Privacy Policy
Last updated: April 2026
1. Who is responsible for your data
Ana Paula Alves Bernardes trading as Moving with Ana, Krenngasse 5, 1180 Vienna, Austria
This person is the data controller within the meaning of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
2. What data do we collect and why
Contact form
We collect your name, email address, and message content to respond to your enquiry.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
Newsletter
We collect your email address (and optionally your name) to send updates and offers.
Legal basis: Art. 6(1)(a) GDPR (consent)
You may unsubscribe at any time.
Event registration & payment
We process your name, contact details, and payment information to fulfil our contract.
Legal basis: Art. 6(1)(b) GDPR
Website usage (server logs)
We automatically collect technical data (IP address, browser, pages visited) to ensure security and functionality.
Legal basis: Art. 6(1)(f) GDPR
3. Third-party services
Mailchimp (newsletter)
Provider: The Rocket Science Group LLC, USA
Data transfer is based on the EU–US Data Privacy Framework.
Residual risks (e.g. access by US authorities) cannot be fully excluded.
Stripe (payments)
Provider: Stripe Payments Europe Ltd, Ireland
Payment data is processed directly by Stripe. We do not store card details.
4. Cookies
This website uses cookies — small text files stored on your device. Some cookies are technically necessary for the website to function. Others are used for analysis or marketing purposes and are only set with your consent.
You can manage or withdraw your cookie consent at any time via your browser settings. Note that disabling certain cookies may affect the functionality of the website.
5. Data Retention
We retain your data only for as long as necessary for the purposes described above, or as required by Austrian and EU law. Specifically:
- Contact form enquiries: deleted after 3 years unless an ongoing relationship exists
- Newsletter data: retained until you unsubscribe
- Registration and payment data: retained for 7 years in accordance with Austrian accounting law (§ 132 BAO)
- Server logs: deleted after 30 days
6. Health-Related Data
In the context of movement sessions or programmes, you may voluntarily share information about your physical or mental condition. This constitutes special category data under Art. 9 GDPR.
Such data is:
- never shared with third parties
- processed only with your explicit consent
- used solely to ensure safe participation
- treated strictly confidentially
7. Changes to this privacy policy
We may update this privacy policy from time to time. The current version is always available at movingwithana.com/privacy-policy. We encourage you to review it periodically.