Legal

Privacy

Last updated: 20 October 2026

This page explains what happens to your data when you visit visenza.co or register your interest. In short: the site sets no cookies and embeds nothing from third parties. We count, without names, which pages are read and which podcast episodes are listened to (section 2). All other data is only created when you enter it yourself.

1. Who this policy applies to and who is responsible

This policy applies to the website visenza.co with its interest forms and to the emails that result from them. For the offers on other subdomains of visenza.co (for example come-closer.visenza.co), the privacy policies published there apply.

The controller responsible for processing your data is:

Visenza LLC
2165 Van Buren St, Suite 911
Hollywood, FL 33020, United States of America
Represented by Mag. Christina Kirchmayr
Email: christina@visenza.co
Phone: +43 664 5335826 (WhatsApp)

Visenza LLC is based in the USA and has no establishment in the EU. Because this website is aimed at people in Austria, Germany and Switzerland, the General Data Protection Regulation (GDPR) applies to the processing of your data, Art. 3(2)(a) GDPR.

There is no data protection officer because the requirements of Art. 37 GDPR are not met.

2. Visiting the website

When you open visenza.co, Cloudflare delivers the page. In doing so, Cloudflare processes, as technically necessary, your IP address, the date and time of the request, the page requested, your browser type and your operating system. This is needed so that the page reaches you and is protected against attacks.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a functioning and secure website.

Storage period: Cloudflare keeps this data only as long as needed for delivery and security. We do not store any IP addresses ourselves. We store the figures of the step counter and of the play counter in the podcast (below) without names and delete them after 90 days. Server error messages end up briefly in a technical log at Cloudflare, without your registration data.

No cookies, nothing from third parties: This website sets no cookies and uses no analytics tools, pixels or embeds from third parties. The fonts and the podcast episodes are hosted on our own server. Your browser connects to no service other than Cloudflare, which delivers the page. The only measurements are our own counters, the step counter and the play counter in the podcast.

Step counter: So that we can see which pages are read and at which point people leave the site, we count the steps of a page view, without names. For this, your browser creates a random number on every page view. It exists only in the working memory of the open page and disappears when you change page, reload or close it. There is no number that recognizes you across several pages or visits. Together with this number we store:

• the step: page opened, how far you read (a quarter, half, three quarters, to the end), how long the page was visibly open (from 10, 30, 60, 120 and 300 seconds) and whether you started a video with sound,
• which subpage of visenza.co you are viewing and which subpage of visenza.co you came from,
• whether you clicked a link to another website, and only its name (for example naturewalk.visenza.co or instagram.com), never the exact link,
• the language of the page, the origin (the tag in your link if you came via a tagged link, otherwise only the name of the website you came from), the device type (phone, tablet or computer, derived from the width of your window) and the time.

For the interest form, we record that you started it, which field you touched (first name, email or message), that you sent it, and whether it worked or an error was shown. We never store your name, your email address, what you type, or your IP address. The counter sets no cookie and stores nothing in your browser. If your browser sends “Do Not Track” or “Global Privacy Control”, we do not count. We discard requests from search engines and other programs. We do not link these figures to your registration of interest or to your messages to us. The figures are stored with Supabase on servers in Frankfurt am Main (sections 5 and 6) and deleted automatically after 90 days.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is to see which pages are read and where people stop, so that we can improve the texts and structure of the website. You can object at any time (section 7).

Play counter in the podcast: On the Podcast page (visenza.co/podcast and visenza.co/en/podcast) you can listen to the episodes directly. The audio files come from our own server, not from Spotify or any other service. So that we know which episodes are listened to and how far, the player reports up to three steps per episode: playback started, halfway reached, listened to the end. We store only the step and the episode, the language of the page, the device type and the time, not the origin and not the subpage. Otherwise the same applies as for the step counter: a random number only for this page view, no cookie, nothing stored in your browser, “Do Not Track” and “Global Privacy Control” are respected, storage at Supabase in Frankfurt am Main, deletion after 90 days, no link to your registration of interest.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is to see which episodes people listen to and where they stop, so that we can make the podcast better.

3. Registering your interest

On some pages you can register your interest, for example in live sessions, retreats or Senses 21. We need your email address for this. Name and message are optional. We also store the page on which you registered and when.

How it works (double opt-in): After you submit the form, you first receive an email with a confirmation link. The link is valid for seven days. Only when you click it is your entry passed on to Brevo and stored there in a list. If you do not click, nothing happens and your details are not stored anywhere. This is how we make sure nobody else enters your address. As proof of your consent, we store the date of your entry and the time of your confirmation.

What happens next: You receive a short confirmation by email. As soon as the offer you registered your interest in becomes available, you receive a message from Christina. Nothing more. You do not receive a regular newsletter or advertising for anything else, and your address is not passed on.

Legal basis: Your consent, Art. 6(1)(a) GDPR, in conjunction with § 174(3) Telecommunications Act 2021 (TKG 2021, Austria) and § 7(2) no. 2 Act against Unfair Competition (UWG, Germany), because a message about a new offer legally counts as advertising and therefore requires your prior consent.

Withdrawal: You can withdraw your consent at any time without giving reasons. A short reply to one of our emails or a message to christina@visenza.co is enough. We then delete your entry. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR).

Storage period: Your entry stays stored until you withdraw or until the purpose is fulfilled, that is, until you have received the message about the offer you registered your interest in. At the latest 24 months after the purpose is fulfilled, we delete the entry, unless you have registered again or been in touch with us by then.

Please do not write anything in the message field that you do not want to share with us, in particular nothing about your health. We do not ask for it and do not need it to register your interest.

4. When you write to us

If you write to christina@visenza.co or message +43 664 5335826 on WhatsApp, we process your address or phone number and the content in order to reply to you. The legal basis is Art. 6(1)(b) GDPR (initiating or performing an agreement), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering). We delete the correspondence once the matter is settled and no retention obligation applies. On WhatsApp, WhatsApp Ireland Limited additionally processes your data under its own rules, which we have no influence over.

5. Who receives your data

We do not pass on your data, except to the three service providers without whom the site does not work as described:

All three act as processors on our instructions. They may not use your data for their own purposes.

6. Data outside the EU

There are three things you should know:

First, Cloudflare delivers the page through a global network, including from the USA. This transfer is safeguarded by the EU Standard Contractual Clauses and the EU-US Data Privacy Framework (Art. 45 and 46 GDPR). The Data Privacy Framework is currently valid (adequacy decision of the EU Commission of 10 July 2023, upheld by the General Court of the EU on 3 September 2025). If it were to lapse, the Standard Contractual Clauses remain as the basis.

Second, the figures of both counters are stored at Supabase in Frankfurt am Main. Supabase is registered in Singapore and can access the servers from there, for example for maintenance and support. There is no adequacy decision of the EU Commission for Singapore. This access is safeguarded by the EU Standard Contractual Clauses that form part of Supabase's data processing agreement (Art. 46 GDPR).

Third, Visenza LLC is itself a US company, and Christina works from Thailand. When Christina views your entry at Brevo or the figures of both counters, or writes to you, she therefore accesses your data from a country outside the EU. There is no adequacy decision of the EU Commission for Thailand. We safeguard this as follows: the data stays stored at Brevo and Supabase in the EU, access to Brevo is limited to Christina, password-protected and secured with a second factor, and we process only the few data points you enter yourself and figures without names.

7. Your rights

Under the GDPR you have the right to

• access to the data we hold about you (Art. 15),
• rectification of incorrect data (Art. 16),
• erasure (Art. 17),
• restriction of processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw consent, at any time and without giving reasons (Art. 7(3)).

Objection: Where we base data on our legitimate interest (visiting the website, step counter, play counter, messages to us), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). For both counters it is enough to switch on “Do Not Track” or “Global Privacy Control” in your browser. Because the counters do not know you by name, we cannot find individual rows later. After 90 days they are deleted anyway.

An email to christina@visenza.co is enough. We reply within one month.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority where you live. In Austria this is the Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb@dsb.gv.at. In Germany, the state data protection commissioners are responsible.

You do not have to give us any data. Without an email address we simply cannot register your interest. There is no automated decision-making or profiling.

8. How we protect your data

We use technical and organizational measures to protect your data against loss, alteration and unauthorized access (Art. 32 GDPR): the website is delivered over an encrypted connection only (HTTPS), the confirmation link is signed and expires after seven days, the form has a block against automated entries, access to Brevo is password-protected and secured with a second factor, and the figures of both counters can only be added from outside, not read.

9. Children and minors

Visenza's offers are aimed at adults. We ask people under 18 not to register their interest. If we learn that an entry comes from a minor, we delete it.

10. Changes

We update this policy when something changes in the processing, for example when a new service is added. The version published here applies. The date at the top shows when it was last updated.