Privacy Policy
Last updated: September 2026
The protection of your personal data is important to us. We process personal data exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Austrian Telecommunications Act 2021 (TKG 2021).
- Controller
The controller responsible for the processing of personal data on this website is:
Michaela Ruderes
Sole Proprietor
Max-Tendler-Straße 12
8700 Leoben
Austria
Email: michaela@ruderes-insights.at
Phone: +43 664 141 66 31
- General information on data processing
Personal data is processed only insofar as this is necessary for the operation of this website, the handling of enquiries, the implementation of pre-contractual measures, the performance of a contract, the fulfilment of legal obligations, or where another legal basis applies.
Depending on the type of processing, the legal basis is in particular:
Art. 6(1)(a) GDPR – consent,
Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures,
Art. 6(1)(c) GDPR – compliance with legal obligations,
Art. 6(1)(f) GDPR – legitimate interests.
- Technical provision of the website
When this website is accessed, technically necessary data may be processed. This may include, in particular, the IP address, date and time of access, pages or files accessed, browser and device information, and technical log data.
This processing serves to provide the website securely, reliably, and without technical errors, and to detect and prevent technical attacks or misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of this website.
Where external IT or hosting service providers are used, they may receive personal data to the extent necessary. Where they process data on our behalf, this is done in accordance with the applicable legal requirements for data processing on behalf of a controller.
- Contacting us
If you contact us by email, telephone, or via a contact option provided on the website, we process the data you provide. This may include, in particular, your name, email address, telephone number, company affiliation, and the content of your message.
The processing is carried out for the purpose of handling your enquiry and further communication.
If your enquiry relates to the initiation or performance of a contract, the processing is based on Art. 6(1)(b) GDPR.
For other enquiries, the processing is based on our legitimate interest in efficiently handling and responding to enquiries pursuant to Art. 6(1)(f) GDPR.
The data will be deleted once it is no longer required for handling the enquiry, unless statutory retention obligations or other legitimate grounds require longer storage.
- Contract and customer data
In the course of initiating and carrying out business relationships, we may process, in particular, names, contact details, company affiliations, invoice and payment details, information relating to the agreed service, as well as communications necessary for the provision of training sessions, workshops, or other services.
The legal basis is Art. 6(1)(b) GDPR.
Where statutory accounting, tax, or retention obligations apply, the processing is additionally based on Art. 6(1)(c) GDPR.
- Appointment booking via Calendly
For scheduling appointments, we may use the service Calendly, provided by Calendly LLC, USA.
If you book an appointment via Calendly, Calendly processes the information necessary for arranging the appointment. This may include, in particular, your name, email address, requested appointment time, time zone, and any additional information you voluntarily enter.
The processing serves to organise and manage appointments.
Where the appointment relates to the initiation or performance of a contract, the processing is based on Art. 6(1)(b) GDPR. In other cases, the processing is based on our legitimate interest in efficient appointment management pursuant to Art. 6(1)(f) GDPR.
Calendly LLC is based in the United States. For international data transfers, Calendly currently relies, among other mechanisms, on the EU-US Data Privacy Framework and, where required, the European Commission’s Standard Contractual Clauses.
Calendly’s own privacy provisions also apply to processing carried out by Calendly.
- Plausible Analytics
This website uses Plausible Analytics for statistical analysis of website usage.
Plausible is designed as a privacy-friendly analytics service. According to the provider, it does not use analytics cookies or persistent personal user identifiers.
The data collected is used to create aggregated usage statistics and is not used to create personalised advertising profiles.
To the extent that personal data within the meaning of data protection law is processed, the processing is based on our legitimate interest in data-minimising analysis and optimisation of our website pursuant to Art. 6(1)(f) GDPR.
- Cookies and similar technologies
This website uses technically necessary cookies or similar technologies only to the extent required for the operation, security, or expressly requested functions of the website.
Technically necessary cookies may be used without prior consent under Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021). Prior consent is generally required for non-essential cookies or comparable access to information on a user’s device.
Where consent is required, the processing is based on Art. 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.
Consent may be withdrawn at any time with effect for the future.
- Recipients of personal data
Personal data is only disclosed where this is necessary for the respective processing purposes, where there is a legal obligation to do so, or where another lawful basis exists.
Possible recipients include, in particular, IT and hosting service providers, appointment scheduling services, technical service providers, and, where necessary, tax advisers, accounting service providers, banks, and public authorities.
- International data transfers
Where service providers used by us process personal data outside the European Economic Area, such transfers are carried out only in accordance with Articles 44 et seq. GDPR.
In particular, an adequacy decision of the European Commission or appropriate safeguards such as Standard Contractual Clauses may be relied upon.
- Storage period
Personal data is stored only for as long as necessary to fulfil the respective processing purpose.
Data may also be stored for longer periods where statutory retention obligations apply or where further storage is necessary for the establishment, exercise, or defence of legal claims.
- Your rights
Subject to the applicable legal requirements, you have, in particular, the right to access under Art. 15 GDPR, rectification under Art. 16 GDPR, erasure under Art. 17 GDPR, restriction of processing under Art. 18 GDPR, data portability under Art. 20 GDPR, and objection under Art. 21 GDPR.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
To exercise your rights, you can contact us at michaela@ruderes-insights.at.
- Right to lodge a complaint
If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with the competent data protection supervisory authority.
In Austria, this is:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
- Changes to this Privacy Policy
This Privacy Policy may be amended if legal requirements, technical functions, or services used on the website change.
The version currently published on this website shall apply.