Privacy Policy

Dear visitor,

I take the protection of your personal data seriously. I treat your personal data confidentially and in accordance with the applicable data protection regulations.

This privacy policy informs you about what personal data is collected when you visit this website and how I use it. It also outlines your rights regarding your personal data. If you have any questions, please don't hesitate to reach out.

Definitions

Based on Art. 4 GDPR (General Data Protection Regulation), the following definitions apply:

"Personal data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

"Processing" means any operation performed on personal data, such as collection, recording, organization, storage, use, disclosure, or deletion.

"Controller" means the natural or legal person who determines the purposes and means of the processing of personal data.

"Third party" means any natural or legal person other than the data subject, the controller, and persons authorized to process personal data.

"Processor" means a natural or legal person who processes personal data on behalf of the controller (e.g. an IT service provider).

"Consent" means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they signal agreement to the processing of their personal data.

Data Controller

The data controller under Art. 4 (7) GDPR is:

Helma Granit, MSc.
Bösendorferstraße 5/10, 1010 Vienna, Austria
Email: helma.granit@hotmail.com

Legal Bases for Processing

Processing of personal data is only lawful if it falls under one of the following grounds:

  • Art. 6(1)(a) GDPR (Consent): The data subject has given consent to the processing for one or more specific purposes.

  • Art. 6(1)(b) GDPR: Processing is necessary for the performance of a contract, or to take steps at the request of the data subject prior to entering into a contract.

  • Art. 6(1)(c) GDPR: Processing is necessary for compliance with a legal obligation.

  • Art. 6(1)(f) GDPR (Legitimate interests): Processing is necessary for the purposes of legitimate interests pursued by the controller, except where such interests are overridden by the interests or rights of the data subject.

Your Rights

You have the right to:

  • request access to your personal data I process (Art. 15 GDPR)

  • request rectification of inaccurate data (Art. 16 GDPR)

  • request erasure of your data (Art. 17 GDPR)

  • request restriction of processing (Art. 18 GDPR)

  • receive your data in a structured, machine-readable format, or request it be transferred to another controller (Art. 20 GDPR)

  • withdraw any consent you have given, at any time, with effect for the future (Art. 7(3) GDPR)

  • lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority is:

Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40-42, 1030 Vienna, Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at

Right to Object

Where I process your personal data based on legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation, or, in case of direct marketing, without needing to state a reason. If you wish to exercise your right to withdraw consent or object, an email to helma.granit@hotmai.com is sufficient.

Data Security

I use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access (e.g. TLS encryption for this website). These security measures are continuously improved in line with technological developments.

What Data I Collect and Why

Visiting this website

When you visit this website, your browser automatically sends certain information to my hosting provider's server, which is temporarily stored in a log file. This includes your IP address, date and time of access, the page requested, the referring website, and your browser/operating system information. This data is processed to ensure a stable and secure connection to the website, and is not used to draw conclusions about your identity. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of this website).

The free worksheet sign-up

When you sign up to receive my free worksheet, I collect the email address you provide (and, if applicable, your first name) in order to send you the download. Legal basis: Art. 6(1)(a) GDPR (your consent, given when you submit the form).

You may withdraw your consent and unsubscribe at any time by clicking the "unsubscribe" link in any email you receive from me, or by emailing helma.granit@hotmail.com . Your data will be deleted once you unsubscribe, unless I am legally required to retain it for a longer period.

Third-Party Service Providers

I use the following service providers (processors) to operate this website and my email communications. Each is contractually bound (via a Data Processing Agreement, Art. 28 GDPR) to process data only according to my instructions and in compliance with the GDPR.

Hosting: Squarespace

This website is hosted by Squarespace Ireland Limited (2nd Floor, 1-2 Victoria Buildings, Haddington Road, Dublin 4, Ireland), part of Squarespace, Inc. (United States). Squarespace processes the technical data described above (server logs) to display and operate this website. Where data is transferred to the United States, this is based on the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses. Further information: Squarespace's own privacy policy at squarespace.com/privacy.

Email Marketing: Brevo

I use Brevo (Sendinblue SAS, 7 rue de Madrid, 75008 Paris, France) to send the free worksheet and any follow-up emails to your inbox. Brevo is based in the EU, so no third-country data transfer is involved. Legal basis: Art. 6(1)(a) GDPR (your consent). Further information: Brevo's privacy policy at brevo.com/legal/privacypolicy.

File Hosting: Google Drive

The downloadable worksheet is hosted via Google Drive, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), part of Google LLC (United States). Where data is transferred to the United States, this is based on the EU-US Data Privacy Framework. Further information: Google's privacy policy at policies.google.com/privacy.

Cookies

This website may use technically necessary cookies required for its basic functionality (e.g. to remember your session). I do not currently use analytics or advertising cookies (such as Google Analytics or Meta/Facebook Pixel) on this website.

Currency of This Privacy Policy

This privacy policy is up to date as of 23. September 2026. Ongoing development of this website, or changes in legal requirements, may make it necessary to update this privacy policy.