Legal
Privacy Policy
Last updated: 15 September 2026
Who we are (Data Controller)
This website, theleanfinance.com (the “Site”), is operated by Anton Voblikov, a sole proprietorship registered in Vienna, Austria, operating under the brand name The Lean Finance.
- Address: Geiselbergstraße 28/3/120, 1110 Vienna, Austria
- VAT ID (UID): ATU79090706
- GISA number: 35537298
- Contact: info@theleanfinance.com · +43 677 62996030
For the purposes of the EU General Data Protection Regulation (GDPR), Anton Voblikov is the data controller of the personal data described here.
Overview
This policy explains what personal data we collect when you visit the Site or subscribe to our newsletter, why, the legal basis, who we share it with, and your rights. We keep data collection to the minimum needed and we do not sell your personal data.
What data we collect, why, and our legal basis
Newsletter subscription
- What: Your email address.
- Why: To send you our newsletter, roughly every two weeks.
- Legal basis: Your consent (GDPR Art. 6(1)(a)), given when you submit the signup form. You may withdraw it at any time via the unsubscribe link in any email.
- Processor: MailerLite. We use MailerLite to manage our email subscriber list and send emails. MailerLite stores subscriber data in data centres located in the European Union (Germany and the Netherlands). MailerLite’s Privacy Policy: https://www.mailerlite.com/privacy-policy
Website analytics
- What: Usage and device data such as pages visited, time on page, referring site, approximate location, browser/device type, and IP address.
- Tools:
- Vercel Analytics — privacy-friendly and cookieless. It collects only aggregated, anonymous data and does not set cookies or track you across sites.
- Google Analytics — uses cookies and is loaded only after you give consent via our cookie banner. IP anonymisation is enabled.
- Legal basis: Your consent (GDPR Art. 6(1)(a)) for Google Analytics cookies, given via the cookie banner. Vercel Analytics operates on the basis of our legitimate interest (GDPR Art. 6(1)(f)) in understanding aggregate Site usage, given its cookieless, non-identifying nature.
Hosting and security
- What: Standard server logs, including IP address and request data, generated when you visit the Site.
- Why: To operate the Site securely and reliably.
- Legal basis: Our legitimate interest (GDPR Art. 6(1)(f)) in a secure, functioning website.
- Processor: Vercel.
Cookies
- Consent / preference cookie — remembers your cookie choices.
- Google Analytics cookies — set only if you accept analytics cookies in our banner.
Vercel Analytics sets no cookies. You can change or withdraw your cookie choices at any time via the cookie settings link in the footer, or by clearing cookies in your browser. See our Cookie Policy for details. Declining analytics cookies does not affect your ability to use the Site.
Who we share data with (Processors)
We use a small number of trusted providers who process data on our behalf, under contract (Data Processing Agreements), only for the purposes above:
| Provider | Purpose | Data location | Safeguard |
|---|---|---|---|
| MailerLite (Vercom S.A.) | Newsletter storage & sending | European Union (Germany, Netherlands) | Data held in the EU; ISO/IEC 27001 certified |
| Vercel Inc. | Hosting & cookieless analytics | United States | EU-US Data Privacy Framework (certified) |
| Google LLC | Website analytics (with consent) | United States | EU-US Data Privacy Framework (certified) |
We do not sell or rent your personal data.
International data transfers
Your newsletter data is stored by MailerLite within the European Union. Where other personal data is transferred to providers in the United States (Vercel, Google), those providers are certified under the EU-US Data Privacy Framework, which the European Commission recognises as providing an adequate level of data protection for such transfers.
How long we keep your data
- Newsletter data: until you unsubscribe or request deletion.
- Analytics data (Google Analytics): 14 months, then automatically deleted.
- Server logs: a short period for security and diagnostics.
Your rights under GDPR
You have the right to access, rectify, erase, restrict, or object to processing of your data; to data portability; to withdraw consent at any time; and to lodge a complaint with a supervisory authority.
To exercise any of these, contact info@theleanfinance.com.
Your supervisory authority is the Austrian Data Protection Authority (Datenschutzbehörde, DSB), https://www.dsb.gv.at.
Children
The Site is not intended for children under 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. The “last updated” date above reflects the latest version.
Contact
Anton Voblikov (The Lean Finance) · info@theleanfinance.com · Geiselbergstraße 28/3/120, 1110 Vienna, Austria