​​

As at July 2026

 

The protection of your personal data is of particular importance to me. I therefore process your data exclusively in accordance with the relevant legal provisions (General Data Protection Regulation – GDPR, Data Protection Act – DSG, Telecommunications Act 2021 – TKG). In this privacy policy, I set out the key aspects of data processing in connection with this website.

 

​

 

1. Data controller

Raphael Cisar, Human Energy Therapist (sole trader)

 

Buchfeldstraße 15

 

3393 Zelking

 

Austria

 

Email: office@raphael-cisar.com

 

Telephone: +43 676 5266662

 

 

2. Hosting (Wix)

This website is hosted by Wix (Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv, Israel, or Wix Online Platform Limited, 1 Grant’s Row, Dublin 2, Ireland). When you visit this website, Wix, acting as a data processor, automatically collects data in so-called server log files (IP address, date and time of access, pages visited, browser type and version, operating system, referrer URL). This processing is carried out on the basis of my legitimate interest in the secure, stable and error-free provision of the website (Article 6(1)(f) of the GDPR). The log data is deleted or anonymised after 14 days at the latest, unless security-related incidents require it to be retained for a longer period.

 

An adequacy decision has been issued by the European Commission for Israel (Article 45 of the GDPR). Where data is transferred to the USA, the transfer is based on the EU-US Data Privacy Framework or on standard contractual clauses (Article 46 of the GDPR). A data processing agreement has been concluded with Wix in accordance with Article 28 of the GDPR. Further information: https://de.wix.com/about/privacy

 

​

 

3. Cookies and consent management

This website uses cookies. Technically necessary cookies (e.g. for security functions, session management, login and the storage of your cookie settings) are set on the basis of Section 165(3) of the Telecommunications Act 2021 (TKG 2021) and Article 6(1)(f) of the GDPR. All other cookies – in particular statistical and marketing cookies – are only set once you have given your explicit consent via the cookie banner (Article 6(1)(a) of the GDPR).

 

You may withdraw or amend your consent at any time with future effect by accessing the cookie settings again via the relevant link in the footer of this website. You may also delete or block cookies in your browser settings at any time.

 

​

 

4. Web analytics and marketing

4.1 Wix Analytics

I use Wix’s analytics functions to analyse website usage statistically. This involves processing information about page views, time spent on the site and the origin of visitors. Processing takes place only with your consent (Article 6(1)(a) of the GDPR), which you can give via the cookie banner and withdraw at any time.

 

​

 

4.2 Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies and similar technologies to analyse website usage (including truncated IP addresses, device information, pages visited and interactions). IP addresses are truncated before being stored or are not stored permanently.

 

Processing takes place exclusively on the basis of your consent (Article 6(1)(a) of the GDPR), which you provide via the cookie banner and may withdraw at any time via the cookie settings. Data may be transferred to servers operated by Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. The retention period for user data in Google Analytics is set to 14 months. Further information: https://policies.google.com/privacy

 

​

 

4.3 Meta Pixel (Facebook Pixel)

This website uses the Meta Pixel provided by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland). This enables the behaviour of visitors to be tracked after they have been redirected to this website by clicking on an advert, and allows the effectiveness of adverts to be evaluated and target groups for advertising (Custom Audiences) to be created.

 

The Meta Pixel is activated solely with your consent (Article 6(1)(a) of the GDPR), which you provide via the cookie banner and may withdraw at any time. There is joint responsibility for the collection and transfer of data to Meta in accordance with Article 26 of the GDPR; further processing by Meta is carried out under its sole responsibility. Data may be transferred to the USA; Meta Platforms Inc. is certified under the EU-US Data Privacy Framework. Further information: https://www.facebook.com/privacy/policy

​

5. Contact

If you contact me via the contact form, by email or by telephone, the data you provide (name, email address, telephone number, content of the message) will be processed in order to deal with your enquiry and for any follow-up questions. The legal basis for this is the initiation or performance of a contract (Article 6(1)(b) of the GDPR) or my legitimate interest in responding to your enquiry (Article 6(1)(f) of the GDPR). I will not disclose this data without your consent and will delete it as soon as it is no longer required for processing and there are no statutory retention obligations to the contrary.

 

​

 

6. Online appointment booking

You can book appointments online via this website (Wix Bookings). In doing so, the data required to arrange the appointment is processed (name, email address, telephone number, service selected, appointment date and time, and any voluntary information provided in the message field). The legal basis is the initiation or performance of a contract (Article 6(1)(b) of the GDPR).

 

Please do not submit any sensitive data via the booking form, in particular no health data – such information is not required to arrange an appointment. Where you voluntarily provide personal information as part of the energy counselling service, this will be treated as strictly confidential and used exclusively for the provision of the agreed service (Article 6(1)(b) of the GDPR; in the case of special categories of data, on the basis of your explicit consent in accordance with Article 9(2)(a) of the GDPR).

 

​

 

7. Payment processing

For online payments made via this website (e.g. when booking appointments or registering for events), your payment details are processed directly by the relevant payment service provider. I do not receive any complete payment details (in particular, no complete card details) myself, but only a confirmation that the payment has been made, along with the transaction data required for accounting purposes. The legal basis in each case is the performance of the contract (Article 6(1)(b) of the GDPR). Data relevant to invoicing is retained for seven years in accordance with Section 132 of the Austrian Federal Tax Code (BAO).

 

​

 

7.1 PayPal

When paying via PayPal, your payment details are processed by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22–24 Boulevard Royal, 2449 Luxembourg). PayPal’s privacy policy applies to processing carried out by PayPal: https://www.paypal.com/at/legalhub/privacy-full

 

​

 

7.2 Card payments (Wix Payments / Stripe)

When paying by credit or debit card, the transaction is processed via Wix Payments, the payment service of the Wix platform (Wix Payments or Wix.com Ltd., see section 2), in conjunction with the payment service provider Stripe (Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland). The data required for payment processing is processed (cardholder details, card details, invoice amount, transaction data and data for fraud prevention). The card details are processed exclusively by the payment service provider in an encrypted form (PCI-DSS compliant) and are never accessible to me.

 

​

 

Processing by the payment service provider is carried out partly under its own responsibility, in particular to fulfil legal obligations under payment services and anti-money laundering regulations (Article 6(1)(c) of the GDPR) and for the purposes of fraud prevention (Article 6(1)(f) of the GDPR). Data may be transferred to Stripe Inc. or Wix.com Ltd. in the USA or Israel respectively; Stripe Inc. is certified under the EU-US Data Privacy Framework, whilst an adequacy decision by the European Commission applies to Israel (Article 45 of the GDPR). Further information: https://stripe.com/at/privacy and https://de.wix.com/about/privacy

 

​

 

8. Members’ Area (Login)

This website offers the option to create a user account. The data provided during registration (name, email address, password in encrypted form) and login times are processed. The legal basis is the performance of the user agreement (Article 6(1)(b) of the GDPR). You may delete your account at any time or request its deletion by emailing office@raphael-cisar.com; your data will then be deleted, provided there are no statutory retention obligations.

 

​

 

9. Events

When registering for events (e.g. workshops, ceremonies, group activities), the data required for organisation and delivery is processed (name, contact details, event booked, any payment information). The legal basis is the performance of a contract (Article 6(1)(b) of the GDPR). Participant lists will be deleted once the event has ended, provided there are no statutory retention obligations (particularly of a tax nature) that prevent this.

​

10. Newsletter

If you subscribe to my newsletter, I will process your email address and, optionally, your name for the purpose of sending you information about offers, events and topics relating to human energetics. Subscription is via a double opt-in procedure: after subscribing, you will receive a confirmation email with which you can verify your subscription.

 

The legal basis is your consent (Article 6(1)(a) of the GDPR in conjunction with Section 174 of the TKG 2021). You can unsubscribe from the newsletter at any time via the unsubscribe link in each email or by sending an informal email to office@raphael-cisar.com; your data will then be removed from the mailing list. The newsletter is sent via the Wix newsletter function (see point 2).

 

​

 

11. Embedded Instagram feed

An Instagram feed is embedded on this website, which loads content directly from the servers of Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland). In doing so, your IP address is transmitted to Meta; if your browser has Meta cookies (for example, because you are logged into Instagram), Meta can associate your visit to this website with your profile. This integration is based on your consent via the cookie banner (Article 6(1)(a) of the GDPR). Data may be transferred to the USA; Meta is certified under the EU-US Data Privacy Framework. Further information: https://privacycenter.instagram.com/policy

 

​

 

12. Social media profiles

I maintain profiles on Instagram, Facebook and X (Twitter). This website merely contains links to these profiles – simply clicking on the links does not result in any data being processed by me. When visiting the respective platform, the privacy policy of the relevant provider applies. In some cases, there is joint responsibility with the platform operator for the processing of Insights data on these platforms (Article 26 of the GDPR).

 

​

 

13. Retention period

I retain personal data only for as long as is necessary for the stated purposes or as required by statutory retention obligations (in particular the seven-year retention period under Section 132 of the Austrian Federal Tax Code (BAO) for accounting-related documents). Once the purpose no longer applies or the retention periods have expired, the data will be deleted.

 

​

 

14. Data security

This website uses TLS/SSL encryption (indicated by ‘https://’ and the padlock symbol in the browser address bar). This protects data that you transmit via this website against access by third parties. Furthermore, I implement appropriate technical and organisational measures to protect your data.

 

​

 

15. Your rights

You generally have the rights to access (Article 15 of the GDPR), rectification (Article 16 of the GDPR), erasure (Article 17 of the GDPR), restriction of processing (Article 18 of the GDPR), data portability (Article 20 of the GDPR) and objection (Article 21 of the GDPR). You may withdraw any consent you have given at any time with effect for the future (Article 7(3) of the GDPR); this does not affect the lawfulness of the processing carried out prior to the withdrawal.

 

To exercise your rights, please contact: office@raphael-cisar.com

 

If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with the supervisory authority. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, telephone: +43 1 52 152-0, email: dsb@dsb.gv.at, website: https://www.dsb.gv.at

 

​

 

16. No automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 of the GDPR takes place.

 

​

 

17. Changes to this privacy policy

I reserve the right to amend this privacy policy should the legal situation, the website or the services used change. The current version published on this website shall apply.