Privacy policy
1. Controller
The controller for the processing of your personal data on this website is High5Consulting GmbH, Karl-Popper-Straße 22, 1100 Vienna, Austria, email: service@high5consulting.at.
2. General information
Protecting your personal data matters to us. We process it in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act.
Personal data is any information relating to an identified or identifiable natural person, such as name, email address or IP address.
3. Hosting and server logs
Our website runs on a server in the European Union ([add data centre operator and location]). When you visit, the server processes technically necessary data (IP address, time, requested address, browser type) to deliver the page and keep it secure.
Legal basis: legitimate interest under Art. 6(1)(f) GDPR. A data processing agreement under Art. 28 GDPR is in place with the data centre operator.
4. Cookie-free analytics
We count page views with Umami, an open-source analytics tool that we operate ourselves in the EU. Umami sets no cookies, stores nothing on your device and does not record full IP addresses; visits are only evaluated in aggregate. If your browser sends a "Do Not Track" signal, nothing is recorded.
Legal basis: legitimate interest under Art. 6(1)(f) GDPR in a data-minimising evaluation of which content is read.
5. Contact by email
If you email us, we process your details solely to handle your enquiry.
Legal basis: pre-contractual measures under Art. 6(1)(b) GDPR. Retention: until your enquiry has been fully handled or as required by statutory retention obligations.
6. Appointment booking (Microsoft Bookings)
To book a first call, we link to Microsoft Bookings (Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Data is only transferred to Microsoft once you open the link. When you book, we process the data you provide (name, email address, company, request, your answers in the booking form) to arrange the appointment and hold it as a Microsoft Teams meeting.
Legal basis: pre-contractual measures under Art. 6(1)(b) GDPR. Microsoft processes the data on our behalf under a contract pursuant to Art. 28 GDPR; data is stored in the EU. A transfer to the USA cannot be ruled out in individual cases; Microsoft is certified under the EU-US Data Privacy Framework.
7. Fonts
Fonts and all other content are loaded from our own server. No data is transferred to Google or other font providers.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21).
Please contact service@high5consulting.at. If you believe your rights have been violated, you can lodge a complaint with the Austrian Data Protection Authority: www.dsb.gv.at.
9. Security
We protect your data with technical and organisational measures against unauthorised access, loss and manipulation. The website is delivered exclusively over an encrypted connection (HTTPS).
10. Changes
We update this privacy policy when legal or technical requirements or our services change. The current version is always available on this page.