PRIVACY POLICY
Last updated: 5 October 2026
The protection of your personal data is important to me.
This Privacy Policy explains how personal data is processed when you visit www.floatingwithin.com, contact me through the website or otherwise communicate with Floating Within.
Floating Within is operated by Isabel Drasl.
1. CONTROLLER
The controller responsible for the processing of personal data in connection with this website is:
Isabel Drasl
Floating Within
Seidlgasse 12A
1030 Vienna
Austria
E-mail
floatingwithin@gmail.com
Website
www.floatingwithin.com
For any questions regarding the processing of your personal data or the exercise of your rights, please contact me using the e-mail address above.
2. PERSONAL DATA I PROCESS
Depending on how you interact with this website, I may process information including:
your name and e-mail address;
information you submit through the contact form;
information you provide when communicating with me;
browser, network and device information;
IP address where processed by the website infrastructure;
referring website;
pages visited and interactions with the website;
date and time of website activity; and
cookie and consent preferences.
I process personal data only where an appropriate legal basis under the GDPR applies.
Depending on the processing activity, this may include:
Consent — Article 6(1)(a) GDPR
Where you have given your consent, including for non-essential analytics and performance cookies.
Contract or pre-contractual measures — Article 6(1)(b) GDPR
Where processing is necessary to respond to an enquiry relating to a potential engagement or to perform a contract.
Legal obligation — Article 6(1)(c) GDPR
Where processing is necessary to comply with a legal obligation.
Legitimate interests — Article 6(1)(f) GDPR
Where processing is necessary for my legitimate interests, such as securely operating and administering the website or responding to general business communications, provided those interests are not overridden by your rights and interests.
3. SQUARESPACE — WEBSITE AND HOSTING
This website is created and hosted using Squarespace.
Squarespace provides the technical infrastructure required to display, secure and operate this website.
In connection with the provision of the website, Squarespace may process technical information such as IP address, browser, network and device information and information relating to website access and interaction.
Where such processing is necessary for the secure and reliable operation of the website, the processing is based on my legitimate interest in providing a secure and functional website pursuant to Article 6(1)(f) GDPR.
Further information about Squarespace's processing of personal data can be found in its Privacy Policy.
4. CONTACT FORM AND E-MAIL
If you contact me through the contact form on this website or by e-mail, I process the information you provide.
This may include your name, e-mail address, the content of your message and any other information you voluntarily provide.
The website contact form is provided through Squarespace.
I use this information to receive, review and respond to your enquiry and, where applicable, to discuss or establish a potential business relationship.
If your enquiry concerns a potential or existing contractual relationship, processing is based on Article 6(1)(b) GDPR.
For other general communications, processing may be based on my legitimate interest in receiving and responding to enquiries pursuant to Article 6(1)(f) GDPR.
Please do not submit sensitive or confidential information through the general contact form unless it is necessary for your enquiry.
5. SQUARESPACE ANALYTICS
I use Squarespace Analytics to understand how visitors use this website and how its content performs.
Depending on your cookie preferences and the functionality provided by Squarespace, this may involve information such as:
browser, network and device information;
referring website;
pages visited;
IP address;
interactions with the website;
timestamps; and
information relating to website traffic and visitor sessions.
I use this information to understand matters such as visits, pageviews, traffic sources and engagement with the website.
Squarespace uses analytics and performance cookies for certain analytics functionality.
Non-essential analytics and performance cookies are restricted on this website and are only used after you have provided the relevant consent through the cookie settings.
The legal basis for processing associated with these non-essential analytics and performance cookies is your consent pursuant to Article 6(1)(a) GDPR.
If you decline non-essential cookies, you can continue to use the website. Certain analytics information available to me may then be less complete.
I do not currently use Google Analytics, Meta Pixel or comparable third-party advertising or marketing tracking technologies on this website.
The Squarespace Activity Log is disabled.
6. COOKIES AND COOKIE CONSENT
This website uses cookies and similar technologies.
Necessary Cookies
Certain cookies and similar technologies are necessary for the secure operation and basic functionality of the website.
Where these technologies are technically necessary to provide the website or functionality requested by you, they may be used without consent where permitted by applicable law.
Analytics and Performance Cookies
Squarespace also provides analytics and performance cookies that help me understand how visitors use the website.
These cookies are treated as non-essential on this website and are restricted unless you consent to their use.
Depending on Squarespace's current technology and configuration, analytics cookies may be used to identify unique visitors, understand visitor sessions and generate website-usage statistics.
Your Cookie Choices
When you visit this website, the cookie banner allows you to:
Accept all — allow non-essential analytics and performance cookies;
Decline all — continue with essential cookies only; or
Manage cookies — manage your available cookie preferences.
You can also use the Cookie Preferences option on the website to review or change your choice later.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
7. VIDEO AND AUDIO CONTENT
Video and audio content displayed on this website may be uploaded directly through Squarespace rather than embedded through external platforms.
Where content is hosted directly through Squarespace, Squarespace may process technical information when that content is delivered to your device.
I do not currently use YouTube or Vimeo embeds on this website.
8. EXTERNAL LINKS AND SOCIAL MEDIA
This website may contain links to external websites and social-media platforms, including Instagram.
These are ordinary external links. I do not currently embed an Instagram feed or Instagram posts directly into the Floating Within website.
When you choose to follow an external link, you leave this website. The operator of the external website or platform may then process personal data independently in accordance with its own privacy policy.
I do not control the independent processing carried out by those external websites and platforms.
9. SERVICE PROVIDERS AND RECIPIENTS
Personal data may be processed by service providers where this is necessary to operate the website or my business.
This currently includes, in particular, Squarespace, which provides the website platform, hosting, website forms and analytics infrastructure.
Other technical service providers may process information where necessary to provide communications or infrastructure used by me.
Where a service provider processes personal data on my behalf, I take appropriate steps to ensure that the processing is subject to applicable data-protection requirements.
I do not sell your personal data.
10. INTERNATIONAL DATA TRANSFERS
Some service providers involved in operating this website may process personal data outside Austria or the European Economic Area.
Where personal data is transferred outside the EEA, an appropriate transfer mechanism under Chapter V GDPR is used where required.
Depending on the recipient and destination, this may include an adequacy decision of the European Commission or appropriate safeguards such as Standard Contractual Clauses.
Further information regarding Squarespace's international data processing is available in Squarespace's Privacy Policy.
11. STORAGE AND RETENTION
I retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.
Information relating to an enquiry may be retained for as long as reasonably necessary to respond to and manage that enquiry.
Where an enquiry develops into a contractual or business relationship, relevant information may be retained for the duration of that relationship and for applicable statutory retention periods afterwards.
Cookie and technical information may be retained for the periods applicable to the respective technology and processing purpose.
When personal data is no longer required and there is no legal basis requiring or permitting continued retention, it will be deleted or anonymised as appropriate.
12. YOUR RIGHTS UNDER THE GDPR
Subject to the requirements and limitations of applicable law, you have the right to:
request information about and access to your personal data (Article 15 GDPR);
request correction of inaccurate or incomplete personal data (Article 16 GDPR);
request deletion of your personal data (Article 17 GDPR);
request restriction of processing (Article 18 GDPR);
receive certain personal data in a portable format (Article 20 GDPR);
object to certain processing based on legitimate interests (Article 21 GDPR); and
withdraw your consent at any time where processing is based on consent (Article 7(3) GDPR).
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights or ask a question regarding your personal data, contact:
13. RIGHT TO LODGE A COMPLAINT
If you believe that the processing of your personal data infringes applicable data-protection law, you have the right to lodge a complaint with a competent supervisory authority.
In Austria, the competent supervisory authority is:
Österreichische Datenschutzbehörde
Austrian Data Protection Authority
Austrian Data Protection Authority
14. DATA SECURITY
I take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.
This website uses encrypted HTTPS/TLS connections to protect information transmitted between your browser and the website.
No method of electronic transmission or storage can guarantee absolute security.
15. CHANGES TO THIS PRIVACY POLICY
I may update this Privacy Policy if the way I operate this website changes, if I introduce or remove services or technologies, or if applicable legal requirements change.
The current version will be published on this website.
If I introduce additional technologies such as Google Analytics, Meta Pixel, newsletter software, booking systems, third-party video or audio embeds or other tools that materially change how personal data is processed, I will review this Privacy Policy and the website's cookie-consent settings and update them where necessary.
Last updated: 5 October 2026