Privacy Policy
1. Data Controller
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Balevita – Balance in Life
Owner: Marcella Gross-Varga
Lavaterstrasse 6/4-37
1220 Vienna
Austria
Email: [email protected]
Phone: +43 676 94 54 977
2. General Information on Data Processing
Protecting your personal data is important to us. We process personal data exclusively in accordance with applicable legal requirements, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (Datenschutzgesetz – DSG) and the Austrian Telecommunications Act 2021 (Telekommunikationsgesetz – TKG 2021).
Personal data means any information relating to an identified or identifiable natural person.
We process personal data only where an appropriate legal basis exists, particularly for the performance of a contract or pre-contractual measures, compliance with legal obligations, legitimate interests or your consent.
3. Website Hosting and CRM Platform – HighLevel
This website and its associated functions, including forms, customer relationship management (CRM), automations and, where applicable, appointment scheduling, communication and newsletter features, are provided through the HighLevel platform.
The service provider is HighLevel or the relevant company within the HighLevel group responsible for providing the respective service.
When you use our website, the following data may be processed:
• IP address
• Date and time of access
• Browser and device information
• Pages visited and technical access data
• Name and contact details submitted through forms
• Communication and interaction data
• Information you voluntarily provide when making an enquiry or registering for a service
Where processing is necessary for the operation and security of our website, it is based on our legitimate interests pursuant to Article 6(1)(f) GDPR.
Data required to respond to enquiries or establish and perform contractual relationships is processed in particular pursuant to Article 6(1)(b) GDPR.
Where HighLevel processes personal data on our behalf, it acts as a data processor.
The use of HighLevel may involve transfers of personal data to the United States or other countries outside the European Economic Area (EEA). Appropriate data protection safeguards are applied where required by law.
4. Contact and Enquiry Forms
If you contact us through a contact form, by email or through another communication channel, we process the information you provide in order to respond to your enquiry and any follow-up questions.
This may include your name, email address, telephone number and the content of your message.
Depending on the nature of your enquiry, processing is based on Article 6(1)(b) GDPR for pre-contractual measures or contractual purposes, or Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.
Please do not submit health information or other particularly sensitive personal data through general contact forms unless this is expressly requested and necessary.
5. Newsletter and Email Marketing
If you subscribe to our newsletter or other electronic communications, we process your email address and, where applicable, your name and information relating to your subscription.
Newsletters and marketing communications are sent based on your consent pursuant to Article 6(1)(a) GDPR and the applicable provisions of the Austrian Telecommunications Act 2021.
You may withdraw your consent at any time with effect for the future, particularly by using the unsubscribe link included in our emails.
We use features of the HighLevel platform for newsletter distribution, contact management and automated communications.
Where technically available and enabled, our newsletter system may provide information about whether and when an email was opened or a link within it was clicked.
Where consent is legally required for such tracking or analysis, it will only take place with your prior consent.
6. Payments via Stripe
We use Stripe to process online payments.
For users within the European Economic Area, payment services are provided in particular by Stripe Payments Europe Limited, Ireland.
When making a payment, the following information may be processed:
• Name and contact details
• Billing and payment information
• Transaction details
• IP address
• Other information necessary for payment processing and fraud prevention
Processing is carried out primarily for the performance of a contract and payment transaction pursuant to Article 6(1)(b) GDPR and, where applicable, for compliance with legal obligations pursuant to Article 6(1)(c) GDPR.
As part of its global infrastructure, Stripe may also process data outside the European Economic Area.
According to Stripe, applicable international data transfer mechanisms and safeguards are used for such processing.
7. Social Media
Balevita maintains profiles on the following social media platforms:
When you visit our profiles on these platforms, the respective platform operators' privacy policies also apply.
Our website may contain links to our social media profiles. Where these are standard hyperlinks, merely displaying the links does not generally establish a connection to the respective social media platform.
However, if social media plugins, embedded content, tracking pixels or similar technologies are used, personal data may be transmitted to the respective provider when you visit our website.
Where legally required, such non-essential technologies will only be activated after obtaining your prior consent.
8. Cookies and Similar Technologies
Our website uses cookies and, where applicable, similar technologies.
Cookies are small pieces of information that may be stored on or accessed from your device.
Strictly necessary cookies may be used where required to provide a service or function explicitly requested by you.
Non-essential cookies and similar technologies, particularly those used for analytics, marketing or tracking purposes, will only be activated after obtaining your prior consent, where legally required.
Your consent is voluntary and may be withdrawn or modified at any time with effect for the future.
Detailed information about the cookies used, their providers, purposes and retention periods is available through the cookie settings on our website.
9. Server Log Data
When you visit our website, technically necessary information may be processed automatically.
This may include your IP address, browser type, operating system, date and time of access and the pages visited.
This processing serves to ensure the secure and stable operation of our website and is based on our legitimate interests pursuant to Article 6(1)(f) GDPR.
10. Data Retention
Personal data is generally retained only for as long as necessary to fulfil the respective processing purpose or to comply with applicable statutory retention requirements.
Data relating to contractual and business relationships may be stored for longer periods where required by law.
Data processed solely on the basis of consent is generally retained until consent is withdrawn or for as long as necessary for the respective purpose, unless another legal basis or statutory retention obligation applies.
11. Recipients of Personal Data
Where necessary for the respective purposes, personal data may be disclosed to the following categories of recipients:
• IT, hosting and platform service providers
• CRM and communication service providers
• Payment service providers
• Tax advisers and accounting service providers
• Other service providers and data processors required for the delivery of our services
• Public authorities and other bodies where disclosure is legally required
Where required, appropriate data processing agreements are concluded with data processors in accordance with Article 28 GDPR.
12. International Data Transfers
The use of certain service providers may involve the processing of personal data outside the European Economic Area.
Such transfers are carried out only in accordance with the requirements of the GDPR, particularly on the basis of an adequacy decision by the European Commission or appropriate safeguards, such as the European Commission's Standard Contractual Clauses, where required.
13. Your Data Protection Rights
Subject to the applicable legal requirements, you have the following rights:
• Right of access to your personal data
• Right to rectification of inaccurate personal data
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object to certain types of processing
• Right to withdraw consent at any time with effect for the future
To exercise your rights, please contact us using the contact details provided above.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
In Austria, the competent supervisory authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).
14. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect changes in applicable legislation, our website or the services and technologies we use.
Last updated: November 2026
