The protection of your personal data is very important to me. I process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Data Protection Act – DSG, Austrian Telecommunications Act 2021 – TKG 2021).
Controller
DI Isabel Espinosa, Keplerstraße 70, 8020 Graz, Austria
Email: astro@isabel-espinosa.com · Phone: +43 (0) 699 11557701
What data I process
Contact and booking requests. If you contact me via the form or by email, I process your name, your email address, your phone number if provided, and your details on date, time and place of birth. This data is required to prepare and conduct the consultation. The legal basis is the performance of a contract pursuant to Art. 6(1)(b) GDPR. Requests submitted via the contact form are stored in the website’s database and automatically deleted after six months. Notifications of new requests are sent via my hosting provider’s email server (see Processors).
WhatsApp contact. On the contact page, I also offer the option of reaching me via WhatsApp. When you click the WhatsApp button, you are redirected to WhatsApp (provider: WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a Meta company). Messages exchanged there are subject to the privacy policies of WhatsApp or Meta; I have no influence over this processing. Use is voluntary and an alternative to the contact form. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
Server log files. When you visit the website, technical data such as IP address, date, time and the page accessed are logged. The legal basis is the legitimate interest in secure operation pursuant to Art. 6(1)(f) GDPR.
Protection against attacks. To protect the website against attacks and spam, I use the security plugin Wordfence (provider: Defiant Inc., 1700 Westlake Ave N Ste 200, Seattle, WA 98109, USA). Access to the website, in particular IP addresses, is checked and logged. To compare against current threat data, your IP address may be transmitted to Defiant servers in the USA. The legal basis is my legitimate interest in the secure operation of the website pursuant to Art. 6(1)(f) GDPR.
Storage period
I store your data only for as long as necessary for the respective purpose or as required by statutory retention periods. Requests submitted via the contact form are automatically deleted after six months. Invoices are kept for seven years (Section 132 of the Austrian Federal Fiscal Code, BAO). On request, I will completely delete your consultation documents afterwards.
Processors
For the technical operation of the website, backups and email accounts, I use ALL-INKL.COM – Neue Medien Münnich GmbH, Hauptstraße 68, 02742 Friedersdorf, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with this service provider. Apart from the security plugin (see above), no data is transferred to a third country.
Cookies
Details on the cookies used can be found in the Cookie Policy.
Fonts
This website uses the fonts EB Garamond and Inter. They are hosted locally on the server. When you visit the website, no connection is established to Google or other providers, and no data is transmitted to third parties.
Links to Instagram
On this website, I link to my Instagram profile. This is a simple link without embedded content: data is only transmitted to Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland) when you click on the link. From then on, Instagram’s privacy policy applies.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent you have given at any time with effect for the future. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).