Legal
Privacy Policy
Information pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR). Last updated: 23 September 2026.
Your data stays with me. I process only what an appointment requires, pass nothing on for advertising purposes and use no analytics or tracking services. Here is what happens in detail.
1. Controller
- Controller
- Bettina Tassi, Bettina Relax & Aroma
Edtstraße 12, 4060 Leonding, Austria - Phone
- +43 690 10657341
- office@bettina-relax.at
An informal message to that address is enough for any privacy matter. A data protection officer is not required by law and none has been appointed.
2. Visiting the website and server log files
When you open this website, the hosting provider automatically processes data transmitted by your browser: IP address, date and time, page requested, volume of data transferred, browser type and operating system. This is technically necessary in order to deliver the page and keep operations secure and stable.
- Purpose
- Delivery of the website, operational security, error analysis
- Legal basis
- Art. 6(1)(f) GDPR (legitimate interest in a technically sound website)
- Retention
- Log files are deleted automatically after a short period; longer storage occurs only where there is concrete suspicion of an attack
- Processor
- Netlify (hosting provider) — a data processing agreement is in place
Once the site runs on its own domain, this section must name the actual hosting provider and its registered office, and the data processing agreement must be concluded. Netlify is named here because the enquiry form is built for it.
3. No cookies, no tracking, no external fonts
This website sets no cookies of its own and uses no analytics, statistics or advertising services. There are no social media plugins and no visitor counter.
The typefaces used (Fraunces and Lato) are served from our own server. No request is made to Google Fonts and your IP address is not transmitted to any third party for this purpose.
The embedded booking calendar is an exception, see section 5.
4. Appointment enquiries via the form
If you use the enquiry form, I process the details you enter: name, email address, optionally phone number, the treatment you want, preferred dates and your remarks.
- Purpose
- Handling your enquiry, arranging an appointment and any follow-up questions
- Legal basis
- Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract) and your consent under Art. 6(1)(a) GDPR, given in the form
- Recipients
- Netlify as processor for receiving the form message, and the email provider delivering it
- Retention
- Until your enquiry has been dealt with. If an appointment takes place, the data is kept for its administration and deleted once the statutory retention periods expire; if no appointment comes about, the data is deleted after six months at the latest
Health-related information
In the “remarks” field you may voluntarily tell me where you feel tension, which scents you do not tolerate or anything else to be taken into account. Such details may constitute health data within the meaning of Art. 9 GDPR. They are processed solely on the basis of your explicit consent (Art. 9(2)(a) GDPR) and only in order to carry out the treatment safely. You do not have to provide them — you are welcome to mention them verbally during the pre-treatment conversation instead.
5. Online booking via Cal.com
A booking calendar provided by Cal.com is embedded on the home page. It is loaded directly from the provider's servers when the page loads. In doing so, your IP address is transmitted to Cal.com along with technical details such as browser type and time of access. Cal.com uses its own cookies or comparable technologies to operate the calendar.
If you actually book an appointment, the details you enter are processed as well: name, email address, the slot chosen and any remarks. I receive this data in order to administer the appointment.
- Provider
- Cal.com, Inc., United States
- Purpose
- Showing available slots and binding online booking
- Legal basis
- Art. 6(1)(b) GDPR for the booking itself, Art. 6(1)(f) GDPR for embedding the calendar (legitimate interest in straightforward scheduling)
- Transfer to third countries
- A transfer to the United States is possible; it is based on the European Commission's standard contractual clauses
- Provider's privacy notice
- cal.com/privacy
If you would rather avoid this, simply arrange your appointment by email or phone — no external service is involved in that case.
The calendar currently loads automatically with the page. A two-click solution, where it loads only after explicit consent, would be more privacy-friendly. This can be added later.
6. Contact by email, phone and WhatsApp
If you contact me by email or phone, I process your details in order to answer your enquiry (Art. 6(1)(b) and (f) GDPR). Emails are kept for as long as handling the matter requires and are deleted afterwards.
The website contains a link to WhatsApp. It is a plain link that does nothing until you click it: WhatsApp then opens, and from that moment the privacy terms of WhatsApp Ireland Ltd. and Meta apply. Nothing is transmitted without a click. If you would rather avoid this, please use email or phone.
7. Disclosure of data
Your data is passed on only where this is necessary to administer an appointment (for example to the processors named above), where statutory obligations require it (for example to the tax adviser and the tax authorities as part of bookkeeping), or where you have expressly consented. Your data is never sold and never passed to third parties for advertising purposes.
8. Your rights
You have the right at any time to obtain information about the data stored about you, to have it rectified or erased, to have processing restricted, to data portability, and to object to processing based on a legitimate interest. Any consent you have given may be withdrawn at any time with effect for the future.
A message to office@bettina-relax.at is sufficient for all of this, and free of charge for you.
If you believe that the processing of your data infringes the GDPR, you may lodge a complaint with the supervisory authority:
- Supervisory authority
- Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna
dsb.gv.at
9. Data security and changes
This website is transmitted in encrypted form via HTTPS. Appointment records are kept in such a way that unauthorised persons have no access to them.
If the website is extended or the services used change, this policy will be updated accordingly. The version published here is the one that applies.
This is a translation for convenience. In legal matters the German version of this privacy policy applies.