As of: August 6, 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Mag. Dr. Michael Zechmann-Khreis e.U.
Ask Ingrid
Dr.-Stumpf-Straße 130
6020 Innsbruck
Austria

Email: office@frag-ingrid.com

Further information can be found in our imprint.

2. General Information on Data Processing

The protection of your personal data is important to us. We process personal data exclusively within the framework of applicable legal provisions, in particular the General Data Protection Regulation, the Austrian Data Protection Act, and the Telecommunications Act 2021.

Personal data refers to information relating to an identified or identifiable natural person. This includes, for example, name, email address, IP address, and the content of a support request.

We only process data that is necessary for the secure operation of this website, the processing of your inquiries, or the provision of functions, or for which you have given your consent.

3. Website Access and Server Log Files

When you access this website, your browser transmits technically required information to our web server. In particular, the following data may be processed and stored in server log files:

  • IP address,
  • date and time of access,
  • page or file accessed,
  • amount of data transferred and HTTP status code,
  • referrer URL,
  • browser type and browser version,
  • operating system, and
  • hostname of the accessing device.

This processing is necessary to deliver the website, ensure its stability and security, detect technical errors, and prevent abusive access. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable, and error-free operation of the website.

Server log data is stored only for as long as necessary for the stated purposes. Longer storage only occurs if a security-relevant incident needs to be investigated or if legal obligations require it.

4. Hosting

This website is hosted by checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany. The hosting provider processes the data required for the operation of the website, in particular connection, server log, and technical diagnostic data, on our behalf. According to checkdomain, the data centers used for web hosting are located in Germany.

Processing is carried out for the secure and reliable provision of the website in accordance with Art. 6 para. 1 lit. f GDPR. A data processing agreement exists with checkdomain in accordance with Art. 28 GDPR.

Further information can be found in checkdomain’s Privacy Policy.

5. Contacting Us

If you contact us by email or another communication channel, we process the data you provide, in particular your name, contact details, the content of your message, and the associated communication data. The information will be used exclusively to process your inquiry and for possible follow-up questions.

If your inquiry relates to a contract or pre-contractual measures, Art. 6 para. 1 lit. b GDPR is the legal basis. For other inquiries, processing is based on our legitimate interest in processing and documenting inquiries in accordance with Art. 6 para. 1 lit. f GDPR.

We delete the data as soon as the inquiry has been fully processed and no legal retention obligations or legitimate reasons for further storage exist.

6. Support form

When you submit a support request via our website, we process the data you provide in order to handle your request and communicate with you about it. We use the WordPress plugin “SupportCandy” for this purpose.

In particular, the following data may be processed:

  • Name and email address
  • Subject and content of your request
  • Ticket number, category, and processing status
  • Time of the request and subsequent messages
  • IP address and technical log data
  • Attachments and other information voluntarily submitted by you

Processing is carried out to handle your support request. Insofar as your request relates to the use of our app or an existing contractual relationship, the legal basis is Art. 6 (1) (b) GDPR. For general inquiries, processing is based on our legitimate interest in the efficient processing and documentation of support requests in accordance with Art. 6 (1) (f) GDPR.

The ticket system is operated on our own web server. No transmission of ticket data to the manufacturer of SupportCandy takes place. Access is granted exclusively to those persons entrusted with processing your request. If necessary for processing, notifications may be sent via our email service provider.

Please do not submit any health data or other special categories of personal data in the support form unless these are absolutely necessary for processing your request.

We store your support request only as long as necessary for its processing and to fulfill legal documentation and retention obligations. The personal data of a ticket will be deleted or anonymized no later than 12 months after processing is completed, unless legal obligations or legitimate reasons require longer retention.

To manage the cookies and similar technologies used, as well as the related consents, we use the consent tool “Real Cookie Banner”. Real Cookie Banner is operated locally on our server. The software provider is devowl.io GmbH, Tannet 12, 94539 Grafling, Germany.

Real Cookie Banner stores information about your consent decision, in particular a consent ID, time and scope of consent, language, banner and template version, as well as technical details necessary for proof and management of your decision.

Legal bases are Art. 6 para. 1 lit. c GDPR for fulfilling our legal proof and information obligations, and Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the legally compliant management and documentation of the services used and your consents.

The provision of this data is neither contractually required nor necessary for the conclusion of a contract. However, without processing, we cannot manage and prove your consent decisions.

Details on data processing by Real Cookie Banner can be found at https://devowl.io/de/rcb/datenverarbeitung/.

You can review your decision at any time via the “Privacy Settings” link in the footer of this website and change or revoke it for the future.

8. Technically Necessary Cookies and Optional Services

Technically necessary cookies and comparable storage technologies are only used insofar as they are required for the operation of the website, security, or the storage of your privacy decision.

Optional external content or services are only activated after your consent. The legal basis is Art. 6 para. 1 lit. a GDPR in conjunction with the relevant provisions of the TKG 2021. Any given consent can be revoked at any time with future effect via the privacy settings. The legality of the processing carried out until revocation remains unaffected.

Our website contains links to external sites, in particular to app offerings in the Apple App Store and Google Play Store. When merely visiting our website, no data is transferred to the respective provider due to a normal link. Only when you click on an external link do you access the website of the respective provider. From this point on, their data protection regulations apply.

Information on processing by Apple can be found at https://www.apple.com/legal/privacy/. Information on processing by Google can be found at https://policies.google.com/privacy.

10. No Automated Decision-Making on the Website

This website does not use exclusively automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

11. Storage Duration

Unless a more specific storage period is mentioned in this privacy policy, we store personal data only for as long as necessary for the respective purpose. Thereafter, the data is deleted or anonymized, unless legal retention obligations, the assertion or defense of legal claims, or other permissible reasons require longer storage.

12. Recipients and Processors

We only transfer personal data if this is necessary for the described purposes, a legal obligation exists, you have consented, or another legal basis permits the transfer. Recipients may include, in particular, hosting, IT, security, and support service providers. Insofar as these providers process data on our behalf, we conclude the necessary agreements in accordance with Art. 28 GDPR.

13. Data Security

We take appropriate technical and organizational measures to protect personal data from loss, manipulation, unauthorized access, and other misuse. The website is transmitted encrypted via HTTPS. However, complete protection during data transmission over the internet cannot be guaranteed.

14. Your Rights

You have the following rights, in particular, in accordance with legal requirements:

  • Right to information in accordance with Art. 15 GDPR,
  • Right to rectification in accordance with Art. 16 GDPR,
  • Right to erasure in accordance with Art. 17 GDPR,
  • Right to restriction of processing in accordance with Art. 18 GDPR,
  • Right to data portability in accordance with Art. 20 GDPR,
  • Right to object in accordance with Art. 21 GDPR, and
  • Right to withdraw consent in accordance with Art. 7 para. 3 GDPR.

The withdrawal of consent applies to the future. The legality of the processing carried out until the withdrawal remains unaffected.

If we process data based on legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, you can object to the processing for reasons arising from your particular situation.

To exercise your rights, please contact office@frag-ingrid.com. To prevent unauthorized disclosure, we may request reasonable proof of your identity.

15. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you can lodge a complaint with a data protection supervisory authority. In Austria, this is:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/

16. Data Protection Provisions of the “Ask Ingrid” App

This privacy policy concerns the website frag-ingrid.com. Separate data protection provisions apply to the use of the mobile app “Ask Ingrid”, particularly for user accounts, subscriptions, community functions, and nutrition and symptom diaries. These are provided within the app.

17. Changes to this Privacy Policy

We will adapt this privacy policy if website functions, service providers used, or legal requirements change. The version published on this page at the time of access applies.

As of: 2026-09-15

Last changes:
2026-09-15: Removal of Monday.com as a support ticket solution, addition of new support ticket system