Skip to content
Leadership Performance

Privacy policy

Scroll – Skip to the content

Last updated: October 2026

Protecting your personal data is important to us. We process personal data confidentially and in accordance with the applicable data protection provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the relevant provisions of the Austrian Telecommunications Act (TKG 2021).

In this privacy policy, we inform you which personal data are processed when you visit our website and use our services, for what purposes this is done and what rights you have.

1. Controller responsible for data processing

Dr. Sabine Wölbl, Altstadt 10, 4020 Linz, Austria

Phone: +43 650 7782797 · Email: [email protected]

2. Your rights as a data subject

Subject to the statutory requirements, you have the following rights:

  • Access: You can request information as to whether and which personal data we process about you (Art. 15 GDPR).
  • Rectification: You can request the rectification of inaccurate personal data or the completion of incomplete personal data (Art. 16 GDPR).
  • Erasure: Subject to the statutory requirements, you can request the erasure of your personal data (Art. 17 GDPR).
  • Restriction of processing: Under certain conditions, you can request the restriction of processing (Art. 18 GDPR).
  • Data portability: Subject to the statutory requirements, you have the right to receive the personal data you have provided in a structured, commonly used and machine-readable format or to have them transmitted to another controller (Art. 20 GDPR).
  • Objection: On grounds relating to your particular situation, you can object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR).
  • Withdrawal of consent: You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

The withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

To exercise your rights, please contact the email address given above.

Right to lodge a complaint

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, https://www.dsb.gv.at/).

3. General data processing when you visit our website

When you access our website, the web server may automatically collect technical information and store it in so-called server log files. This may include in particular:

  • IP address
  • date and time of access
  • pages and files accessed
  • browser and browser version used
  • operating system used
  • amount of data transferred
  • where applicable, the previously visited website

These data are processed in order to provide the website technically, to ensure its functionality and security, and to be able to detect and prevent malfunctions and abusive access.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of our website.

The data are stored only for as long as necessary for the purposes stated or as required by statutory retention obligations.

4. Cookies and local storage

Our website does not set any cookies for analytics or marketing purposes and does not use website analytics. A cookie banner is therefore not required.

If you pause a background video, your browser stores this setting locally on your device so that it is retained for your next visit. This information is not transmitted to us. You can delete it at any time via your browser settings.

This storage is strictly necessary for the function you have expressly requested (§ 165(3) TKG 2021); the legal basis is Art. 6(1)(f) GDPR.

5. Contact form and contact by email

If you contact us via the contact form on our website or directly by email, we process the personal data you submit. This includes in particular:

  • name
  • email address
  • content of your message
  • where applicable, phone number, company or other voluntary information

Inquiries submitted via the contact form are stored in our website's content management system and forwarded to us by email.

We use these data to process and respond to your inquiry and, where applicable, to prepare a business relationship.

The legal basis is Art. 6(1)(b) GDPR insofar as your inquiry serves the initiation or performance of a contract. For other inquiries, processing is based on our legitimate interest in handling incoming messages pursuant to Art. 6(1)(f) GDPR.

Your data are stored only for as long as necessary to process your inquiry, for any subsequent business relationship or due to statutory retention obligations.

Contacting us does not automatically subscribe you to a newsletter.

Our website hosting provider and the email service providers we use may process personal data during the technical transmission and delivery of your message.

6. AI Strategy Check with Formly

On our website, we offer an interactive AI Strategy Check (KI CHECK). It provides an initial assessment of how companies are positioned in their strategic approach to artificial intelligence.

For the technical provision of the questionnaire, we use the external service Formly via the platform https://www.getformly.com/.

Accessing the AI Strategy Check

The AI Strategy Check is not embedded directly in our website. Only when you click the corresponding button are you redirected to the external Formly page. When this page is accessed, the provider may process technical connection and usage data.

What information is collected?

As part of the AI Strategy Check, the answers to the questions asked are collected. We do not ask for names, email addresses or postal addresses. Personal identification of participants is not intended.

The submitted answers are stored via Formly and can be viewed by us via a technical interface.

Even though no personal contact details are requested, technical information may be processed when the external service is used which, under certain circumstances, may relate to an identifiable person.

Purpose of processing

The answers serve to carry out the AI Strategy Check and to provide initial strategic orientation.

In addition, we may in future evaluate the results statistically in aggregated form. The aim of these evaluations is to better understand general developments, challenges and fields of action in the area of AI strategy. Attribution of these evaluations to individual participants is not intended.

Legal basis and storage period

Insofar as we process personal data in connection with the AI Strategy Check, this is done on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a voluntary AI Strategy Check and gaining general insights into the strategic use of AI in companies.

Insofar as consent is required for individual technical processing operations, it must be obtained separately.

The data are stored only for as long as necessary to carry out the AI Strategy Check and for the intended evaluation purposes.

The answers are not used for personal contact, for creating personalized advertising profiles or for automatic subscription to a newsletter.

Further information on data protection at Formly can be found at: https://www.getformly.com/privacy-policy

7. Online appointment booking with TidyCal

To schedule consultations and conversations, we use the external appointment booking service TidyCal.

Accessing the appointment booking

Appointments are booked via a link or button on our website. The booking calendar is not embedded directly in our website. Only when you click the corresponding button are you redirected to the external TidyCal website. There you can select and book one of the appointment slots we have made available.

What data are processed?

When booking an appointment, the following information in particular may be processed:

  • name
  • email address
  • selected appointment
  • where applicable, further voluntary information about your request
  • technical connection and usage data

We use the booking information received to organize, conduct and, where applicable, follow up on the scheduled conversation.

Legal basis and data transfer

The legal basis is Art. 6(1)(b) GDPR insofar as the appointment booking serves to take steps prior to entering into a contract or to perform a contract. For other conversation requests, processing may be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

When you use TidyCal, data are processed by the external provider. In this context, personal data may be transferred to countries outside the European Economic Area, in particular to the USA. Such data transfers must comply with the requirements of Art. 44 et seq. GDPR.

The booking data we receive are stored only for as long as necessary for the purposes stated or as required by statutory retention obligations.

Our appointment booking page: https://tidycal.com/sabinewoelbl/ki-potenziale

Further information on data protection at TidyCal: https://tidycal.com/privacy-policy

8. Encrypted data transmission and data security

Our website uses an encrypted HTTPS connection to protect the transmission of data between your browser and our web server.

In addition, we take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse and unlawful alteration. In doing so, we take into account the nature of the data processed, the respective purposes of processing and the associated risks.

9. Recipients of personal data

We only disclose personal data to external recipients if this is necessary for providing our website, delivering our services or processing your inquiries, if there is a legal obligation, or if another appropriate legal basis applies. Possible recipients include in particular:

  • providers of website hosting and technical website maintenance
  • email and communication service providers
  • Formly as the technical provider of the AI Strategy Check
  • TidyCal for online appointment booking
  • where applicable, other contractually engaged service providers

Where service providers process personal data on our behalf, the necessary agreements pursuant to Art. 28 GDPR are concluded. Personal data are transferred to recipients outside the European Economic Area only in compliance with the statutory requirements of the GDPR.

10. Storage period

As a rule, we store personal data only for as long as necessary to fulfill the respective purpose of processing. Longer storage may occur if statutory retention obligations apply or if the data are needed for the establishment, exercise or defense of legal claims.

The specific retention periods may vary depending on the type of data, the purpose of processing and the service used.

11. Changes to this privacy policy

We reserve the right to amend this privacy policy if legal requirements, technical functions of our website or the services we use change. The version published on our website at the time of your visit applies.

12. Questions about data protection

If you have questions about the processing of your personal data or wish to exercise your rights, please contact us:

Dr. Sabine Wölbl, Altstadt 10, 4020 Linz, Austria

Email: [email protected] · Phone: +43 650 7782797