top of page

Privacy Policy

Last updated: 24 August 2026

​

This Privacy Policy explains how personal data are processed when you use the Whole in One website, contact me, book a service, register for an event, purchase a digital product or subscribe to updates.

1. Data controller

The controller responsible for the processing of personal data through this website is:

Edina Singer (Eddie)
Whole in One
Lobaugasse 40, Haus 23
1220 Vienna
Austria

Email: eddie.singer@wholeinone.space
Phone: +43 681 101 94061
Website: wholeinone.space

2. General principles

I aim to collect only the personal data that are reasonably necessary for the purpose for which you are using the website or a Whole in One service.

Personal data are not sold.

Booking, store and marketing systems are not intended to function as repositories for detailed therapeutic or health-related information.

The principal legal bases used for processing are:

  • Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract or to perform a contract;

  • Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation;

  • Article 6(1)(f) GDPR where processing is necessary for a legitimate interest, such as website security or responding appropriately to non-contractual enquiries, provided your rights and interests do not override that interest;

  • Article 6(1)(a) GDPR where you have given consent, particularly for optional marketing communications and non-essential tracking technologies.

Where consent is the legal basis, you may withdraw it at any time without affecting processing that was lawful before withdrawal.

3. Technical website data

When you visit the website, technical information may be processed automatically in order to deliver and secure the website.

Depending on the technical configuration, this may include:

  • IP address;

  • date and time of access;

  • browser and device information;

  • operating system;

  • requested pages or files;

  • referring page;

  • technical error and security information.

The purpose is to provide a functioning and secure website, diagnose technical problems and protect the service against misuse.

The legal basis is Article 6(1)(f) GDPR where the processing is necessary for these legitimate technical and security interests.

Technical data are retained only for as long as required for these purposes, subject to the technical retention periods of the website provider.

4. Wix website platform

This website is hosted and operated using Wix.com.

Wix provides services used on this website including website hosting, forms, contact and chat functions, Wix Bookings, Wix Events, Wix Stores, member functions and related website infrastructure.

Personal data entered through these functions may therefore be processed on Wix systems.

Wix.com Ltd. is based in Israel. Wix may also use affiliated companies and sub-processors in other countries for hosting, security, support and other technical services.

Where personal data are transferred internationally, Wix states that it uses applicable legal transfer mechanisms and safeguards, including adequacy mechanisms and Standard Contractual Clauses where required.

More information about Wix's data processing and current sub-processors is available in Wix's own Privacy Policy, Data Processing Agreement and sub-processor list.

5. Cookies and similar technologies

This website uses cookies and similar technologies.

Strictly necessary technologies

Some cookies or technical storage functions are necessary for the website to work, for example for security, navigation, booking, shopping-cart or consent-management functions.

These may be used without consent where they are strictly necessary to provide a service you have requested.

Optional cookies and technologies

Analytics, marketing or other non-essential technologies are used only where the required consent has been obtained through the site's cookie settings.

You can refuse non-essential cookies or withdraw your consent through the cookie settings.

The current cookie settings should provide information about the categories, purposes and duration of cookies and similar technologies used on the site.

6. Contact forms, email and website chat

If you contact Whole in One through a form, email or website chat, I process the information you provide in order to respond to your enquiry.

This may include:

  • name;

  • email address;

  • telephone number if provided;

  • language;

  • the service or programme you are asking about;

  • the content of your enquiry;

  • optional information about how you found Whole in One.

If your enquiry concerns a possible contract or booking, the legal basis is generally Article 6(1)(b) GDPR.

For other legitimate correspondence, Article 6(1)(f) GDPR may apply.

Please do not include detailed medical information, detailed trauma histories or other sensitive personal data in a general enquiry unless this is genuinely necessary.

If no booking or other business relationship results, enquiry information is ordinarily deleted or reviewed for deletion within 12 months after the last relevant contact, unless there is a legal reason to retain it longer.

7. Bookings and appointments

When you book an individual service through Wix Bookings, personal data necessary to organise and administer the appointment are processed.

Depending on the booking, this may include:

  • name and contact details;

  • selected service;

  • date and time;

  • selected location or online format;

  • selected price option;

  • payment status;

  • information you enter into the booking form;

  • administrative communication relating to the appointment.

The main legal basis is Article 6(1)(b) GDPR.

Booking forms are intended to collect administrative information needed for the service. Please avoid entering detailed health or trauma information unless a field specifically explains why such information is required.

8. Events and programmes

If you register for a group, workshop, residential programme, conference-related event or other event through Wix Events, I process the data necessary to administer your participation.

This may include:

  • name and contact details;

  • event registration;

  • billing information;

  • language;

  • payment information or payment status;

  • programme-specific access or practical information that you choose to provide;

  • communication concerning the event;

  • cancellation or attendance information.

The legal basis is generally Article 6(1)(b) GDPR.

Only information that is relevant to organising the programme should be requested.

Programme-specific forms may provide additional privacy information where the nature of the programme requires it.

9. Digital products and Wix Stores

Whole in One uses Wix Stores to offer digital products such as audio recordings, workbooks and transcripts.

When you purchase a digital product, personal data required to process the purchase and provide access to the product are processed.

This may include:

  • name;

  • email address;

  • billing information;

  • product purchased;

  • date and amount of purchase;

  • payment status;

  • technical information needed to provide the digital download.

The legal basis for processing the purchase is Article 6(1)(b) GDPR.

Information that must be retained for accounting or tax purposes is processed under Article 6(1)(c) GDPR.

10. Payments

Payments on this website may be processed through Wix Payments or PayPal, depending on the payment method selected at checkout.

Wix Payments currently makes payment methods available including major credit and debit cards, Apple Pay, Google Pay and Klarna.

The relevant payment provider receives the information necessary to process the transaction. I do not receive or store your full payment-card details where these are handled directly by the payment provider.

Payment-related data may include:

  • name and billing information;

  • transaction amount and currency;

  • payment method;

  • payment status;

  • transaction identifiers;

  • technical and fraud-prevention information necessary for processing the payment.

The legal basis for processing payments connected with a purchase or booking is generally Article 6(1)(b) GDPR. Where transaction records must be retained for accounting or tax purposes, Article 6(1)(c) GDPR also applies.

Depending on the selected payment method, Wix Payments, PayPal and their respective payment-processing partners may process personal data under their own privacy terms and may in some circumstances act as independent data controllers.

The privacy information of the payment method selected at checkout also applies to processing carried out by that provider.

11. Invoicing and accounting

Where an invoice is required, administrative and billing data may be processed using sevDesk and shared with tax or accounting professionals or public authorities where required by law.

Data may include:

  • name;

  • billing address where required;

  • service or product;

  • amount;

  • payment and invoice information;

  • VAT-related information where applicable.

The legal bases are Article 6(1)(b) and Article 6(1)(c) GDPR.

Accounting records and documents subject to Austrian statutory retention obligations are generally retained for seven years from the end of the relevant calendar year, and longer where legally required in an ongoing proceeding.

12. Online sessions

Some services take place online, including through Google Meet where stated in the booking information.

Participation in an online meeting involves technical data processing by the communication provider, which may include account, connection, device and meeting metadata.

The provider's own privacy information applies to processing carried out within its service.

I aim to use only the information necessary for providing the booked session.

13. Newsletter and SMS updates

If you actively subscribe to a newsletter, programme update list or SMS updates, the data needed to send those communications are processed on the basis of your consent under Article 6(1)(a) GDPR and the applicable Austrian telecommunications rules.

Depending on the service, this may include:

  • name, if provided;

  • email address;

  • telephone number for SMS;

  • preferred language;

  • subscription and consent information.

You can unsubscribe or withdraw consent at any time.

After withdrawal, your details are removed from the active mailing list as soon as reasonably possible, normally within 30 days. Minimal records may be retained where necessary to document the withdrawal or demonstrate compliance.

Current newsletter/SMS provider: Wix.com, including Wix marketing, newsletter and SMS functions where used.

No consent to marketing is required in order to book or purchase a service.

14. Sensitive and health-related information

General website, contact and booking forms are not intended for detailed processing of health data or other special categories of personal data under Article 9 GDPR.

Please do not send detailed medical records, diagnoses, trauma histories or similarly sensitive information through ordinary website forms unless this is specifically requested through an appropriate process.

If sensitive data are inadvertently provided where they are not needed, they should not be retained merely because they were submitted.

If Whole in One later introduces a service that intentionally requires the processing of health data or other special-category data, including a future naturopathy/lifestyle service where relevant, the privacy information and the relevant forms will be updated before that processing begins, including the applicable Article 6 and Article 9 legal bases.

15. Member accounts

If you choose to create a member account through Wix, the data required to create and maintain that account are processed through Wix.

This may include your name, email address, login information and information connected to bookings, purchases or other site activity.

You may request deletion of an account where no legal retention obligation requires related information to be kept.

16. Social media links

This website contains links to external social media platforms such as Facebook and Instagram.

When these are ordinary links, data are normally transferred to the relevant platform when you open the external link rather than merely because the link is displayed.

Once you use an external platform, the privacy terms of that platform apply.

17. Recipients and processors

Personal data may be disclosed only where needed for the relevant purpose.

Possible recipients or processors include:​

  • Wix.com and its authorised sub-processors, including Wix Payments where used; PayPal and relevant payment-processing partners; 

  • sevDesk and, where applicable, accounting or tax professionals;

  • communication providers used for online services;

  • newsletter or SMS providers where you have subscribed;

  • public authorities where disclosure is legally required.

Personal data are not sold to advertisers.

18. International data transfers

Some service providers used by this website operate internationally.

In particular, Wix processes website-user data through Wix.com Ltd. in Israel and may use affiliated companies and sub-processors in other countries.

Where processing involves a country outside the European Economic Area, the relevant provider must use an applicable legal transfer mechanism, such as an adequacy decision or appropriate safeguards including Standard Contractual Clauses where required.

The previous statement that all data are processed only in Austria does not apply to the current Wix-based website infrastructure.

19. Retention periods

Personal data are not intended to be kept indefinitely.

Typical retention rules are:

  • unsuccessful or inactive general enquiries: ordinarily reviewed for deletion within 12 months after the last relevant contact;

  • booking, event and contractual administration: for as long as necessary to perform the service and, where proportionate, to manage or defend contractual claims;

  • accounting and tax records: normally seven years where Austrian law requires this;

  • newsletter and marketing subscriptions: until withdrawal or unsubscribe, subject to limited retention where evidence of consent or withdrawal must be kept;

  • technical and security data: only for the period necessary for technical operation and security, subject to provider settings.

Where a legal retention obligation applies, a request for erasure cannot require deletion before that obligation ends.

20. Your rights

Subject to the conditions of the GDPR, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate data;

  • request erasure;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • object to direct marketing;

  • receive data in a portable format where the right to data portability applies;

  • withdraw consent at any time where processing is based on consent.

To exercise your rights, contact:

eddie.singer@wholeinone.space

I may need sufficient information to verify that a request relates to your data.

21. Complaint to the supervisory authority

You have the right to lodge a complaint with the competent data protection supervisory authority.

In Austria:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria

Email: dsb@dsb.gv.at

22. Automated decision-making

I do not use automated decision-making that produces legal effects or similarly significant effects for you solely on the basis of automated processing.

23. Changes to this Privacy Policy

This Privacy Policy may be updated when services, website functions, providers or legal requirements change.

The current version and its update date are published on this page.

bottom of page