Privacy policy

Information pursuant to Art 13 of the General Data Protection Regulation (GDPR)

Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions. Below we inform you which data we process when you visit our website and when you sign up for our newsletter.

1. Controllers

The controllers responsible for data processing are the partners of the Vet Shockwave Academy and Vet-Stosswellen-Akademie, Dr Karen Barker-Benfield and Dr Elisabeth Binder, Vetphysiokurs GesbR
Elisenstraße 108 B
1230 Vienna, Austria
Email: office@aavpr.at

The partners jointly determine the purposes and means of processing and are joint controllers within the meaning of Art 26 GDPR. Please send requests to exercise your rights to the contact email address above. The partners have agreed that Dr Karen Barker-Benfield and Dr Elisabeth Binder are the contacts for data protection questions, handle requests to exercise your rights and fulfil the information obligations. Both partners are jointly responsible for the security of processing and the selection of service providers. Irrespective of this, you may exercise your rights against either of the two controllers.

2. Visiting the website

Server log files and hosting

When you access our website, the web server automatically processes the following data: IP address, date and time of access, page accessed, amount of data transferred, referrer URL, browser type and version, and operating system.

Purpose: providing the website, ensuring technical security and stability, defending against attacks.
Legal basis: Art 6(1)(f) GDPR (legitimate interest in the secure and functional operation of the website).
Retention: we do not store server log files ourselves. Our hosting provider processes this data only as part of the data processing agreement and deletes it in accordance with the contractually agreed periods.

Our website is hosted on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. The provider processes the data as a processor on our behalf pursuant to Art 28 GDPR. The website is delivered via a global server network, which may involve a transfer to the USA. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer is therefore based on an adequacy decision of the European Commission (Art 45 GDPR).

The fonts on our website are hosted locally on our server. No connection to third-party servers is established for them when you visit the site.

Cookies

Our website only uses technically necessary cookies that are strictly required to operate the website. These are set on the basis of § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021) and Art 6(1)(f) GDPR; no consent is required. We do not use cookies for analytics or marketing purposes.

3. Contacting us

If you contact us by email, telephone or via a contact form, we process the data you provide (in particular your name, contact details and the content of your enquiry) in order to handle your request.

Legal basis: Art 6(1)(b) GDPR where your enquiry is aimed at concluding a contract, otherwise Art 6(1)(f) GDPR (legitimate interest in answering enquiries).
Retention: the data is deleted once your enquiry has been fully dealt with, but no later than after one (1) year, unless statutory retention obligations apply.

4. Newsletter

With our newsletter we inform you about the launch and new offers of our online platform, about courses, dates and professional topics. To sign up, we need your first and last name and your email address.

Sign-up form: the sign-up form on our website is provided by our email service provider Brevo and is loaded from its servers when you open the page. In the process, your IP address is transmitted to Brevo. The legal basis is Art 6(1)(f) GDPR (legitimate interest in a secure and GDPR-compliant newsletter sign-up).

Double opt-in: after signing up, you receive an email in which you confirm your sign-up by clicking a confirmation link. Only then are you added to the mailing list. This ensures that nobody can sign up using someone else's email address. As proof of your consent, we store the time of sign-up and confirmation as well as the IP address used. For this confirmation email, our email service provider technically records whether it was delivered and opened and whether the confirmation link was clicked. This data is used solely to prove your sign-up and to ensure deliverability (Art 6(1)(c) and (f) GDPR); it is not analysed for marketing purposes.

Legal basis: your consent pursuant to Art 6(1)(a) GDPR and § 174 TKG 2021. The sign-up data is stored as proof of consent on the basis of Art 6(1)(c) GDPR in conjunction with Art 7(1) GDPR.

Withdrawal: you can withdraw your consent at any time with effect for the future, for example via the unsubscribe link at the end of every newsletter or by email to office@aavpr.at. This does not affect the lawfulness of processing carried out before the withdrawal.

Email service provider: we use Brevo, a service of Sendinblue SAS, 9-17 rue Salneuve, 75017 Paris, France. The data is stored on servers within the European Union. The provider processes your data as a processor pursuant to Art 28 GDPR exclusively on our behalf.

Performance measurement: our newsletters contain technical elements (a tracking pixel and links redirected via our email service provider) that let us see whether a newsletter was opened and which links were clicked. We use this analysis to improve our content. It is based on the consent you give when signing up (Art 6(1)(a) GDPR, § 165(3) TKG 2021). You can withdraw it at any time with effect for the future, for example via the unsubscribe link in every newsletter or by email to office@aavpr.at.

Retention: your data is stored until you unsubscribe. After you unsubscribe, we delete your email address from the mailing list. We keep the records of your consent for up to three years after you unsubscribe in order to be able to prove that the mailings were lawful. Unconfirmed sign-ups are deleted after 30 days.

5. Recipients and transfers to third countries

Your data is only transferred to third parties where this is necessary for the purposes stated or required by law. Recipients may be:

• our hosting provider and our newsletter service provider as processors, with whom we have concluded agreements pursuant to Art 28 GDPR;
• authorities and courts, where we are legally obliged to do so;
• legal representatives in the event of asserting or defending legal claims.

Our newsletter service provider stores your data within the European Union. For transfers to the USA by our hosting provider, see section 2. Where, beyond this, individual sub-processors of our service providers process data outside the EU or EEA, this only takes place under the conditions of Art 44 et seq. GDPR, in particular on the basis of an adequacy decision of the European Commission (Art 45 GDPR) or appropriate safeguards such as the European Commission's standard contractual clauses (Art 46(2)(c) GDPR).

6. Your rights

You have the following rights with regard to your personal data:

• Right of access (Art 15 GDPR): you can request information on whether and which of your data we process, for what purpose, to whom it is disclosed and how long it is stored.
• Right to rectification (Art 16 GDPR): you can request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure (Art 17 GDPR): you can request the deletion of your data where it is no longer needed for the purposes, you have withdrawn your consent, or no statutory retention obligations apply.
• Right to restriction of processing (Art 18 GDPR): you can request that your data is only stored but not processed further, for example while its accuracy is being checked.
• Right to data portability (Art 20 GDPR): you can request that we provide the data you gave us on the basis of consent or a contract in a common, machine-readable format, or transfer it to another controller.
• Right to withdraw consent with effect for the future (Art 7(3) GDPR): you can withdraw consent you have given, for example for the newsletter, at any time with effect for the future. This does not affect the lawfulness of processing carried out until then.
• Right to object (Art 21 GDPR): where we process your data on the basis of legitimate interests (Art 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation.
• Right to lodge a complaint (Art 13(2)(d) GDPR): if you believe that the processing of your data violates data protection law, you can lodge a complaint with the supervisory authority. In Austria this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, email: dsb@dsb.gv.at, tel: +43 1 52 152-0.

7. Automated decisions and obligation to provide data

No automated decision-making, including profiling, within the meaning of Art 22 GDPR takes place. Providing your data is voluntary. Without your email address, however, we cannot send you the newsletter or answer your enquiry.

8. Changes to this privacy policy

We adapt this privacy policy when our data processing or the legal situation changes, in particular with the launch of our course platform. The version published on our website applies.

As of September 2026. This is a translation; the German version is legally binding.