+43 680 24 73 773

office@ecstaticbusiness.com

Privacy Policy / Information pursuant to Articles 13 and 14 GDPR

 

Protecting your personal data is a matter of course for me. I process your data exclusively on the basis of the applicable legal provisions – in particular the General Data Protection Regulation (GDPR) and the Telecommunications Act 2021 (TKG 2021).

In this privacy policy, I inform you about the most important aspects of data processing in connection with my website as well as my coaching and consulting services.

1. Data Controller

Martin J. Bartmann
Stonefield International GmbH
Ing. Leopold-Fuhrmannstrasse 5
2512 Tribuswinkel
Tel.: +43 680 24 73773
E-Mail: office@ecstaticbusiness.com

2. What Data Do I Process?

Depending on the contact, assignment or use of the website, I process in particular the following categories of data:

a) Master data & contact details
Name, email-address, phone number, address.

b) Contract and Billing Data
Data required for contract fulfilment, appointment organisation, service delivery and invoicing.

c) Coaching & Consulting Data
Information regarding your personal situation transmitted during the course of our cooperation.

d) Special Categories of Personal Data (Sensitive Data)
Within the scope of coaching, this may include information regarding your psychological well-being or health.

e) Communication and Enquiry Data
Content of your enquiry (e.g. via email), correspondence, appointment arrangements as well as audio and video data during online coaching sessions.

f) Technical Data When Using the Website
IP address, date/time of access, pages accessed, referrer URL, browser and device information, operating system.

g) (Optional) Date of Birth Data
Place of birth, date of birth and, where applicable, time of birth – exclusively if these details are necessary for the fulfilment of the specifically agreed service.

3. Purposes of Data Processing

Personal data is processed for the following purposes:

  • Contract Fulfilment & Coaching: Conducting coaching sessions, consulting and pre-contractual measures (quotation, appointment scheduling).

  • Documentation & Quality Assurance: Ensuring the traceability of content and coaching processes (especially in the case of recordings).

  • Invoicing: Fulfilment of legal obligations (tax law, retention obligations).

  • Communication: Exchange with customers, clients and interested parties.

  • Newsletter Distribution: (If explicitly subscribed).

  • Website Operation: Security, stability and analysis (Google Analytics 4 – only with consent).

4. Legal Basis of Processing

Die Verarbeitung stützt sich auf folgende Rechtsgrundlagen:

  • Art. 6(1)(b) GDPR: Contract fulfilment or pre-contractual measures.
  • Art. 6(1)(a) GDPR: Consent (e.g. for newsletters, website analysis or the recording of sessions).
  • Art. 9(2)(a) GDPR: Explicit consent for the processing of sensitive data (e.g. health-related topics in coaching).
  • Art. 6(1)(c) GDPR: Legal obligations (e.g. accounting).
  • Art. 6(1)(f) GDPR: Legitimate interest (e.g. IT security, economic operation).

For storing or accessing information on your device (cookies), Section 165(3) TKG 2021 (consent requirement for non-essential cookies) also applies.

5. Online Coaching via Video Conferencing Tools

For the purpose of conducting online coaching and consulting sessions, I use video conferencing services depending on prior agreement. These may include in particular:

  • Zoom (Provider: Zoom Video Communications, Inc.)
  • Microsoft Teams (Provider: Microsoft Ireland Operations Limited)
  • Google Meet (Provider: Google Ireland Limited)

When using these tools, the following applies:

  • Data Processed: Audio and video data, communication content (e.g. text chat) as well as technical metadata (e.g. IP address, duration of the session, participant information).
  • Third-Country Transfer: As the parent companies of these providers are based in the USA, it cannot be ruled out that data may be transferred to the USA. The data transfer is based on the EU-US Data Privacy Framework (adequacy decision) and/or Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR to ensure an adequate level of data protection.

 

6. Recording and Transcription via Plaud Note

If a recording of coaching sessions takes place, this is done exclusively after your prior explicit consent.

  • Tool Used: Plaud Note for recording and, if applicable, AI-supported transcription.
  • Purpose: Documentation of the coaching process, quality assurance and traceability.
  • Processing: Audio recordings and the resulting text data are processed.
  • Third Country: It cannot be ruled out that data may be processed by external service providers (e.g. for transcription) or transferred to third countries.
  • Retention Period: These recordings and transcripts are generally stored for a maximum of 6 months and then deleted, unless statutory retention obligations prevent this.

 

7. Newsletter

If you subscribe, I process your email address as well as your first and last name.

  • Legal Basis: Consent (Art. 6(1)(a) GDPR).
  • Unsubscribing: Possible at any time via the link in the newsletter or by email to office@ecstaticbusiness.com.

 

8. Cookies & Consent Management (CookieYes)

This website uses cookies. Necessary cookies are used for technical provision. Non-essential cookies (analytics) are only set after your consent.

I use CookieYes | GDPR Cookie Consent to manage your preferences. You can withdraw your selection at any time via the cookie settings on the website.

 

9. Google Tools (Tag Manager, GA4, Search Console)

  • Google Tag Manager: For the technical management of website tags. It only loads tools requiring consent after your approval.
  • Google Analytics 4 (GA4): Only with consent. Used for reach measurement and statistical evaluation. IP anonymisation is activated by default. Data may be transferred to the USA (residual risk of government access).
  • Google Search Console: Used to monitor technical performance in search. As a rule, no direct visitor data is collected on the website for this.

 

10. Server-Logfiles

To ensure operation, server log files (IP address, time, browser) are processed.

  • Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR).

 

11. Confidentiality & Access

  • Confidentiality: All content from coaching sessions is treated by me as strictly confidential. Data will not be passed on to third parties unless this is legally required or has been explicitly agreed with you.
  • Recipients: Generally, I have access to your data. In addition, instruction-bound data processors (IT hosting, accounting tools, video conferencing providers, Plaud Note) may have access to the extent necessary. These providers are contractually obliged to comply with the GDPR.

 

12. Data Security

I implement appropriate technical and organisational measures (e.g. SSL/TLS encryption of the website, secure passwords, encryption of data carriers, regular updates) to protect your data against unauthorised access.

 

13. General Retention Period

Personal data is stored only for as long as necessary for the respective purposes:

  • For the duration of the customer relationship or the processing of enquiries.
  • In accordance with statutory retention obligations (e.g. 7 years pursuant to Section 132 BAO for accounting records in Austria).
  • Until consent is withdrawn (e.g. for recordings after 6 months, see point 6).

 

14. Your Rights as a Data Subject

You have the right to access, rectification, erasure, restriction, data portability, withdrawal and objection.

To exercise your rights, please contact me at: office@ecstaticbusiness.com

If you believe that the processing violates data protection law, you have the right to lodge a complaint with the supervisory authority (in Austria: Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna).

 

15. Automated Decision-Making

Automated decision-making including profiling pursuant to Art. 22 GDPR does not take place.

 

Status of this Privacy Policy: May 2026