Legal

Privacy Policy

09 September 2026

Data Controller

The controller responsible for data processing on this website is:

Laura Szepesi

Mindful Excel

Engerthstraße 107/27/23

1200 Vienna, Austria

laura@mindfulexcel.com

General Information

We process personal data only within the scope permitted by applicable law, in particular in accordance with the General Data Protection Regulation (GDPR). Below, we inform you about the nature, scope and purposes of the processing of your personal data.

Hosting and Server Log Files

This website is operated using WordPress and hosted by our hosting provider GoDaddy (GoDaddy.com, LLC, USA). When you access the website, GoDaddy automatically collects technical data (e.g. IP address, date and time of access, pages visited and browser used) in so-called server log files. This processing is based on our legitimate interest in ensuring the secure and stable operation of the website (Art. 6(1)(f) GDPR). Data may be transferred to the USA. GoDaddy has agreed to appropriate safeguards for this purpose (including EU Standard Contractual Clauses). Further information: godaddy.com/legal/agreements/privacy-policy.

Contact

If you contact us by email or via the contact form on www.mindfulexcel.com, we process the information you provide (e.g. name, email address and message content) in order to handle your enquiry. The legal basis for this processing is Art. 6(1)(b) or (f) GDPR.

Course Registration and Contract Processing

When you register for a course, we collect the data necessary for processing the contract (e.g. name, email address and billing information). This data is processed for the performance of the contract in accordance with Art. 6(1)(b) GDPR.

Payment Processing via Stripe

We use the payment service provider Stripe Payments Europe, Ltd. to process payments. The data required for payment processing (e.g. name and payment details) is transmitted to Stripe. Data may be transferred to the USA. Stripe has agreed to appropriate safeguards for this purpose (including EU Standard Contractual Clauses). Further information: stripe.com/at/privacy. The legal basis for this processing is Art. 6(1)(b) GDPR.

Online Courses via Microsoft Teams

Online courses are conducted via Microsoft Teams (Microsoft Ireland Operations Ltd. or Microsoft Corporation, USA). During sessions, personal data such as your name, email address, image and audio data may be processed. Data may be transferred to the USA. Microsoft has agreed to appropriate safeguards (EU Standard Contractual Clauses) for this purpose. Further information: privacy.microsoft.com. The legal basis for this processing is Art. 6(1)(b) GDPR.

Newsletter via ConvertKit

If you subscribe to our newsletter, we use your email address to send it via the service provider ConvertKit (Kit.com, Inc., USA). Subscription is carried out using a double opt-in procedure. You may withdraw your consent at any time with future effect, for example by clicking the unsubscribe link included in each newsletter. The legal basis for this processing is your consent in accordance with Art. 6(1)(a) GDPR. Data may be transferred to the USA. ConvertKit has agreed to appropriate safeguards (EU Standard Contractual Clauses) for this purpose. Further information: convertkit.com/privacy.

Web Analytics with Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies that enable us to analyse how visitors use the website. This processing takes place only with your prior consent in accordance with Art. 6(1)(a) GDPR, which you can grant or withdraw via our cookie banner. Data may be transferred to the USA. Further information: policies.google.com/privacy.

Cookies

This website uses cookies. Technically necessary cookies are used on the basis of Art. 6(1)(f) GDPR. All other cookies (e.g. those used for analytics) are used only with your consent. You can adjust your consent settings at any time via the cookie settings.

Recipients of Your Data

Your data is shared exclusively with service providers engaged by us to deliver our services (including hosting, Stripe, Microsoft, ConvertKit and Google), as well as with public authorities where we are legally required to do so.

Data Retention

We store personal data only for as long as necessary to fulfil the purposes outlined above or for as long as statutory retention obligations apply (e.g. tax-related retention periods).

Your Rights

You have the right to access, rectify and erase your personal data, as well as the right to restrict its processing, data portability and to object to the processing of your data. You may withdraw any consent you have given at any time with future effect.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority

Barichgasse 40-42, 1030 Vienna

dsb@dsb.gv.at · www.dsb.gv.at

Updates to This Privacy Policy

This Privacy Policy may be updated if our services or the applicable legal framework change. The version currently published on this website shall apply.