Privacy

1. Controller & contact

Anna Hanses, BOOSTbyANNA
Castellezgasse 8, 1020 Vienna, Austria
boostbyanna@gmail.com · +43 678 7803035

Contact Anna using these details with questions about your data or to exercise your rights. Further business details are available in the legal notice.

2. Website access, hosting & server logs

To deliver pages and detect errors, the web server technically requires information including the network address, requested page, time and browser details. The legal basis is Article 6(1)(f) GDPR: the legitimate interest in a functional and secure website.

This website runs on WordPress at Hostinger. Images, fonts and website files are loaded from the website server. Accepted enquiries are stored in a protected area of the WordPress database accessible only to administrators. Optional quiz analytics stores pseudonymous sessions only with consent, as described in section 5.

Hostinger processes technical connection data to provide and secure the hosting service. Logs and backups may contain personal data. Further information about the hosting provider’s processing is available in the Hostinger privacy policy.

3. Contact form & email

Für eine Trainingsanfrage fragen wir deine E-Mail-Adresse, deinen Vornamen, das gewünschte Angebot, mindestens einen Trainingsort, dein Ziel und deine Trainingserfahrung ab. Beim Angebot kannst du „Noch offen“ wählen. Im Formular kannst du bei der Verletzungsfrage „Nein“, „Ja“ oder „Ja, das möchte ich persönlich besprechen“ auswählen. Nur bei „Ja“ wird eine kurze Beschreibung benötigt. Wenn du hierzu keine Angaben über das Formular machen möchtest, kannst du Anna stattdessen telefonisch kontaktieren. Bei einer BOOST Anfrage werden außerdem die gewählte Laufzeit und Trainingshäufigkeit übermittelt. Zusätzliche Angaben und Fragen im letzten Textfeld sind freiwillig. Wir verwenden deine Angaben, um deine Anfrage zu beantworten und auf deinen Wunsch eine mögliche Zusammenarbeit vorzubereiten. Das Formular bestellt keinen Newsletter und schließt keinen Vertrag.

For pre-contractual enquiries you request, the legal basis is Article 6(1)(b) GDPR. For other matters it is Article 6(1)(f) GDPR, our legitimate interest in responding. No additional compulsory privacy consent is required. Without a reachable email address we cannot reply to the form; you can call instead.

All selected training locations and your answers are sent to boostbyanna@gmail.com using the configured SMTP service. Your email address is used as the reply address. Before email delivery, the enquiry is stored securely in WordPress with a reference number and the consent text you accepted. This lets me process it even if the email notification fails. You receive an automatic acknowledgement without copies of your answers or health information. A successful form message confirms storage, not email arrival in an inbox. Form contents are not stored in quiz analytics.

Open enquiries remain in the protected inbox until they are processed. I review open enquiries regularly and remove information that is no longer needed. Enquiries marked as completed are automatically deleted after 90 days; items in the trash after 30 days. WordPress background tasks perform the cleanup, which may be delayed if the website is not running. Earlier deletion may be requested using the contact details below. Deletion from the active database does not simultaneously remove technical hosting backups or emails already sent.

If you write directly to boostbyanna@gmail.com , this takes place through your email provider and Anna’s Gmail inbox. Clicking the email link alone does not send a message. This external mailbox is not an embedded website service.

The recipient inbox is provided by Google’s Gmail service. Enquiry content is used to handle your request. Retention depends on that purpose and any applicable statutory retention or record-keeping duties. Technical copies may also remain in the providers’ backup systems. Details of Google’s processing are available in the Google privacy policy.

4. Protection against abusive enquiries

The form uses an automatically refreshed security token (nonce) and a limit on accepted enquiries. New analytics sessions are also rate limited. A check value is calculated from the server-observed IP address using a secret server key. No plain-text IP address is stored in this block list. The check value remains pseudonymous data.

The check value and attempt count are stored without form content. A time window lasts at most one hour; expired counters are cleared on a further form attempt, with hourly WordPress cleanup also scheduled. The legal basis is Article 6(1)(f) GDPR, the legitimate interest in a secure and available contact function. No external CAPTCHA is used.

5. Training finder & optional quiz analytics

The finder asks about general training preferences, experience, approximate location, available time and desired support. Only when you use it is boost-finder-v2 created in this tab’s session storage. Without separate analytics consent, answers do not leave the browser. Recommendations work fully without consent.

Storage lets you resume and edit the finder you explicitly started. The legal basis is Article 6(1)(b) GDPR for the guidance you requested; necessary storage for this requested function is governed by section 165(3) TKG 2021. Local finder answers remain until deleted or the tab session ends; browser session restoration may restore the tab storage.

Use “Start again & delete answers” in the finder or Delete finder answers to clear this storage yourself. In private mode or when storage is blocked, the finder works without resuming after a reload.

The recommendation uses simple rules, such as preferences for direct support, online training or a multi-month programme. It is non-binding guidance, not a decision with legal or similarly significant effects under Article 22 GDPR. Only the selected offer is included in the subsequent enquiry link; other answers are not passed on.

Voluntary analytics on this website

By choosing “Allow analytics”, you consent to the WordPress plugin “BOOST Quiz Analytics” grouping your general quiz answers, viewed questions, latest recommendation, contact-link clicks, form start and successfully processed enquiry under a random session identifier. The aim is to improve the finder and enquiry journey. The legal basis is consent under Article 6(1)(a) GDPR; optional session storage access is governed by section 165(3) TKG 2021. Consent is not required for the quiz or an enquiry.

Analytics contains no names, email addresses, message text, IP addresses, browser identifiers or external page addresses. It remains pseudonymous, not guaranteed anonymous. The web server processes connection data to deliver the site; see section 4 for abuse protection. No analytics data is sent to Google Analytics or other external analytics services. Data is stored in the host’s WordPress database and is visible only to WordPress administrators.

Your choice is stored in session storage under boost-insights-consent-v1 and, with consent, a random session identifier, access key and measurement state under boost-insights-run-v1 . Your choice and identifier remain valid in this tab for at most 24 hours. Later consent does not retrospectively send earlier answers; analytics then begins with a new quiz session. Server-side analytics is automatically deleted after 90 days. If the website is not running, physical cleanup happens on the next visit; reports exclude older data. Hosting backups are managed separately from active data; deletion from active data does not immediately delete every backup copy.

You can withdraw consent at any time in the quiz or via Privacy settings . Further measurement stops and the currently linked analytics session is deleted from the server. If the connection fails, a message is shown and you can try again. Only the random identifier and deletion key remain under boost-insights-delete-v1 until deletion is confirmed, the tab ends or the 90-day period expires; no further quiz answers are recorded. “Start again & delete answers” or “Delete finder answers” also deletes the current session. Earlier sessions no longer linked to the tab cannot be associated with your name and remain subject to the 90-day limit. Withdrawal does not affect the lawfulness of prior processing.

Only with consent does an enquiry also include the random identifier. Successful processing is recorded as a yes/no value without copying form details into analytics or including the identifier in the email. Clicking an email, telephone or WhatsApp link does not prove a conversation took place. Form sending status does not prove delivery, booking or payment. Local tests are separate from live data and send no messages.

6. Voluntary information about injuries

Im Anfrageformular kannst du „Nein“, „Ja“ oder „Ja, das möchte ich persönlich besprechen“ auswählen. Nur bei „Ja“ ist eine kurze Beschreibung erforderlich. Bei der persönlichen Besprechung wird keine Beschreibung übermittelt. Bitte übermittle keine Befunde oder medizinischen Unterlagen. Wenn du keine Gesundheitsangaben über das Formular machen möchtest, kannst du Anna stattdessen anrufen und deinen Trainingswunsch persönlich besprechen.

Your voluntary answer and any brief description are processed only with your separate explicit consent, to prepare for our possible work together. The legal bases are Article 6(1)(a) and Article 9(2)(a) GDPR. Your information and the consent text you accepted are stored with your enquiry in the protected inbox and sent to my Gmail mailbox. They are not included in quiz analytics.

You can withdraw your consent at any time for the future by emailing boostbyanna@gmail.com and choose a personal conversation instead. This does not affect the lawfulness of processing before withdrawal. The information is deleted once it is no longer needed for the stated purpose or you withdraw consent, unless a legal obligation or permitted evidentiary purpose requires retention. The inbox information in section 3 applies. There is no newsletter subscription or automatic marketing consent.

7. Cookies, local files & external content

This theme does not set cookies on public pages. The deliberately started finder uses the session storage described above. Review texts are displayed from this website’s WordPress database. WordPress administration login uses necessary login and preference cookies, particularly wordpress_test_cookie, wordpress_logged_in_*, wordpress_sec_* as well as wp-settings-* and wp-settings-time-*. These relate to logged-in administrators, not reading public pages. Login cookies normally expire with the browser session, or after up to 14 days with “Remember me”; administrative preferences may remain for up to one year.

Onest fonts, images and website files are hosted locally. No external widgets are loaded without your choice. There are no external Google Fonts, embedded maps, social media or videos, external analytics or marketing services, or booking or payment platforms. Google reviews are described below.

External links, such as Google directions, are simply links. Your browser connects to the provider only when you open them, and their privacy information then applies. The noreferrer attribute prevents the previous page address from being sent with these links. Finder answers and form details are not attached.

Before introducing further optional services, they must be documented and blocked until valid consent is given. Consent controls must offer equivalent accept and reject options at the first level, no preselected categories and readily available withdrawal. This version deliberately contains no external tracking loader that can be enabled.

Google reviews

Public Google reviews are synchronised through Trustindex’s WordPress plugin “Widgets for Google Reviews” and stored in this website’s database. Saved names, review text, stars and dates are displayed directly on this website. No external profile images or review scripts are loaded in the browser, and this review section sends no visitor data to Google or Trustindex.

“View on Google” opens Google only when clicked. Google’s Google privacy policy.

8. Recipients, processors & transfers

Recipients are Anna Hanses and the providers involved in hosting and email delivery, Hostinger and Google/Gmail. Authorised administrators can manage the website and optional quiz analytics. Form submissions are not used for advertising or sold to third parties.

The providers used may also process data outside the European Economic Area. Information about recipients, countries and the safeguards described by these providers is available in the privacy policies linked above. You can also contact Anna directly with questions about your data.

9. Your rights

Subject to the relevant statutory conditions, you have rights of access, rectification, erasure and restriction of processing. Automated processing based on consent or contract also carries a right to data portability. You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time.

Any consent for a separate purpose can be withdrawn at any time for the future. Prior processing remains unaffected. Current finder answers can be deleted directly in your browser; Anna does not receive them and cannot associate them with a user account.

Write to Anna to exercise your rights. Requests are generally answered within one month; you will be informed of any legally permitted extension. You may also complain to the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb.gv.at, dsb@dsb.gv.at.

10. Last updated

Last updated: 29 September 2026. This statement describes the website with WordPress, Hostinger, the contact form, the training finder and stored Google reviews.