Skip to content
Contact me

Privacy Policy

1. Introduction

 

The protection of your personal data is very important to me. This Privacy Policy explains how I process your personal data.

The operator of this website is Go To Marek - Marek Minar.

I process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian data protection laws.

 

2. Controller

 

Go To Marek - Marek Minar

Website: https://gotomarek.com

Email: info@gotomarek.com

I am the controller within the meaning of Art. 4(7) GDPR.

 

3. General principles of data processing

 

I process personal data only if a legal basis exists, in particular:

  • on the basis of your consent (Art. 6(1)(a) GDPR),

  • for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR),

  • to comply with legal obligations (Art. 6(1)(c) GDPR),

  • on the basis of my legitimate interests (Art. 6(1)(f) GDPR), provided that your interests or fundamental rights do not override those interests.

 

4. Website & hosting

 

This website is operated using the HubSpot Content Management System (CMS).

 

4.1 Server log files

 

When you visit this website, HubSpot automatically processes the following information:

  • IP address (shortened/anonymized)

  • date and time of access

  • pages accessed

  • browser and device information

  • referrer URL

 

This processing is carried out to ensure the technical security and stability of the website based on my legitimate interest (Art. 6(1)(f) GDPR).

 

4.2 Cookie banner & consent management

 

I use the HubSpot cookie banner to manage your consent for cookies and tracking technologies. Non-essential cookies are only set after you have actively given your consent.

 

5. Cookies & tracking technologies

 

5.1 HubSpot tracking

 

If you give your consent via the cookie banner, I use HubSpot tracking to:

  • analyze website usage behavior,

  • associate form submissions,

  • optimize marketing and sales activities.

 

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

 

5.2 Future analytics & advertising tools

 

I reserve the right to use the following services in the future — only after your consent:

  • Google Analytics & Google Ads

  • Meta Ads (Facebook & Instagram)

  • Microsoft Ads

  • LinkedIn Ads

 

These services may be used to:

  • analyze visitor behavior,

  • measure conversions,

  • display targeted advertising (retargeting).

 

5.3 Retargeting & data matching

 

In the future, so-called customer match or retargeting procedures may be used. In this context, email addresses or phone numbers (hashed/encrypted) may be matched between HubSpot and the advertising platforms mentioned above in order to:

  • address existing contacts in a targeted manner,

  • improve the effectiveness of marketing campaigns.

 

Your explicit consent is required for this processing (Art. 6(1)(a) GDPR).

 

6. Communication & CRM (HubSpot)

 

6.1 Contact initiation

 

I store and process personal data in my CRM system (HubSpot) if:

  • you provide your consent via a web form,

  • you contact me by email, phone, LinkedIn, or in person,

  • I proactively contact you and you subsequently express interest in my services.

 

The following data may be processed:

  • name

  • email address

  • phone number

  • company & role

  • communication content

 

6.2 Emails, phone calls & video calls

 

I use HubSpot to conduct, log, and track:

  • emails

  • phone calls

  • video calls

  • meetings

 

Phone or video calls are only transcribed with your prior consent.

 

6.3 AI functionality in HubSpot

 

I use AI features provided by HubSpot for:

  • summarizing activities,

  • analyzing and structuring communication with leads and customers.

 

Processing is carried out exclusively within the scope of the contractual agreements with HubSpot.

 

6.4 Data enrichment

 

I use HubSpot’s data enrichment features to supplement existing contact and company data (e.g. industry, company size), insofar as this is legally permissible.

 

7. Use of OpenAI services

 

In the future, I may use OpenAI services to process CRM data:

  • within HubSpot (e.g. via workflow actions),

  • via integrations between HubSpot and ChatGPT.

 

I exclusively use paid OpenAI plans. Processing is carried out only where a valid legal basis exists (e.g. consent or legitimate interest) and in compliance with the GDPR. Open AI does not use the provided data for training purposes, and deletes it after 30 days.

 

8. Google Workspace

 

I use Google Workspace for:

  • emails

  • calendar and appointment management

  • video calls

  • notes, documents, and file storage

 

Personal data may be processed in this context. The use is based on my legitimate interest in efficient business organization and, where applicable, for contract performance.

 

9. Odoo (cloud version)

 

I use Odoo (cloud-based version) for business administration purposes, in particular for:

  • creating and managing sales offers,

  • collecting electronic signatures,

  • invoicing,

  • bookkeeping and accounting.

 

In this context, personal data of customers, prospects and business partners may be processed, such as names, contact details, company information, offer and invoice data, and payment-related information.

Processing is carried out for the purpose of contract performance, accounting, and compliance with legal obligations (Art. 6(1)(b) and (c) GDPR), as well as on the basis of my legitimate interest in efficient business operations (Art. 6(1)(f) GDPR).

Depending on the configuration and data location, personal data may be processed on servers within the EU or, where applicable, in third countries. Appropriate safeguards are applied in accordance with the GDPR.

 

10. LinkedIn & outbound outreach

 

I use LinkedIn to research and contact potential customers, in particular:

  • via LinkedIn messages,

  • optionally via outbound phone calls.

 

Processing is based on my legitimate interest in initiating business relationships (Art. 6(1)(f) GDPR), provided that no overriding interests of the data subject prevail.

 

11. Data transfers to third countries

 

Some of the service providers mentioned above (e.g. HubSpot, Google, Meta, LinkedIn, Microsoft, OpenAI) are based in the United States or process data there. Data transfers are carried out on the basis of appropriate safeguards, in particular:

  • EU Standard Contractual Clauses,

  • adequacy decisions (e.g. EU–US Data Privacy Framework), where applicable.

 

12. Data retention

 

I store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.

 

13. Your rights

 

You have the right to:

  • access (Art. 15 GDPR)

  • rectification (Art. 16 GDPR)

  • erasure (Art. 17 GDPR)

  • restriction of processing (Art. 18 GDPR)

  • data portability (Art. 20 GDPR)

  • object to processing (Art. 21 GDPR)

  • withdraw consent at any time with future effect

 

You may contact me at any time to exercise these rights.

Use this button to change your cookie settings:

 

You can also use the form on this page to submit your privacy request:

https://eu1.hs-data-privacy.com/request/okdYLo1uxDtD2lFv3Uz40Q

 

14. Right to lodge a complaint

 

You have the right to lodge a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority

Barichgasse 40–42

1030 Vienna, Austria

https://www.dsb.gv.at

 

15. Updates to this Privacy Policy

 

I reserve the right to amend this Privacy Policy in order to adapt it to legal or technical changes. The current version published on this website shall apply.

 

16. Address data of key service providers

 

Below is a list of the primary service providers referenced in this Privacy Policy, including their business addresses. This information is provided for transparency purposes.
For further information on how personal data is processed by the service providers used, please refer to the respective privacy policies and data processing agreements of these providers, which are available on their official websites.

 

HubSpot

HubSpot, Inc.
25 First Street, 2nd Floor
Cambridge, MA 02141
United States

  • Privacy Policy:

    https://legal.hubspot.com/privacy-policy

  • Data Processing Agreement (DPA):

    https://legal.hubspot.com/dpa 

 

Odoo

Odoo S.A.
Chaussée de Namur 40
1367 Grand-Rosière
Belgium

  • Privacy Policy:

    https://www.odoo.com/privacy 

  • Security & Compliance overview:

    https://www.odoo.com/security

 

Google (Google Workspace, Google Analytics, Google Ads)

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

  • Privacy Policy (general):

    https://policies.google.com/privacy

  • Google Workspace Data Processing & Security:

    https://workspace.google.com/terms/dpa_terms.html

  • Google Ads Data Processing Terms:

    https://business.safety.google/adsprocessorterms/

 

LinkedIn

LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland

  • Privacy Policy:

    https://www.linkedin.com/legal/privacy-policy

  • Data Processing Addendum:

    https://www.linkedin.com/legal/l/dpa

 

Meta (Facebook & Instagram Ads)

Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

  • Privacy Policy:

    https://www.facebook.com/privacy/policy

  • Meta Data Processing Terms:

    https://www.facebook.com/legal/terms/dataprocessing 

 

Microsoft (Microsoft Ads)

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland 

  • Microsoft Privacy Statement:

    https://privacy.microsoft.com/privacystatement

  • Microsoft Ads Legal, Privacy, And Personalization Statement:

    https://help.ads.microsoft.com/#apex/ads/en/ext60212

 

OpenAI

OpenAI, L.L.C.
3180 18th Street
San Francisco, CA 94110
United States

  • Privacy Policy:

    https://openai.com/policies/privacy-policy

  • Data Processing Addendum:

    https://openai.com/policies/data-processing-addendum

  • API & Enterprise data usage clarification:

    https://openai.com/enterprise-privacy

 

Note: Depending on the service configuration, contractual setup, and data processing activities, affiliated entities or subprocessors of these providers may also be involved. Details are governed by the respective data processing agreements and privacy notices of the providers.