Data protection statement

Privacy policy

This statement sets out, in accordance with Article 13 GDPR, what personal data is processed on this website.

Controller

John Cox Khunngasse 23/22, 1030 Vienna, Austria Email: info@englishanddragons.at

No data protection officer has been appointed, as none of the conditions in Article 37(1) GDPR applies.

Principle

This website collects as little data as possible. It uses no analytics services, no tracking tools, no advertising networks, no cookies and no embedded third-party content. There is no profiling and no automated decision-making.

Contact form

If you use the contact form, the data you enter is sent by email to info@englishanddragons.at and stored there. The purpose is to answer your enquiry. The legal basis is the taking of steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in communicating with prospective clients (Article 6(1)(f) GDPR).

Providing this data is neither a legal nor a contractual requirement. Without it, however, we cannot answer your enquiry.

Your enquiry is deleted once it has been dealt with, unless statutory retention periods apply. Where a contract results, Austrian tax law requires records to be kept for seven years (§ 132 BAO).

Contacting us via WhatsApp

If you contact us via WhatsApp, the privacy terms of WhatsApp Ireland Limited apply in addition. We have no influence over that processing. If you would rather avoid it, you can reach us by email at any time.

Server log files

When this website is accessed, the server automatically records data transmitted by your browser: IP address, date and time of access, page requested, browser type and operating system. The legal basis is our legitimate interest in the secure and trouble-free operation of the website (Article 6(1)(f) GDPR). This data is not combined with any other data source.

Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes data solely on our behalf under a data processing agreement pursuant to Article 28 GDPR. The servers are located within the European Union. No data is transferred to third countries.

Photographs of children and young people

This website shows photographs taken during our sessions. The following applies: The great majority of these images deliberately show no identifiable person. They show hands, dice, maps, miniatures and materials on the table.

Where an image does show an identifiable child, it is published only with the prior written consent of that child's parents or guardians. That consent names John Cox as the controller and englishanddragons.at as the purpose and place of publication. The legal basis is consent under Article 6(1)(a) GDPR. Separately, the right to one's own image under § 78 of the Austrian Copyright Act belongs to the child and is exercised by the parents.

No names, schools, places of residence or other identifying details are published alongside any image. First names appear only where that has been expressly agreed as well.

Consent can be withdrawn at any time, informally and without giving reasons, with effect for the future. An email to info@englishanddragons.at is enough. The image is then removed from the website without delay. The lawfulness of processing carried out before withdrawal is unaffected.

Consent is voluntary. If it is not given, or is withdrawn, there is no disadvantage of any kind to your child's participation.

Photographs during sessions

Photographs are occasionally taken during sessions. Without separate consent these are used internally only and are not published. If you would prefer your child not to be photographed, please tell us before the first session. This will be respected, and no reason is needed.

Recipients of data

Personal data is not passed to third parties, sold, or used for advertising. It is shared only with the processor named above, to the extent technically necessary, and where we are legally obliged to disclose it.

Your rights

You have the right of access (Article 15 GDPR), to rectification (Article 16), to erasure (Article 17), to restriction of processing (Article 18), to data portability (Article 20), and to object to processing (Article 21).

Any consent you have given may be withdrawn at any time with effect for the future (Article 7(3) GDPR).

Please contact info@englishanddragons.at to exercise any of these rights.

Right to complain

You have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Österreichische Datenschutzbehörde) Barichgasse 40–42, 1030 Vienna dsb@dsb.gv.at, +43 1 52 152-0

Version

This privacy policy is dated August 2026. This English version is a courtesy translation. In the event of any discrepancy, the German version applies.