Translation for information only. The German version is legally binding.
In short: This website sets no cookies and uses no tracking and no third-party analytics tools; I count visitor numbers myself, without cookies and without IP addresses. Fonts and images are hosted on our own server. That’s why there’s no cookie banner here.
1. Controller
Johannes Bürger
Am Anger 1
7441 Pilgersdorf
Österreich
E-mail: johannes@johannesbuerger.com
No data protection officer has been appointed, as there is no legal obligation to do so.
2. Hosting and server log files
This website is hosted by IONOS SE. To deliver the site, the server processes technically necessary data. Of this, its access log stores only the date and time, page requested, referrer, browser identifier (browser type and version, operating system), campaign details in the link (e.g. utm parameters) and amount of data transferred – without IP address, without cookies and without scripts. This log is deleted after 7 days. Only to fend off attacks does the server use IP addresses briefly in memory and, in the case of suspicious access, for a block lasting no more than 24 hours. This serves the secure and stable operation of the site (legitimate interest, Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. From this log I also count page views to see how visitors reach the website (e.g. Instagram, Facebook, search engines, ads). Only daily totals without any personal reference are kept (legitimate interest in measuring advertising success, Art. 6(1)(f) GDPR).
3. SSL/TLS encryption
For security reasons, this website uses TLS encryption. You can recognise it by the padlock symbol and “https://” in the address bar.
4. No cookies, no tracking
This website sets no cookies, stores nothing on your device and does not embed any analytics, advertising or social media services. Consent under § 165 Abs. 3 TKG 2021 is therefore not required. Links to Instagram, TikTok and Facebook are simple links. You only leave this site when you click on them. Exception: the login cookie in the members’ area (see section 8).
5. Contact by e-mail
If you write to us, we use your details (name, e-mail address, content of the message) only to handle your enquiry (Art. 6(1)(b) or (f) GDPR). Your data is not passed on unless this is necessary to handle your enquiry or required by law.
6. Money system check
The check runs entirely in your browser. Your answers are neither stored nor transmitted.
7. Purchases via Digistore24
The purchase buttons lead to Digistore24. Digistore24 GmbH acts as reseller and processes the data required for purchase, payment, invoicing and fraud prevention under its own responsibility (Art. 6(1)(b) GDPR). Digistore24’s privacy policy applies.
8. Members’ area and emails
The members’ area at johannesbuerger.com/mitglieder/ runs on my own server at IONOS. After a purchase, Digistore24 transmits your name, your email address and the order so that I can set up your access (Art. 6(1)(b) GDPR). Your password (encrypted only) and your course progress are also stored. For logging in, the members’ area sets a technically necessary cookie that only remembers your login. I send emails (access, course and webinar emails) via the IONOS mail server. Customers only receive marketing emails if they have confirmed this themselves via a confirmation link (Art. 6(1)(a) GDPR, § 174 TKG 2021); you can unsubscribe at any time with one click in every email. Email opens are not measured at all – my emails contain no tracking pixel. I only count anonymously how often the links in an email were clicked in total: for this, a link briefly passes through my server, which records only the total number of clicks per email – without any link to you (legitimate interest, Art. 6(1)(f) GDPR). I do not use any third-party newsletter, course or tracking services.
9. Free webinars
If you register for a webinar at johannesbuerger.com/webinar/, we process your first name, your e-mail address, the chosen date, your IP address and the time of registration and confirmation (double opt-in). We use this to send you access to the webinar room, reminders and, after confirmation, a personal download link to the matching workbook, valid for 30 days (Art. 6(1)(b) GDPR). In the webinar room we store whether and for how long you watched and whether you clicked the offer button. This tells us how well the webinar is received (Art. 6(1)(f) GDPR). No cookies are set for this. Unconfirmed registrations are deleted after 7 days. If you have not signed up for further emails, first name, e-mail and IP address are deleted 90 days after the booked date, after which only anonymous figures remain. You will only receive further e-mails with tips and offers if you ticked a separate box and confirmed it via the e-mail link (Art. 6(1)(a) GDPR, § 174 TKG 2021). You can unsubscribe at any time with one click in every e-mail.
10. How long I keep data
- Server log of page views: without IP address; deleted after 7 days. Blocks of IP addresses to fend off attacks end after no more than 24 hours.
- Newsletter: until you unsubscribe. Unconfirmed sign-ups are deleted after 30 days. After you unsubscribe, I delete your data after 30 days; after that, only a block note in the form of a non-reversible checksum remains so that no more emails are sent to this address.
- Webinar registration without newsletter consent: deleted 90 days after the booked date.
- Members’ area: as long as your access exists or until you request deletion.
- Purchase data (transmitted by Digistore24): 7 years, because I am required to keep it for accounting purposes (§ 132 BAO).
- Email enquiries: 3 years after the last message.
- Backups: Backups are encrypted, are used only for restoring data and are continuously replaced by newer ones; deleted data may still be contained in them for some time.
11. No transfers to third countries
I do not transfer any data to countries outside the EU or the EEA. My service providers (IONOS, Digistore24) process the data in the EU.
12. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw any consent you have given at any time with effect for the future. Just write to johannes@johannesbuerger.com.
13. Right to lodge a complaint
If you believe your data is not being processed correctly, you can lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde): Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at, www.dsb.gv.at.
Last updated: October 2026