1) Introduction and Contact Details of the Controller

1.1 Thank you for visiting our website and for your interest. Below, we explain how we handle your personal data when you use our website. Personal data refers to any information that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Thomas Glen Cook, Krakauer Straße 19, 1020 Vienna, Austria, Phone: +43 650 420 30 20, Email: tom@alexandertechnique.wien. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, meaning that you do not register or otherwise provide us with information, we collect only the data that your browser transmits to our website server (known as server log files). When you access our website, we collect the following data, which is technically necessary to display the website to you:

• The page of our website visited
• Date and time of access
• Amount of data transmitted in bytes
• Source or referral from which you accessed the page
• Browser used
• Operating system used
• IP address used (where applicable, in anonymised form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (such as orders or enquiries addressed to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the characters "https://" and the padlock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

For hosting our website and displaying its content, we use a provider that delivers its services, either directly or through selected subcontractors, exclusively on servers located within the European Union.

All data collected on our website is processed on these servers unless different data recipients are specified below for particular processing activities.

We have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorised disclosure to third parties.

4) Cookies

To make visiting our website an enjoyable experience and to enable the use of certain functions, we use cookies. These are small text files stored on your device. Some cookies are automatically deleted when you close your browser (known as "session cookies"), while others remain on your device for longer and allow website settings to be saved (known as "persistent cookies"). In the latter case, you can find information about the storage period in your web browser's cookie settings.

Where personal data is also processed through individual cookies used by us, processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of a contract, Art. 6(1)(a) GDPR where consent has been given, or Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and providing a user-friendly and effective website experience.

You can configure your browser to inform you when cookies are being set and decide individually whether to accept them. You can also exclude the acceptance of cookies in certain cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us

When you contact us (for example, via a contact form or email), personal data is collected. The data collected when using a contact form can be seen in the respective contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or contacting you and for the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR. If your contact is intended to lead to the conclusion of a contract, Art. 6(1)(b) GDPR serves as an additional legal basis for processing. Your data will be deleted once your enquiry has been fully processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

6) Website Functionality

Google Web Fonts

This website uses web fonts provided by the following provider to ensure the consistent display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When you access a page, your browser loads the required web fonts into its browser cache to display text and fonts correctly and establishes a direct connection to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider in the process.

Data may also be transmitted to: Google LLC, USA.

Personal data is processed in connection with establishing a connection to the font provider only if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by disabling this service through the cookie consent tool provided on our website. If your browser does not support web fonts, a standard font from your computer will be used.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further information about Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

7) Tools and Other Services

Cookie Consent Tool

This website uses a cookie consent tool to obtain valid user consent for cookies and cookie-based applications that require consent. When users access the website, the cookie consent tool is displayed as an interactive user interface through which consent for certain cookies and/or cookie-based applications can be given by selecting the relevant checkboxes. By using this tool, all cookies and services requiring consent are loaded only if the respective user has given their consent by selecting the appropriate checkboxes. This ensures that such cookies are placed on the user's device only where consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a general rule, no personal user data is processed in this context.

If personal data (such as an IP address) is processed in individual cases for the purpose of storing, assigning or recording cookie settings, processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly cookie consent management and, consequently, in ensuring that our website complies with legal requirements.

Art. 6(1)(c) GDPR also serves as an additional legal basis for processing. As the controller, we are legally obliged to make the use of technically non-essential cookies dependent on the respective user's consent.

Where necessary, we have concluded a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit unauthorised disclosure to third parties.

Further information about the operator and the settings available within the cookie consent tool can be found directly in the corresponding user interface on our website.

8) Rights of the Data Subject

8.1 Applicable data protection law grants you the following rights as a data subject in relation to the controller's processing of your personal data (rights of access and intervention). The relevant legal provisions governing the requirements for exercising these rights are indicated below:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to be informed pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent pursuant to Art. 7(3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

8.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING MAY CONTINUE IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

9) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (such as retention periods under commercial and tax law).

Where personal data is processed on the basis of explicit consent in accordance with Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Art. 6(1)(b) GDPR, such data will be routinely deleted once these retention periods have expired, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information provided in this privacy policy concerning specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.