibeschitz
Ibeschitz Consulting
Invalidenstraße 11/25
1030 Wien
Österreich
Mobile: +43 676 5106095
E-Mail: [email protected]
Hosting and Server Log Files
This website is hosted by [HOSTING PROVIDER, ADDRESS]. Each time you access the website, the server automatically records information that your browser transmits: IP address, date and time of the request, the page accessed, the referring website (referrer), browser type and version, and operating system. This data is required to deliver the website, to ensure its stability and to defend against attacks. The legal basis is our legitimate interest in the secure and reliable operation of the website (Art. 6 (1) (f) GDPR). The log files are deleted after [NUMBER] days unless they are needed to investigate a security incident. Our hosting provider processes this data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Contact by E-Mail or Phone
If you contact us by e-mail or phone, we process the information you provide (e.g. name, e-mail address, phone number, content of your enquiry) in order to answer your request. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise our legitimate interest in responding to enquiries (Art. 6 (1) (f) GDPR). We do not pass this data on to third parties. It is deleted once your enquiry has been dealt with, unless statutory retention obligations apply (e.g. seven years for business-relevant correspondence under Austrian tax law).
Cookies and Consent Management
This website uses cookies. Cookies are small text files stored on your device by your browser. Cookies that are strictly necessary for the operation of the website are set without your consent (§ 165 (3) TKG 2021). All other cookies, in particular for statistical purposes, are only set after you have given your consent via our cookie banner (Art. 6 (1) (a) GDPR in conjunction with § 165 (3) TKG 2021).
We use the WordPress plugin CookieAdmin to obtain and document your consent. CookieAdmin stores your consent decision in a cookie on your device so that the banner does not reappear on every visit. In addition, a record of your decision (time and choice) is stored on our server so that we can demonstrate that consent was given (Art. 6 (1) (c) in conjunction with Art. 7 (1) GDPR). You can change or withdraw your consent at any time with effect for the future via the cookie settings on this website. You can also block or delete cookies in your browser settings; please note that some functions of the website may then be restricted. Your consent decision is stored for 12 months; after that, you will be asked again.
Web Analytics with Burst Statistics
With your consent, we use the WordPress plugin Burst Statistics to analyse how visitors use our website and to improve our content. Burst Statistics runs entirely on our own web server; the data collected is not transmitted to the plugin provider or any other third party. Your IP address is anonymised before it is stored, so the data cannot be attributed to you personally. Burst Statistics sets a cookie with an anonymous ID on your device, which is stored for 30 days, and records, among other things, the pages visited, the time spent on them, the referring website, device type, browser and the approximate location (country level).
The legal basis is your consent (Art. 6 (1) (a) GDPR in conjunction with § 165 (3) TKG 2021). If you do not give your consent, no statistics cookies are set. You can withdraw your consent at any time via the cookie settings.
Google Fonts
This website uses fonts provided by Google Fonts, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When a page is loaded, your browser connects to Google's servers to retrieve the fonts. In doing so, your IP address and information about your browser are transmitted to Google. A transfer of data to Google LLC in the USA cannot be ruled out; Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision. The legal basis is our legitimate interest in a consistent and appealing presentation of our website (Art. 6 (1) (f) GDPR). Further information is available in Google's privacy policy: policies.google.com/privacy
Link to LinkedIn
Our website contains a simple link to our profile on LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. No LinkedIn plugin is integrated, and no data is transmitted to LinkedIn when you visit our website. Only when you click the link are you redirected to LinkedIn, where LinkedIn's own privacy policy applies: linkedin.com/legal/privacy-policy
Data Security
This website uses SSL/TLS encryption to protect the transmission of data. You can recognise an encrypted connection by "https://" in the address bar of your browser. Please note that data transmission over the internet (e.g. by e-mail) can be subject to security gaps, and complete protection against access by third parties is not possible.
No Automated Decision-Making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
Your Rights
You have the right to access your personal data (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR) and to object to processing based on legitimate interests (Art. 21 GDPR). Where processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7 (3) GDPR). To exercise your rights, please contact us at [email protected].
If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Wien, www.dsb.gv.at.
Changes to this Privacy Policy
We may update this privacy policy if our website or the legal requirements change. The version published on this website applies.
Last updated: October 2026