Privacy policy
Privacy policy for michaelsinnhuber.com under the EU General Data Protection Regulation (GDPR). The website uses no cookies and does not track individual visitors. It processes the technical data needed to deliver the site via Cloudflare and the details you share yourself when you get in touch through the contact form, by email or by phone.
This is an English translation for convenience. The German version is legally binding.
Data controller
mcsinn e.U., owner Michael Sinnhuber
Stampferau 1, 5730 Mittersill
Austria
Email: hello@michaelsinnhuber.com
Phone: +43 681 10145498
The essentials
- This website uses no cookies and does not track individual visitors. That’s why there is no cookie banner.
- I only receive data when you write to me, use the contact form or call me. The form sends your details to me by email; nothing is stored on the website.
- Fonts and images are served by this website itself, not by third-party servers. I only use third-party services where they are needed: Cloudflare’s statistics, spam protection for the contact form and the booking calendar on the intro call page.
- No videos, maps or social media content are embedded. Links to other websites only open when you click them.
Hosting
The website is delivered via Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you open a page, Cloudflare processes the technical data needed to do so: IP address, date and time, the page requested, browser and operating system. This is necessary to deliver the page and protect it against attacks.
The legal basis is my legitimate interest in running the site securely and reliably (Art. 6(1)(f) GDPR). Cloudflare acts as a processor. The data processing agreement (Data Processing Addendum) is part of Cloudflare’s terms of service. For transfers to the USA, Cloudflare is certified under the EU-US Data Privacy Framework, and the European Commission’s standard contractual clauses also apply.
Contact by email or phone
When you write to me or call me, I process the details you provide (such as your name, email address, phone number and your request) to answer your enquiry and, where applicable, to prepare an offer or carry out a contract. The legal basis is pre-contractual steps and performance of a contract (Art. 6(1)(b) GDPR) and my legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).
Emails are processed by Google Workspace (Google Cloud EMEA Limited, Dublin, Ireland) as a processor. Your data is kept for as long as your enquiry requires. If you commission me, the statutory retention periods apply, for example seven years for accounting records under the Austrian Federal Fiscal Code (Bundesabgabenordnung).
Contact form
When you use the contact form, I process the details you enter: name, email address, optionally your phone number, your topic, your preferred date and your message. A small program at Cloudflare receives the details and sends them to me by email. They are not stored on the website or at Cloudflare. The same applies as for an enquiry by email (see above).
To keep automated spam out, I use Cloudflare Turnstile. Turnstile only loads once you click into the form. Cloudflare then uses technical characteristics of your browser and your IP address to check that a human is sending the form. According to Cloudflare, this data is not used for advertising or profiling. To improve its bot detection, Cloudflare also uses the data as an independent controller, see the Turnstile Privacy Addendum. The legal basis is my legitimate interest in protecting the form from misuse (Art. 6(1)(f) GDPR). For transfers to the USA, the information on Cloudflare above applies.
Booking
The intro call page embeds the booking calendar of booklikeaboss, provided by Book Like A Boss LLC, 276 5th Ave Unit #2, New York, NY 10001, USA. When you open this page, the calendar is loaded from the provider’s server (bookme.name), which transmits your IP address and technical data about your browser to the provider. The embedding script sets no cookies on this website.
If you book an appointment, the provider processes the details you enter there on my behalf (such as name, email address, phone number and appointment) so that we can arrange the intro call. The legal basis is steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). Data processing is governed by booklikeaboss’s terms of use, which include GDPR provisions. As the provider is based in the USA, data may be transferred to the USA. Booking online is optional; you can reach me just as well by email or phone.
Online meetings
I hold intro calls and online coaching sessions by video via Zoom (Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA). Only if Zoom doesn’t work do I switch to Microsoft Teams (Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). The provider processes the data needed for the call on my behalf: name, email address, video and audio, time and duration, and technical data such as IP address and device. The legal basis is performance of a contract or steps prior to entering into one (Art. 6(1)(b) GDPR). Zoom and Microsoft are certified under the EU-US Data Privacy Framework, and their data processing agreements govern the processing. If you prefer a phone call, that works just as well.
Recordings: I never record intro calls. I do record coaching sessions so that you can watch your exercises and the feedback again afterwards. I only do this with your consent, which I ask for at the start (Art. 6(1)(a) GDPR). You can withdraw it at any time, including during the session. I store the recording locally on my computer, not in the Zoom cloud. You receive it as a download via WeTransfer (WeTransfer B.V., Oostelijke Handelskade 751, 1019 BW Amsterdam, Netherlands) or Dropbox (Dropbox International Unlimited Company, One Park Place, Hatch Street Upper, Dublin 2, Ireland). Only you receive the link. I delete the recording three months after our last coaching session.
Statistics
To understand which pages are read, I use Cloudflare Web Analytics. For this, the website loads a small script from Cloudflare. The service works without cookies and without profiles of individual visitors, and only counts page views in aggregate, such as which pages are visited and which country visitors come from. The legal basis is my legitimate interest in a website that meets visitors’ needs (Art. 6(1)(f) GDPR).
Links to other websites
This website contains links to other websites, for example Amazon, Thalia, LinkedIn or mcprezi.com. The operators of those websites are solely responsible for any data processing there.
Your rights
You have the right to access, rectify, erase and restrict the processing of your data, the right to data portability and the right to object to processing based on legitimate interest. Just email me at hello@michaelsinnhuber.com.
If anything about how your data is handled doesn’t feel right, please get in touch with me directly at hello@michaelsinnhuber.com. I’ll look into it personally and do my best to put it right. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at).
Last updated
October 2026