Last updated: November 2026
The controller for the processing of your personal data on this website is:
Bernhard Hengl, Lebens- und Sozialberatung, Hoerading 6, 4870 Vöcklamarkt, Austria
Email: bernhard@bernhardhengl.com
For my German-language offer "Gegen die Strömung" a separate privacy policy applies: bernhardhengl.com/GegendieStroemung/datenschutz.
This website runs on WordPress and is hosted by Hostinger (Hostinger International Ltd., Cyprus). Each time you visit, the server automatically stores technical data in log files: IP address, date and time, the page you requested, the referring page, browser and operating system. A security plugin (NinjaFirewall) also uses this data to detect and block attacks. This is necessary to deliver the website and keep it secure. Legal basis: my legitimate interest in a secure and working website (Art. 6(1)(f) GDPR). Hostinger processes this data on my behalf. Log data is deleted automatically after a short period.
This website only uses technically necessary cookies. The cookie banner stores your cookie choice in a cookie so that it does not ask you again on every page. Legal basis: § 165(3) of the Austrian Telecommunications Act (TKG 2021) and my legitimate interest (Art. 6(1)(f) GDPR). You can change your choice at any time via the cookie settings button on the website, and you can delete cookies in your browser settings.
The fonts on this website are loaded from my own server. No connection to Google Fonts servers is made when you visit.
If you contact me, I process your message and contact details to reply to you (Art. 6(1)(b) GDPR for enquiries about my services, otherwise Art. 6(1)(f) GDPR). My email runs on Microsoft 365 (Microsoft Ireland Operations Ltd.). If you contact me via WhatsApp, WhatsApp's own terms also apply (WhatsApp Ireland Ltd., part of Meta). WhatsApp messages are end-to-end encrypted, but WhatsApp processes metadata such as who communicates with whom and when. If you prefer, write to me by email instead. I delete enquiries that do not lead to a contract no later than six months after our last contact.
If you subscribe to my newsletter, your email address and, if provided, your first name are stored with Kit (Kit, formerly ConvertKit, USA), which sends the newsletter on my behalf. Kit records whether an email is opened and whether links are clicked. I use this only to see whether the newsletter is useful and reaches you. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email. Your data is then deleted from the mailing list.
My German-language newsletter is published on Substack (Substack Inc., USA). If you subscribe there, Substack's privacy policy applies.
If you register for a Community Swim, I process the details you enter in the registration form (such as your name, email address and the information requested in the form) to organise the event and contact you about it. Legal basis: performance of our agreement for your participation (Art. 6(1)(b) GDPR). Please do not share health information in the form unless I explicitly ask for it for safety reasons. I delete registration data no later than twelve months after the event, unless I am legally required to keep it longer.
Some pages show my Instagram posts and other embedded content (for example videos or documents). When such content is loaded, your browser may connect to the servers of the respective provider (for example Meta Platforms Ireland Ltd. for Instagram or Google Ireland Ltd. for YouTube), which then receives your IP address. Legal basis: my legitimate interest in presenting my work (Art. 6(1)(f) GDPR). The privacy policies of these providers apply.
This website links to other websites, for example to my social media profiles, to the donation page of NF Kinder, and to my product pages on Kit. When you click a link, the operator of that website is responsible for any data processing there.
Kit and Substack are based in the USA. Data may also be transferred to the USA by Meta (WhatsApp, Instagram), Microsoft and Google. These providers rely on the EU-US Data Privacy Framework where they are certified under it, and otherwise on the European Commission's Standard Contractual Clauses (Art. 46 GDPR).
You have the right to access, rectification, erasure, restriction of processing and data portability. You can object to processing based on my legitimate interest. You can withdraw any consent at any time with effect for the future. To exercise your rights, simply email me at bernhard@bernhardhengl.com.
If you believe I am not processing your data correctly, please talk to me first. You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, dsb@dsb.gv.at, www.dsb.gv.at.
I update this privacy policy when my website or the services I use change. The current version on this page applies.
