DATA PROTECTION

General notes

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data are all data with which you can be personally identified. Detailed information on the subject of data protection can be found in this privacy policy.

Data collection on this website

Who is responsible for the data collection on this website?The data processing on this website is carried out by the website operator. You can find the relevant contact details in the imprint of this website.

How do I collect your data?

Your data are collected when you provide them to me. This could, for example, be data you enter in a contact form. Other data are collected automatically or with your consent by the IT systems used for this website. These data are primarily technical data, such as your internet browser, operating system or time of page view. The collection of these data is automatic as soon as you enter this website.

What do I use your data for?

Part of the data is collected to ensure the proper functioning of the website. Other data may be used to analyse your use of the website.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient and purpose of your stored personal data at any time without charge. You also have the right to request the correction or deletion of these data. If you have given consent to data processing, you may revoke this consent at any time with effect for the future. Furthermore, you have the right to request that the processing of your personal data be restricted under certain circumstances.You also have the right to lodge a complaint with the competent supervisory authority. For this, as well as other questions concerning data protection, you can contact me at any time using the details provided in the imprint.

Hosting and content delivery networks

External hosting

This website is hosted by an external service provider, Squarespace. The personal data collected on this website are stored on the host’s servers. This may include IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access information and other data generated through the use of a website.The host is used for the purpose of fulfilling contracts with potential and existing clients pursuant to Art. 6 para. 1 lit. b GDPR and in the interest of the secure, fast and efficient provision of my online services by a professional provider pursuant to Art. 6 para. 1 lit. f GDPR. My host will only process your data to the extent necessary to fulfil its service obligations and follow my instructions concerning these data. The provider is Squarespace Ireland Limited. Squarespace may also engage affiliated companies and sub-processors, including Squarespace, Inc. in the United States. According to Squarespace, international transfers are protected through recognised transfer mechanisms, including the EU–US Data Privacy Framework where applicable and the European Commission’s Standard Contractual Clauses.

Further information is available in Squarespace’s Privacy Policy: https://www.squarespace.com/privacy
Squarespace Data Processing Addendum:https://www.squarespace.com/dpa

General information and mandatory information

Data protection

I take the protection of your personal data very seriously. I treat your personal data confidentially and in accordance with statutory data-protection regulations and this privacy policy.When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This privacy policy explains what information I collect, what I use it for and how the processing takes place.Please note that data transmission over the internet, for example when communicating by email, may have security gaps. Complete protection of data against access by third parties is not possible.

Controller responsible for this website

The party responsible for processing data on this website is:

Claudia Groessing
Email: contact@claudiagroessing.com

The postal address can be found in the imprint of this website.The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data, such as names and email addresses.

International data transfers

Some of the service providers used on this website may process personal data outside the European Economic Area.Where such transfers take place, they are based on an adequacy decision by the European Commission, including the EU–US Data Privacy Framework where applicable, or on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.Further information about international transfers and the safeguards used can be found in the individual provider sections below and in the respective providers’ privacy policies.

Revocation of your consent to data processing

Many data-processing operations are only possible with your express consent. You may revoke consent you have already given at any time with effect for the future. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right to object to data processing in special cases and to direct advertising — Art. 21 GDPR

IF DATA PROCESSING IS BASED ON ART. 6 PARA. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, I WILL NO LONGER PROCESS THE AFFECTED PERSONAL DATA UNLESS I CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS. IF YOUR PERSONAL DATA ARE PROCESSED FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS ASSOCIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT-ADVERTISING PURPOSES.

Right to lodge a complaint with a supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, place of work or place of the alleged violation.The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.In Austria, the competent supervisory authority is:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at

Right to data portability

You have the right to receive data that I process automatically based on your consent or in fulfilment of a contract in a standard, machine-readable format, or to have them transferred to a third party. If you request the direct transfer of data to another responsible party, this will only be carried out to the extent technically feasible.

Information, deletion and correction

Within the framework of the applicable legal provisions, you have the right at any time to receive information free of charge about your stored personal data, their origin and recipients and the purpose of the data processing. Where applicable, you also have the right to request the correction or deletion of these data. For this purpose, as well as other questions concerning personal data, you can contact me at any time using the details provided in the imprint.

Right to restrict processing

You have the right to request the restriction of the processing of your personal data. You can contact me at any time using the details provided in the imprint. The right to restrict processing applies in the following cases:

If you dispute the accuracy of your personal data stored by me, I will generally require time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of deletion. If I no longer require your personal data but you require them to exercise, defend or assert legal claims, you have the right to request the restriction of processing instead of deletion.
If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balance must be established between your interests and mine. Until it has been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data — apart from their storage — may only be processed with your consent; for the establishment, exercise or defence of legal claims; for the protection of the rights of another natural or legal person; or for reasons of important public interest of the European Union or a member state.

Cookies

My website uses cookies. Cookies are small text files and do not cause damage to your device. They are either stored temporarily for the duration of a session or permanently on your device.Session cookies are automatically deleted after your visit. Permanent cookies remain stored on your device until you delete them or until they are automatically deleted by your web browser.Cookies from third-party companies may also be stored on your device when you visit this website. These enable me or you to use certain services provided by third parties, such as services for processing payments.Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not operate without them. Other cookies may be used to evaluate user behaviour or display advertising.Cookies necessary for carrying out electronic communication, providing functions you request or optimising the website are stored based on Art. 6 para. 1 lit. f GDPR unless another legal basis is specified. I have a legitimate interest in the technically correct and optimised provision of my services.Where consent has been requested for storing cookies, the relevant cookies are stored solely based on this consent pursuant to Art. 6 para. 1 lit. a GDPR. Consent may be revoked at any time.You can configure your browser to inform you when cookies are set, allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or generally and automatically delete cookies when closing the browser. Disabling cookies may restrict the functionality of this website.Where cookies from third parties or cookies for analysis purposes are used, I will inform you separately within this privacy policy and request your consent where necessary.

Inquiries by email or telephone

If you contact me by email or telephone, your inquiry, including all resulting personal data such as your name and the content of your inquiry, will be stored and processed for the purpose of responding to your request.I will not disclose these data to third parties unless this is necessary to respond to your inquiry, perform a contract, comply with a legal obligation or use a service provider acting on my behalf.The processing of these data is based on Art. 6 para. 1 lit. b GDPR if your request relates to the performance of a contract or is necessary for pre-contractual measures.In all other cases, the processing is based on my legitimate interest in effectively responding to inquiries addressed to me pursuant to Art. 6 para. 1 lit. f GDPR or on your consent pursuant to Art. 6 para. 1 lit. a GDPR where this has been requested.The data you send to me through contact inquiries will remain with me until you request their deletion, revoke your consent to storage or the purpose for storing the data no longer applies, for example after your request has been fully processed.Mandatory statutory provisions, particularly statutory retention periods, remain unaffected.

Email communication through Apple iCloud Mail

I use Apple iCloud Mail to receive, send and store business email correspondence, including communication through my email addresses at claudiagroessing.com. When you contact me by email, personal data contained in your communication may be processed through Apple’s iCloud services. These data may include your name, email address, message content, attachments and technical or communication metadata.

The processing is based on Art. 6 para. 1 lit. b GDPR where the communication relates to a contract or pre-contractual measures. In other cases, it is based on my legitimate interest in efficiently receiving and responding to business communications pursuant to Art. 6 para. 1 lit. f GDPR.

Email correspondence is retained only for as long as necessary for the relevant communication or contractual relationship, subject to applicable statutory retention obligations.

Further information about Apple’s processing of personal data is available in Apple’s Privacy Policy and information concerning iCloud and Mail privacy.

Contact and booking forms

When you use a contact or booking form on this website, I process the information you provide to respond to your inquiry, assess whether an offering is suitable, coordinate proposed dates and times and take any necessary pre-contractual steps.Depending on the form, this may include your name, email address, selected offering, preferred dates and times and the content of your message.The processing is based on Art. 6 para. 1 lit. b GDPR where it is necessary for pre-contractual measures or the performance of a contract. In other cases, it is based on my legitimate interest in responding to inquiries and organising my services efficiently pursuant to Art. 6 para. 1 lit. f GDPR.The forms are provided through Squarespace. Form submissions may therefore be processed and stored by Squarespace in accordance with the hosting information above.The information will be retained only for as long as necessary to respond to the inquiry and organise or perform the requested service, subject to applicable statutory retention obligations.Please do not include health information or other sensitive personal data in a general inquiry or booking form unless this is expressly requested and necessary for the service.

Payment processing through Stripe

For the processing of payments, I use Stripe. Within the European Economic Area, the relevant Stripe entities include Stripe Payments Europe Limited and Stripe Technology Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.When you make a payment through Stripe, the personal data required for the transaction are transmitted to Stripe.Depending on the payment and customer type, these data may include your name, email address, billing address, business name, VAT or tax-identification number where provided, payment amount, currency, selected service, payment-method information, IP address, device and browser information and data required for fraud prevention and transaction verification.Payment-card information is entered directly into Stripe’s secure checkout. I do not receive or store your complete card details. I may receive limited information such as the payment method, card brand, last four digits, transaction status and transaction reference.The processing takes place for the performance of a contract or pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR, for compliance with legal accounting and tax obligations pursuant to Art. 6 para. 1 lit. c GDPR and based on legitimate interests in secure payment processing and fraud prevention pursuant to Art. 6 para. 1 lit. f GDPR.Stripe may process data through affiliated companies and service providers outside the European Economic Area. According to Stripe, international transfers are protected through recognised transfer mechanisms, including the EU–US Data Privacy Framework where applicable and the European Commission’s Standard Contractual Clauses.Transaction and invoice data are retained for as long as required to process the payment and comply with statutory accounting, tax and record-keeping obligations—generally seven years under Austrian law.

Further information:

Stripe Privacy Policy: https://stripe.com/privacy
Stripe Privacy Center: https://stripe.com/legal/privacy-center
Stripe Data Processing Agreement: https://stripe.com/legal/dpa

Newsletter and email communication through Flodesk

For the administration and delivery of my newsletter, I use Flodesk, a service provided by Flodesk, Inc., 2093 Philadelphia Pike, #3380, Claymont, Delaware 19703, USA. If you subscribe to my newsletter, Flodesk processes the data required to manage your subscription and send the newsletter.These data may include your name, email address, subscription and confirmation status, date and time of registration, IP address, browser information and information relating to the delivery of and interaction with newsletter emails.Newsletter registration is voluntary and based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.A double opt-in procedure is used. After registering, you will receive an email asking you to confirm your subscription. You will only be added to the active mailing list after completing this confirmation.You may withdraw your consent at any time with effect for the future by using the unsubscribe link included in every newsletter or by contacting me.Your data will then be removed from the active mailing list unless continued storage is required to document consent or comply with statutory obligations. Flodesk processes newsletter data on my behalf as a data processor. Data may be processed outside the European Economic Area, particularly in the United States. According to Flodesk, these transfers are protected by the European Commission’s Standard Contractual Clauses or another recognised transfer mechanism.

Further information: Flodesk Privacy Policy:
https://flodesk.com/legal/privacy-policy
Flodesk Data Processing Addendum:
https://help.flodesk.com/en/articles/4380609

Document and invoice creation through Canva

I may use Canva to prepare personalised business documents and invoices. The provider is Canva Pty Ltd, 110 Kippax Street, Surry Hills, NSW 2010, Australia.Where Canva is used for this purpose, the data processed may include the customer’s name, billing address, business name, VAT or tax-identification number, service description, payment amount, invoice number and service or payment dates.The processing is necessary to prepare contractual and accounting documentation pursuant to Art. 6 para. 1 lit. b and c GDPR. Canva may process data outside the European Economic Area. According to Canva, restricted international transfers are protected through appropriate safeguards, including the European Commission’s Standard Contractual Clauses.

Further information: Canva Privacy Policy:
https://www.canva.com/policies/privacy-policy/
Canva Data Processing Addendum:
https://www.canva.com/policies/data-processing-addendum/

Appointment Scheduling for introductory calls through Calendry

I use Calendly to arrange complimentary introductory calls. The provider is Calendly LLC, United States.

When you schedule an introductory call through Calendly, the personal data required to arrange the meeting are processed by Calendly. Depending on the information you provide, these data may include your name, email address, selected date and time, time zone and any information you voluntarily provide when scheduling the call.

The processing is based on my legitimate interest in organising introductory conversations efficiently pursuant to Art. 6 para. 1 lit. f GDPR and, where the conversation relates to a potential contractual relationship, on taking pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR.

Calendly may process personal data outside the European Economic Area, particularly in the United States. According to Calendly, international transfers are protected through recognised transfer mechanisms, including the EU–US Data Privacy Framework where applicable and the European Commission’s Standard Contractual Clauses.

Further information is available in Calendly’s Privacy Notice.

Audio and video conferences

Data processing

For communication with prospective and existing clients, I use online conference tools. The specific tool I use is listed below.When you communicate with me by video or audio conference over the internet, your personal data are collected and processed by me and the provider of the respective conference tool.Conference tools collect the data you provide, such as your email address and, where applicable, telephone number. They may also process the duration of the conference, the start and end time of participation, the number of participants and other contextual information relating to the communication process.The provider also processes technical data required to facilitate online communication. This may include IP addresses, MAC addresses, device IDs, device type, operating-system type and version, client version, camera type, microphone or speaker information and the type of connection. If content is exchanged, uploaded or otherwise made available through the tool, it may also be stored on the provider’s servers. This may include cloud recordings, chat or instant messages, uploaded photos and videos, files, whiteboards and other information shared while using the service.Please note that I do not have complete control over the data-processing operations of the tools used. My options are largely determined by the policies of the respective provider. Further information can be found in the provider’s privacy policy below.

Purpose and legal bases

Conference tools are used to communicate with prospective or existing contractual partners and to provide services to my clients pursuant to Art. 6 para. 1 lit. b GDPR.Their use also serves to simplify and facilitate communication in connection with my services pursuant to Art. 6 para. 1 lit. f GDPR. If consent has been requested, the use of the respective tool is based on this consent. Consent can be revoked at any time with effect for the future.

Storage duration

Data collected directly by me through video and conference tools will be deleted from my systems as soon as you request their deletion, revoke your consent to storage or the purpose for storing the data no longer applies.Mandatory statutory retention periods remain unaffected.I have no influence over the storage duration of data stored by the operators of conference tools for their own purposes. Please consult the provider’s privacy policy for further details.

Conference tool used

I use Zoom. The provider is Zoom Communications, Inc., 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA.

Further information is available in Zoom’s Privacy Statement: https://zoom.us/privacy

Communication through WhatsApp Business

Where agreed with you, I may use WhatsApp Business for individual communication, calls and selected forms of between-session accompaniment, including reminders or other communication forming part of an offering.

When you communicate with me through WhatsApp Business, personal data are processed through WhatsApp. Depending on the form of communication, these data may include your name, telephone number, profile information, message and voice-message content, shared files or media, and communication metadata.

The processing is based on Art. 6 para. 1 lit. b GDPR where WhatsApp Business is used in connection with the performance of an agreed service or for pre-contractual communication. Where communication through WhatsApp Business is optional, its use takes place as an agreed communication channel.

WhatsApp Business is provided in the European Region by WhatsApp Ireland Limited. Personal data may also be processed or transferred outside the European Economic Area. According to WhatsApp, international transfers are protected through recognised transfer mechanisms, including adequacy decisions and, where applicable, Standard Contractual Clauses.

Personal messages and calls are protected by end-to-end encryption. Please note that WhatsApp nevertheless processes certain account, device, usage and communication-related information in accordance with its own privacy practices.

Further information is available in the WhatsApp Privacy Policy.

Last updated: September 2026