Privacy Notice (Global)

Effective date: [21 08 2025]
Who is responsible (controller)?
This website and related forms/pages are operated by Toli Malt, a private individual trading as “theweekendclimber” (no registered company).
Address: [Bahnhofstr. 35, Innsbruck, 6020, Austria]
Email: [toli AT theweekendclimber] (preferred contact for privacy requests)

1) Scope of this notice

This notice applies to:

my website/pages (including Wix-hosted pages),
Facebook/Instagram Lead Ads (Instant Forms) and any surveys (e.g., Typeform/Tally/Google Forms),
emails/newsletters I send (e.g., via MailerLite/Brevo),
analytics/advertising pixels (e.g., Meta Pixel),
and, if applicable, checkout pages on third-party platforms.

2) What data I collect

Identity & contact: name, email address (from forms you submit).
Survey responses: multiple-choice/short answers you provide.
Device/usage: IP address, browser type, device identifiers, pages viewed, timestamps; collected via cookies/pixels and similar tech.
Transactional (only if you later purchase): product, amount, currency, timestamps, and payment status (payment card data is handled by the payment processor, not by me).

3) Why I process your data (purposes & legal bases)

Under the EU GDPR (Art. 6):

Consent: to send you guides/newsletters/updates and run surveys; to place/measure non-essential cookies and pixels; to remarket/retarget where applicable. You can withdraw consent anytime.
Contract/performance: to deliver content you requested (e.g., sending a promised guide) or, if applicable later, to provide paid course access.
Legitimate interests: site security, preventing abuse/fraud, basic analytics to improve content (balanced against your rights).
Legal obligations: bookkeeping/tax records if I sell anything.

I do not sell your personal data.

4) Who receives your data (processors & partners)

I use reputable service providers who process data on my behalf under data-processing terms:

Hosting/Website: Wix.com Ltd.
Email: MailerLite UAB and/or Brevo (Sendinblue SAS).
Automation: Zapier, Inc. and/or Make.com (Celonis/Make).
Forms/Surveys: Typeform S.L., Tally B.V., or Google LLC (Google Forms) – depending on what I use for a given survey.
Analytics/Ads: Meta Platforms, Inc./Ireland (Meta Pixel; Lead Ads).
Payments (only if later applicable): e.g., Stripe, PayPal, or the checkout provider of the course platform.

I disclose data to authorities where required by law and to professional advisors (e.g., tax) where necessary.

5) International transfers

Many providers are outside the EEA (e.g., US). Where data leaves the EEA/UK, I rely on EU Standard Contractual Clauses (SCCs) and comparable safeguards (and, where provided, additional security measures) to protect your data.

6) How long I keep data

Email/contact & survey responses: until you unsubscribe or ask me to delete them, or after 24 months of inactivity, whichever comes first (unless a longer retention is required by law).
Lead Ads data: I export promptly from Meta and store it as above.
Transactional/tax records (if applicable): kept for statutory retention periods (often up to 7 years in Austria).

7) Cookies, pixels & tracking

Essential cookies are needed for the site to function and cannot be switched off.
Non-essential cookies/pixels (e.g., analytics, Meta Pixel for measuring ad performance/retargeting) are used only with your consent. You can manage or withdraw consent at any time via the cookie banner or your browser settings.
Retargeting/interest-based ads mean you might see my ads on other platforms; you can also manage ad preferences directly in those platforms.

8) Your rights

If you are in the EEA/UK (including Austria), you have the right to:

access your personal data,
rectify inaccuracies,
erase data (“right to be forgotten”),
restrict or object to processing (including direct marketing),
data portability,
withdraw consent at any time (does not affect prior processing).

To exercise rights, email [toli AT theweekendclimber]. I may need to verify your identity.

Supervisory authority (Austria):
Österreichische Datenschutzbehörde (Austrian Data Protection Authority)
Barichgasse 40–42, 1030 Wien, Austria – dsb.gv.at – dsb@dsb.gv.at

UK residents: UK GDPR rights apply; you can contact the ICO (ico.org.uk).
California residents: I do not “sell” personal information as defined by the CCPA/CPRA. You may request access/deletion and limit certain uses of sensitive personal information by emailing [toli AT theweekendclimber].

9) Children

This site and my content are not directed to children under 16. I do not knowingly collect data from children. If you believe a child provided data, contact me to delete it.

10) Security

I use reasonable technical and organizational measures (e.g., HTTPS, access controls, minimal data collection) to protect your data. No system is perfectly secure; please share information carefully.

11) Lead magnets, surveys & marketing emails

If you submit a form to get a guide/lead magnet, I will use your details to send that item and related updates.
For newsletters/updates I rely on your opt-in consent; every email includes an unsubscribe link.
Surveys are voluntary; I use aggregated insights to decide what to produce next.

12) Third-party links

My pages may link to services I do not control. Their privacy practices apply when you visit them.

13) Changes to this notice

I may update this notice. The “Effective date” tells you when it last changed. Material changes will be highlighted where feasible.

14) How to contact me

Controller: [Toli Malt], private individual, “theweekendclimber”
Email: [toli AT theweekendclimber]
Postal address: [Bahnhofstr. 35, Innsbruck, 6020, Austria]

Optional add-ons you can keep or delete

Analytics details: If you use Google Analytics, add its name, purpose (usage stats), and your legal basis/controls.
Payment processors: If/when you start selling, list the provider(s) and link their privacy pages.
Detailed cookie list: Wix can generate a cookie table; you can link it from here.