Privacy Policy

Last updated: April 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. Principles of Data Processing

I process personal data only to the extent necessary to provide my website and services, where a legal basis exists, or where you have given your consent. I do not pass your data on to third parties unless this is necessary for fulfilling a contract or required by law.

3. Hosting (Vercel)

This website is hosted by Vercel Inc., 340 Pine Street, Suite 701, San Francisco, CA 94104, USA. When you visit the website, server log files are automatically collected that your browser transmits. These include your IP address, browser type and version, operating system, referrer URL, hostname, and time of the server request.

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient provision of the website). Vercel is certified under the EU-US Data Privacy Framework and ensures an adequate level of data protection through Standard Contractual Clauses (SCC). More information: vercel.com/legal/privacy-policy.

4. Fonts

This website uses Google Fonts (Inter, Bricolage Grotesque, Caveat), which are embedded locally. When the page loads, no connection is made to Google's servers. No personal data is transmitted to Google.

5. Contact Form and Email

When you contact me via the contact form or by email, the information you provide (name, email address, message and any other voluntary details) will be processed to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

Your data will not be passed on to third parties and will be deleted after your enquiry has been processed, unless statutory retention obligations apply.

6. Newsletter (Brevo)

I use Brevo (Brevo SAS, 7 rue de Madrid, 75008 Paris, France) to send newsletters. Registration uses a double opt-in process: after signing up, you will receive a confirmation email and will only be added to the mailing list once you click the confirmation link.

The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw your consent at any time — every newsletter email contains an unsubscribe link. Brevo processes data exclusively on servers in the EU. More information: brevo.com/legal/privacypolicy.

7. Appointment Booking (Cal.com)

Cal.com (Cal.com, Inc.) is used for booking initial consultations. When you book an appointment, your name, email address, and the chosen time slot are processed. The legal basis is Art. 6(1)(b) GDPR. More information: cal.com/privacy.

8. Web Analytics (Plausible Analytics)

This website uses Plausible Analytics (Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia). Plausible is a privacy-friendly alternative to conventional web analytics tools: no cookies are set, no personal data is collected, and no IP addresses are stored. Analytics data is fully anonymised and processed on servers in the EU.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the statistical analysis of user behaviour to improve the website). No separate consent is required as no personal data is processed. More information: plausible.io/data-policy.

9. Cookies

This website does not use tracking or marketing cookies. Technically necessary cookies may be set by the hosting provider (Vercel) to deliver the website. These do not contain personal data.

10. Your Rights

You have the right to:

• Access (Art. 15 GDPR) — what data I hold about you
• Rectification (Art. 16 GDPR) — correction of inaccurate data
• Erasure (Art. 17 GDPR) — deletion of your data, unless statutory retention obligations apply
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR) to processing based on legitimate interests
• Withdrawal of consent with effect for the future

To exercise these rights, contact: lukas@movetothesky.com

You also have the right to lodge a complaint with the Austrian Data Protection Authority: dsb.gv.at.

11. Data Security

This website uses SSL/TLS encryption for security reasons and to protect the transmission of personal data. You can identify this by the padlock symbol in your browser's address bar.

12. Updates to this Privacy Policy

I reserve the right to update this privacy policy if legal requirements or the services used change. The current version is always available on this page.