Privacy Policy
We process your personal data, which fall under the following categories:
Account data: First name, last name, billing address.
Contact data: Email address, phone number (if provided).
Contract and booking data: Information about the chosen service (e.g., Heart Wall session, introductory offer), booked appointments, and status of session packages (10-session packages).
Payment data: Chosen payment method, payment status, transaction IDs, and invoice details (processing is done via external payment providers).
Usage and metadata: IP address, time of access to the booking system, browser type, and information from functional cookies (to ensure the booking process).
Voluntary information: Information you may provide in the “Notes” field during booking (e.g., regarding your concerns).
Lawfulness and Purposes of Processing
1. Fulfillment of contractual obligations (Art. 6 para. 1 lit. b GDPR):
We process your data for the following purposes to fulfill our contracts with you or to carry out pre-contractual measures:
Appointment management: Providing and handling online appointment bookings for individual sessions and trial offers
Contract processing: Sale and management of session packages (10-session blocks) and execution of Heart Wall packages.
Customer management: Maintaining a customer account to view booked appointments and remaining credits.
Payment processing: Automated billing of services via online payment service providers (Stripe with Credit Card, Apple Pay, and Google Pay / Klarna – processed via Stripe / PayPal) as well as the creation of legally compliant invoices.
Communication: Sending automated booking confirmations and appointment reminders.
2. Compliance with legal obligations (Art. 6 para. 1 lit. c GDPR):
We process data received from you due to a legal obligation, namely to fulfill statutory retention requirements under the Austrian Federal Fiscal Code (BAO) and the Commercial Code (UGB).
3. Legitimate interests (Art. 6 para. 1 lit. f GDPR):
We process data about you based on our legitimate interests or those of a third party, for the purpose of ensuring IT security, defending against cyberattacks, and providing a flawless online booking function.
4. Consent (Art. 6 para. 1 lit. a and Art. 9 para. 2 lit. a GDPR):
If you voluntarily provide us with information (e.g., regarding your concerns in the “Notes”field), we process this based on your consent by submitting the form. You can revoke this consent at any time by emailing daniela@emotionalefreiheit.at. Revocation means that we will no longer process your data for this purpose from that point onward.
Data Retention
We store your data for the duration of the ongoing business relationship. After termination, invoice data is stored for 7 years due to tax retention obligations.
Data Sharing
We engage processors for data processing.
Your data is shared with the following recipients:
1. All-Inkl.com (Neue Medien Münnich), Germany, as hosting provider (data stored on their servers).
2. Payment Service Providers & Payment Processing
If you choose to pay via PayPal, your payment data will be forwarded to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, as part of the payment processing. For details, please refer to the PayPal Privacy Policy.
Components of Stripe have been integrated into this website. The technical operator for customers in the EU is Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. When paying via this gateway, the data you enter (such as name, amount, card or wallet information) will be transmitted to Stripe. This processing is based on Art. 6 (1) (b) GDPR (performance of a contract).
If you choose the Apple Pay payment method, the technical processing is handled via the aforementioned Stripe gateway. In this process, the payment data stored in your Apple Wallet (e.g., tokenized credit card numbers, device IDs) will be transmitted in encrypted form to Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. This data processing is based on Art. 6 (1) (b) GDPR (performance of a contract).
If you choose the Google Pay payment method, the technical processing is also handled via the aforementioned Stripe gateway. In this process, the payment data stored in your Google Account (e.g., credit card information, billing data) will be transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This data processing is based on Art. 6 (1) (b) GDPR (performance of a contract).
If you choose a Klarna payment method (e.g., instant bank transfer or purchase on account), the technical processing is also handled via the aforementioned Stripe gateway. For the purpose of executing the payment and verifying identity and creditworthiness, your data will be forwarded to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. This data processing is based on Art. 6 (1) (b) GDPR as well as to safeguard the legitimate interests of Klarna (Art. 6 (1) (f) GDPR).
Use of Cookies and Tracking Technologies
This website uses cookies and similar tracking technologies. Strictly necessary cookies are used to provide the core functionalities of the website and the booking system (BookingPress). Additionally, when accessing payment methods (Stripe, PayPal), functional cookies from the respective payment providers are loaded to ensure secure transaction processing and prevent fraud. The use of non-essential cookies is based solely on your voluntary consent (Art. 6 (1) (a) GDPR) via the cookie banner. You can adjust or withdraw your consent settings at any time.
Your data will also be processed, at least in part, outside the EU or the EEA, specifically in the USA (by the payment service providers Stripe, PayPal, Apple, and/or Google). The adequate level of data protection is established by an adequacy decision of the European Commission pursuant to Art. 45 GDPR (EU-U.S. Data Privacy Framework).
Data Subject Rights
No automated decision-making or profiling takes place.
You can contact us at:
Daniela Cerny
Grellgasse 14/1/8
1210 Vienna
daniela@emotionalefreiheit.eu
+43 676 6134355
Our data protection officer: A data protection officer is not legally required and has not been appointed.
