Privacy Policy

1. General Information

This privacy policy informs you about the nature, scope and purpose of the processing of personal data on this website.

The operators of this website take the protection of your personal data very seriously. We treat your data confidentially and in accordance with the statutory data protection regulations (GDPR, Austrian DSG).

2. Controller

2a. Data Protection Officer & Contact for Data Protection Matters

Michael Lederer is personally responsible for all data protection matters. Within the company he performs the function of data protection officer, monitors compliance with the GDPR (and, in Switzerland, the revDSG), maintains the record of processing activities, reviews processors and handles data subject requests and data breaches.

Note: Our company is not legally required to appoint a data protection officer under Art. 37 GDPR; the function is performed voluntarily and internally. Data subject requests are answered within one month (Art. 12(3) GDPR).

2b. Course Purchases: Payment, Invoicing & Learning Centre

When you purchase an online course or PDF product, we process: first and last name, email address, purchased product, price and discount, time of purchase, payment status, invoice number and – where available – campaign source data (UTM parameters).

• Payment processing: Stripe Payments Europe Ltd., Dublin (Ireland). Payment data (card data) is processed exclusively by Stripe; we do not receive complete card data.
• Invoicing: Creation and dispatch of the invoice with the exact product designation; retention for 7 years (§ 132 BAO, Austrian tax code).
• Learning centre: Creation of an account (magic link), storage of course progress, exercise answers, downloads and certificates.
• Download links: personalised, time-limited links; we log the time and number of downloads to protect against unauthorised sharing of copyrighted content.

Legal bases: Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (tax retention obligations), Art. 6(1)(f) GDPR (legitimate interest in protecting against misuse and copyright infringement).

3. Collection and Storage of Personal Data

When you visit our website, certain data is processed automatically:

3.1 Server log files (automatic)

• IP address
• Browser type and version
• Operating system
• Referrer URL
• Date and time of the server request

This data is technically necessary to display the website correctly and serves system security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

4. Cookies and Consent Management

This website uses cookies and comparable technologies (e.g. localStorage). Non-essential cookies are only set after your explicit consent via the cookie banner.

Legal bases:

• Art. 6(1)(a) GDPR (consent) – for analytics and third-party cookies
• Art. 6(1)(f) GDPR (legitimate interest) – for strictly necessary cookies

4.1 Overview of Cookies Used

The list contains the typical cookies of the services used. Providers may unilaterally change names or storage periods. Third-party cookies are only set after consent; we have no influence on the content of foreign cookies.

You can withdraw your consent at any time via the cookie banner or delete cookies in your browser.

5. Contact Form / Qualification Form

If you contact us via the contact form, the following data is processed:

• Name & email address
• Company, number of employees (optional)
• Main challenge / message

Purpose: Processing your enquiry and assessing a potential collaboration.

Legal basis: Art. 6(1)(b) GDPR (contract performance / pre-contractual measures).

We store this data for as long as necessary to process your enquiry (usually max. 24 months after the last contact).

5a. Lead Magnets & Automated Email Sequences

On individual landing pages, we offer free content in exchange for your email address. The following is processed:

• Email address, name where given
• Source of the opt-in (e.g. "checklist")
• Time of the opt-in, status of the email sequence
• For self-assessments: answers to the respective questionnaire and the calculated result

Purpose: Delivery of the requested content plus supplementary follow-up emails (usually three emails on day 3, day 7 and day 14) with further tips and references to suitable offers.

Unsubscribing (1-click unsubscribe): Every follow-up email contains a personalised unsubscribe link (token-based) as well as the standard List-Unsubscribe header (RFC 8058), which allows you to leave the sequence at any time with one click – no reason and no login required.

Legal basis: Art. 6(1)(a) GDPR (consent) and § 7(3) UWG / § 174 TKG (own similar products/services).

Storage period: until withdrawal of consent, at most 24 months after the last contact. Converted recipients (e.g. after a booking or waitlist entry) are automatically removed from the sequence.

6. Hosting

Our website is hosted by a European hosting provider that stores the following data:

• Server log files
• Technical access data

Legal basis: Art. 6(1)(f) GDPR.

7. Analytics and Tracking Services

This website uses analytics and tracking services that are only activated after explicit consent via the cookie banner.

7.1 Google Analytics 4

We use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for the statistical evaluation of user behaviour. Google Analytics uses cookies that enable an analysis of website usage. The IP address is anonymised (IP masking). Transmission to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework.

Further information: Google. Opt-out: browser add-on for deactivation.

Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).

7.2 Microsoft Clarity

We use Microsoft Clarity (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA) to analyse user behaviour using heatmaps and session recordings. Clarity captures anonymised interaction data (clicks, scrolling, mouse movements). Personal entries in forms are automatically masked.

Further information: Microsoft.

Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).

7a. Meta Pixel (Facebook/Instagram)

The provider is Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland. We use the Meta pixel for reach measurement and conversion tracking. The events captured are "PageView" (page view) and "InitiateCheckout" (start of a purchase), so that we can evaluate which ad led to a purchase.

Legal basis: your consent via the cookie banner (Art. 6(1)(a) GDPR). The pixel is only loaded after your consent. You can withdraw your consent at any time with future effect via "Cookie settings" in the footer.

Data transfer to the USA: A transfer to Meta in the USA cannot be ruled out. It takes place on the basis of the EU-US Data Privacy Framework, under which Meta is certified.

Storage period: up to 180 days according to Meta.

7b. Checkout & Payment Processing

The purchase of the workbook is processed through the course platform schnauze.digital. The platform is operated by Pitch & Pivot Michael Siegfried Lederer, Pallenbergstraße 11, A-1130 Vienna, Austria. Your email address and payment data are processed there for contract performance (Art. 6(1)(b) GDPR).

Payment is handled by Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). Payment data is transmitted exclusively to Stripe; we do not receive complete payment data.

8. External Services and Processors

8.1 Brevo Meetings (appointment booking)

For online appointment booking we use Brevo Meetings by Sendinblue GmbH (Köpenicker Str. 126, 10179 Berlin, Germany), a subsidiary of Brevo SAS (Paris, France). The booking interface is displayed on our booking pages as an external widget on click ("click-to-load"). Only after you actively click "load booking widget" is a connection to meet.brevo.com established; before that, no data is transmitted to Brevo and no cookies are set.

Transmitted during booking: name, email address, selected appointment, optionally phone number and message. Processing takes place on servers within the EU (France); a data processing agreement (DPA) pursuant to Art. 28 GDPR exists with Brevo. Further information: Brevo privacy policy.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(a) GDPR (consent to loading the external widget via click-to-load).

8.2 Brevo (email marketing)

For sending emails (e.g. lead magnet delivery, follow-up emails) we use Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany). Your email address and, where applicable, your name are transmitted to Brevo. Data processing takes place in the EU.

Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR (contract performance).

8.3 Stripe (payment processing)

For payment processing we use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). When you make a purchase, payment data (credit card data, billing address, VAT ID) is transmitted directly to Stripe and processed there in compliance with PCI-DSS. We do not receive complete payment data.

Legal basis: Art. 6(1)(b) GDPR (contract performance).

8.4 WhatsApp (communication)

This website contains a WhatsApp button. When clicked, you are redirected to WhatsApp (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). Meta processes your data in accordance with its own privacy policies. Data is only transmitted when you actively use the button.

Legal basis: Art. 6(1)(a) GDPR (consent through active use).

8.5 ElevenLabs (AI voice assistant & voice calls)

On parts of this website (e.g. voice widget on the homepage, intake tool) an AI-based voice assistant provided by ElevenLabs, Inc. (USA) is used. During active use, audio data (microphone input) and the generated transcript are transmitted to ElevenLabs and processed there. We additionally store server-side: conversation ID, duration, transcript and automatically determined fields (name, company, concern, qualification score) for follow-up of the enquiry.

ElevenLabs is listed under the EU-US Data Privacy Framework. Use of the voice assistant is voluntary and only takes place after actively clicking the microphone button.

Legal basis: Art. 6(1)(a) GDPR (consent through active use); for a subsequent enquiry, Art. 6(1)(b) GDPR.

8.6 Cloud infrastructure (database & hosting)

For storing form data, intakes and orders, we use a cloud database. The data is processed on servers within the EU or in GDPR-compliant data centres. A data processing agreement (DPA) exists.

Legal basis: Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest).

8.7 Lovable AI Gateway (AI processing)

For AI-supported functions (e.g. evaluation of self-assessments, generation of recommendations, internal content pipelines) we use the Lovable AI Gateway, which forwards requests to models from Google (Gemini) and OpenAI (GPT). Only the input data necessary for the respective request is transmitted; your data is not used to train the models.

Legal basis: Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest in efficient provision of the services).

8.8 Intake tool for pet professionals

Via our optional intake tool, pet professionals and their end customers can store data on the pet owner, the pet (species, breed, age, weight, concern), address and photos. Access is exclusively via an unsigned, secret access token (link). Photos are stored in a dedicated cloud storage bucket within the EU.

Legal basis: Art. 6(1)(b) GDPR (contract performance towards the commissioning pet professional). For personal data of third parties contained therein (e.g. end customers), the respective pet professional is a joint controller.

8.9 Internal reach measurement (page events)

To optimise our content, we record aggregated page views (path, referrer, anonymous session ID) in our own database. No IP addresses, cookies or device fingerprints are stored; identification of individual persons is not possible.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reach measurement).

9. Storage and Deletion

Personal data is stored only for as long as necessary for the respective purpose or as prescribed by statutory retention periods (e.g. 7 years under the Austrian tax code (BAO) for tax-relevant data).

10. Your Rights as a Data Subject

You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent given (with future effect)

Please direct enquiries to: ml@schnauze.digital

Unsubscribing from email sequences: Every automated follow-up email contains a 1-click unsubscribe link as well as the standard List-Unsubscribe header. One click is enough – you are immediately and permanently removed from the respective sequence.

Complaint authority in Austria:
Austrian Data Protection Authority (DSB), Barichgasse 40-42, 1030 Vienna
www.dsb.gv.at

11. Changes to this Privacy Policy

We reserve the right to adapt this policy in the event of technical or legal changes. The current version can always be found on this page.

Version: September 2026 (addition of data protection officer, purchase/invoicing and learning centre processing) · English translation of the German Datenschutzerklärung