Privacy policy

1. DATA PROTECTION AND RESPONSIBILITY

​

General principles
Protecting your privacy is a central concern for us. Personal data means any information by which you can be identified, directly or indirectly. Below, we inform you transparently about which data processing takes place when you visit our platform.

​

Controller

Thomas Crawley, BA
Psychotherapist in training under supervision
Edelhofgasse 8/3
1180 Vienna

​

Tel. +43 (0)676 317 3207
thomas@crawley.at

​

Storage period and deletion
Unless a specific period is stated in the individual sections, your data will remain with us until the purpose of storage no longer applies. If you make a legitimate request for deletion or withdraw a consent you have given, the data will be deleted, unless statutory retention obligations (such as tax and commercial law deadlines under the Austrian Federal Fiscal Code (BAO), Commercial Code (UGB) or General Civil Code (ABGB)) prevent this.

​

Legal bases for processing
We process your data on the basis of the European General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act 2021 (TKG 2021). Depending on the type of processing, we rely on your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR), legal requirements (Art. 6(1)(c) GDPR) or our legitimate interests (Art. 6(1)(f) GDPR).

​

2. INFRASTRUCTURE AND HOSTING

To operate and provide our website, we use external hosting service providers.

​

Wix
We use the system of Wix.com Ltd. (40 Namal Tel Aviv St., Tel Aviv 6350671, Israel) to operate and host our website. When the site is accessed, Wix collects technical connection data and necessary cookies to provide the service and keep it secure. Data transfers are safeguarded by the EU Standard Contractual Clauses and the EU-US Data Privacy Framework (DPF).

Legal basis: Legitimate interest in a stable presentation of the website (Art. 6(1)(f) GDPR).

​

1&1 IONOS
For server infrastructure and domain services, we use IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany). When our platform is accessed, log files (including your IP address) are recorded on IONOS servers.

Legal basis: Legitimate interest in the secure provision of our online offering (Art. 6(1)(f) GDPR).

​

4. DATA COLLECTION ON THE WEBSITE

Server log files
The technical provider of the pages automatically collects information in server log files, which your web browser transmits. This includes browser type and version, operating system used, referrer URL, host name, time of the server request and IP address.
Legal basis: Legitimate interest in the error-free functioning of the website (Art. 6(1)(f) GDPR).

​

Cookies
Our website uses cookies. These are small text files stored on your device. Technically necessary cookies (e.g. for security and basic functions) are set on the basis of our legitimate interest (Art. 6(1)(f) GDPR). Any other cookies (e.g. for analytics purposes) are used exclusively with your explicit consent via the consent banner.

Contact (form, email, telephone)

If you contact us via the contact form, email or telephone, we store your details, including your contact data, in order to process your enquiry and for any project enquiries.
Legal basis: Implementation of pre-contractual measures or performance of a contract (Art. 6(1)(b) GDPR) or our legitimate interest in processing enquiries (Art. 6(1)(f) GDPR).

​

5. INTEGRATED SERVICES

Fonts in the logo / licensed fonts
For our brand identity and logo, we use properly licensed commercial typefaces. These fonts are either permanently embedded in the website as graphic elements (paths/vectors) or hosted locally on our servers. When the graphic or font files of our logo are loaded, no connection is made to the licensors’ external servers and no personal data (such as IP addresses) is transmitted to third parties.

​

Google Maps
We embed the map service Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). To use the map functions, your IP address must be processed, and it may be transmitted to Google servers (including in the USA).
Legal basis: Legitimate interest in making our agency location easy to find (Art. 6(1)(f) GDPR) or your consent, where this was requested via the banner.

​

7. YOUR RIGHTS

Under the provisions of the GDPR, you have the following data subject rights:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to withdraw consent given (Art. 7(3) GDPR)

• Right to object to processing (Art. 21 GDPR)

​

If you wish to exercise your rights, please contact us by email at: thomas@crawley.at

​

Right to lodge a complaint with the supervisory authority
If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority

Barichgasse 40-42, 1030 Vienna
Telephone: +43 1 52 152-0
Email: dsb@dsb.gv.at