Privacy Policy
Last updated: September 2025
The controller within the meaning of the EU General Data Protection Regulation (GDPR) and other applicable data protection laws is:
Xiao Chen, MBA, Fischerstrand 16/1, 1220 Vienna, Austria — hello@gap2overlap.com
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus (server location: Europe). A data processing agreement is in place with the hosting provider.
What data is processed and how?
When visiting the website (server logs)
- Data processed: IP address, date/time, requested URL, referrer, browser/OS (user agent), HTTP status.
- Purpose: Operation of the website, IT security (e.g. defence against attacks), error analysis.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation).
- Recipients: Hosting provider (processor).
- Retention period: Logs are stored for 30 days for security purposes and then automatically deleted.
- Provision: Technically necessary for the provision of the website.
Contact form
- Data processed: Name, company, e-mail address, message and, if applicable, the desired service.
- How it works: Form data is transmitted encrypted (HTTPS) to the web server and forwarded by e-mail to hello@gap2overlap.com. So that no inquiry is lost, a backup copy is also kept in a non-public area of the web server and deleted automatically after 90 days.
- Purpose: Processing your enquiry, preparing offers, initiating a contract.
- Legal basis: Art. 6(1)(b) GDPR (pre-/contractual measures) or Art. 6(1)(f) GDPR (communication in a B2B context).
- Recipients: Hosting provider (processor, server location Europe).
- Retention period: Business correspondence is retained for up to 7 years (statutory retention obligation in Austria).
Contact by e-mail / phone
- Data processed: Contact details and content provided by you (e.g. name, e-mail, phone number, message).
- Purpose: Processing your enquiry, preparing offers, initiating/executing a contract.
- Legal basis: Art. 6(1)(b) GDPR (pre-/contractual measures) or Art. 6(1)(f) GDPR (communication in a B2B context).
- Retention period: Business correspondence relating to accounting records is retained for up to 7 years (statutory retention obligation in Austria).
External link to LinkedIn
- This website contains only a simple link to a LinkedIn profile. No data is transmitted to LinkedIn merely by visiting this website. LinkedIn's privacy policy applies only upon clicking the link.
Appointment booking (Google Calendar “appointment schedule”)
- How it works: the booking calendar is not loaded automatically. Only when you click “Show available times” is an iframe loaded from Google. Without that click, no data is transmitted to Google when you visit the page.
- Data processed when the calendar loads: IP address, browser and device information, time zone, and any cookies set by Google.
- Data processed when you book: name, email address, the slot you select, and any additional information you voluntarily provide. The appointment is created as a calendar entry including a Google Meet link; both you and I receive a confirmation email from Google.
- Purpose: arranging and holding a no-obligation intro call.
- Legal basis: Art. 6(1)(a) GDPR (consent, given by your click) for loading the calendar; Art. 6(1)(b) GDPR (pre-contractual measures) for the booking itself.
- Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (processor). Transfer to Google LLC in the USA cannot be ruled out; it is safeguarded by EU Standard Contractual Clauses and Google LLC's certification under the EU-US Data Privacy Framework.
- Retention: calendar entries are retained for up to 7 years where they constitute business correspondence; otherwise they are deleted once the matter is closed.
- Withdrawal: you may withdraw your consent at any time with effect for the future by reloading the page and not opening the calendar again. You can alternatively arrange an intro call at any time via the contact form or by email.
- Further information: Google's privacy policy.
Your rights
- You have the right to access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interests.
- If you have given consent (for example, to load the booking calendar), you may withdraw it at any time with effect for the future.
- To exercise any of these rights, please contact: hello@gap2overlap.com.
- Right to lodge a complaint: You may file a complaint with the Austrian Data Protection Authority (see contact details below).
Security
- Data transmission is encrypted via TLS/SSL (https).
Supervisory authority
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna, Austria
Phone: +43 1 52 152-0
E-Mail: dsb@dsb.gv.at
Web: www.dsb.gv.at
Contact for data protection matters
Vienna Chamber of Commerce (Wirtschaftskammer Wien)
Service Center
Straße der Wiener Wirtschaft 1
1020 Vienna, Austria
T: +43 1 514 50 1010
Contact form: wko.at