Thomas Marek

Privacy policy

Protecting your personal data matters to me. This privacy policy explains which data is processed when you visit this website.

Controller

Thomas Marek, Georgistraße 95, 7000 Eisenstadt, Austria
Email: office@thomasmarek.com

1. Access data and hosting

You can visit this website without providing any personal information. Each time a page is accessed, the web server automatically stores so-called server log files, e.g. IP address, date and time, page requested, referrer and browser used. This data is used solely to operate the website securely and reliably. The legal basis is my legitimate interest pursuant to Art. 6(1)(f) GDPR.

The website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider processes the data on my behalf (Art. 28 GDPR) on servers in Germany.

2. Contact and class registration

If you contact me by email or phone, or register for a class or workshop, I process the information you provide (e.g. name, email address, phone number, chosen class) to handle your enquiry or run the class (Art. 6(1)(b) and (f) GDPR). The data is deleted once it is no longer needed for this purpose, unless statutory retention obligations apply.

3. Newsletter

You sign up for the newsletter on an external page of the provider Mailchimp (Intuit Inc., 2700 Coast Avenue, Mountain View, CA 94043, USA), to which this website only links. By signing up, you consent to the processing of your email address for sending the newsletter (Art. 6(1)(a) GDPR). Registration is confirmed and logged using a double opt-in procedure.

Newsletter tracking: The newsletter contains technical tools (e.g. an invisible tracking pixel and personalised links) that measure whether a newsletter was opened and which links were clicked. This involves processing your email address, IP address, date and time, and information about your device and email client, among other things. The analysis helps tailor the newsletter to readers’ interests and is based on the consent you give when signing up (Art. 6(1)(a) GDPR).

The data is transferred to the USA on the basis of the EU-US Data Privacy Framework, under which the provider is certified, or of standard contractual clauses. You can unsubscribe from the newsletter and the tracking at any time via the link in every newsletter or by email to office@thomasmarek.com. After unsubscribing, your address is removed from the mailing list. More information: www.intuit.com/privacy/statement.

4. Cookies

This website does not set any cookies for analytics or advertising and does not use any analytics services. The only cookie set is a technically necessary one (“pll_language”) that remembers your chosen language (German or English). It contains no personal data and expires after one year (§ 165(3) Austrian TKG 2021, Art. 6(1)(f) GDPR). Other technically necessary cookies are only used for logging in to the admin area. No consent is required for these, which is why there is no cookie banner.

5. Fonts

The fonts used on this website are stored locally on the web server and loaded from there. No connection to servers of Google or other font providers is made when you access the pages.

6. Videos

Videos are not embedded on this website. Only a preview image loaded from this server is shown. You are redirected to YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) only when you click on it. Google’s privacy policy then applies: policies.google.com/privacy.

7. Links to social networks and calendar services

This website contains links to Instagram and YouTube, and the events calendar contains links for exporting dates to Google Calendar and Outlook. These are simple links: data is only transferred when you click a link and open the respective platform, where the provider’s privacy policy applies.

8. My social media profiles

I maintain profiles on Instagram and YouTube. When you visit these profiles, the operators process your data (e.g. IP address, device and usage data) under their own responsibility, usually also for advertising and market research purposes, and generally use cookies to do so. I have no influence on this processing.

Instagram is operated by Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland. I am jointly responsible with Meta for the statistical analyses of my Instagram profile (“Insights”) (Art. 26 GDPR); Meta assumes primary responsibility, including for fulfilling your rights. Data may be transferred to Meta Platforms, Inc. in the USA (EU-US Data Privacy Framework). Privacy information: www.facebook.com/privacy/policy.

YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may be transferred to Google LLC in the USA (EU-US Data Privacy Framework). Privacy information: policies.google.com/privacy.

The legal basis for my profiles is my legitimate interest in providing information about my classes and my artistic work (Art. 6(1)(f) GDPR). Requests regarding your rights are best addressed directly to the respective operator, but you can also contact me.

9. Your rights

You have the right to

  • access the personal data I process about you (Art. 15 GDPR),
  • rectification of inaccurate or completion of incomplete data (Art. 16 GDPR),
  • erasure of your data, unless a legal obligation or another reason under Art. 17(3) GDPR prevents it (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Where I process data on the basis of my legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). I will then no longer process your data unless there are compelling legitimate grounds or the processing serves to establish, exercise or defend legal claims. You may object to processing for direct marketing purposes (e.g. the newsletter) at any time without giving reasons.

Right to lodge a complaint: If you believe that the processing of your data violates data protection law, you can lodge a complaint with a supervisory authority. In Austria, this is the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna (www.dsb.gv.at).

For questions about data protection, you can reach me at office@thomasmarek.com.

Last updated: October 2026