Legal

Privacy policy

Protecting your personal data matters to me. I process it only on the basis of the law: the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021). Here you can read which data is collected when you visit this website and what happens to it. The German version is legally binding.

Controller

Contact form and email

If you write to me using the contact form, your message and the details you enter (name, email address, topic and message) are sent to me as an email via this website's server. Nothing is stored on the website itself. From then on, the same applies as for a normal email.

If you email me or use the form, for example to arrange a first call, I store your details (name, email address, the content of your message and anything else you tell me). I use them to answer your enquiry and organise the appointment. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (my legitimate interest in answering enquiries).

If we don't end up working together, I delete your data after six months. If you book a course or lessons, I keep the data needed for invoicing and bookkeeping for as long as the law requires (usually seven years under § 132 of the Austrian Federal Fiscal Code). I don't pass your data on without your consent, except to my tax adviser where this is necessary for my tax obligations.

My mailbox is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The data is processed exclusively in data centres in Germany.

Newsletter

If you sign up for my newsletter, I need your email address and your consent to receive it. After signing up you receive an email with a confirmation link. Only once you click it are you subscribed (double opt-in). This prevents anyone from signing up someone else's address.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 174 TKG 2021. You can withdraw it at any time, using the unsubscribe link in every issue or by emailing cacilie@moneyandme.at. This does not affect the lawfulness of processing before the withdrawal. After you unsubscribe, I remove your address from the mailing list. I keep proof of your consent (time of sign-up and confirmation) for as long as I legally need it.

I send the newsletter with Brevo, a service of Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France. Brevo stores the data on servers in the EU and processes it on my behalf. A data processing agreement under Art. 28 GDPR is in place with Brevo. I don't track whether you open the newsletter or click links in it.

The sign-up form sends your details directly to Brevo. Nothing is stored on this website.

Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, on servers in Germany. When you open a page, the server automatically stores technical data in log files: IP address, date and time of access, the page requested, browser and operating system, and the previously visited page. This is necessary to deliver the website and keep it secure.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). STRATO shortens the IP addresses in the log files and replaces them with a random value so they can no longer be linked to a person. The log files are deleted after six weeks. A data processing agreement under Art. 28 GDPR is in place with the host.

Cookies

This website does not use cookies and does not store any information on your device.

Fonts

The fonts are stored directly on this website's server. No connection to Google or other font providers is made when the page loads.

Web analytics

I don't use any analytics or tracking tools such as Google Analytics. Your visit is not analysed.

Links to Instagram

This website links to my Instagram profile. It is a simple link; no Instagram content is embedded. Only when you click the link do you go to Instagram (Meta Platforms Ireland Ltd., Dublin, Ireland), where Meta's privacy policy applies.

Your rights

In principle, you have the following rights:

• Access to the data stored about you
• Rectification of inaccurate data
• Erasure and restriction of processing
• Data portability
• Withdrawal of consent given
• Objection to processing

If you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Datenschutzbehörde (Data Protection Authority), Barichgasse 40–42, 1030 Vienna.

Data protection requests

Please send requests about your data in writing or by email to the address above. To make sure the request really comes from you, I may ask you to prove your identity. I handle your request in line with the legal requirements, at the latest within one month.

Last updated: 22 October 2026