Privacy Policy

 
 
 

Status 09/2021

German version: die deutsche Fassung der Datenschutzerklärung finden Sie hier.

The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is

Anna Frohmann, BA | Illustration & Graphic Design

Goldschlagstraße 127/30, 1140 Vienna, Austria

To contact Anna, please use the contact form linked here or send us an email.

1) Data collection when visiting our website

When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website

  • Date and time at the time of access

  • Amount of data sent in bytes

  • Source/reference from which you reached the page

  • Browser used

  • Operating system used

  • IP address used (if applicable: in anonymised form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

2) Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognised the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). Provided that personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or can exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

3) Contacting us

3.1  Personal data is collected when contacting us (e.g. via contact form or email). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for the processing of this data is Art. 6 para. 1 lit. b GDPR (required for the implementation of pre-contractual measures). Your data will be deleted after final processing of your request.

4) Data processing when opening a customer account and for contract processing

Contract processing

Pursuant to Art. 6 para. 1 lit. b GDPR, personal data is collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be deleted with regard to tax and commercial law retention periods (currently 7 years).

5) Comment function

In the context of the comment function on this website, in addition to your comment, information on the time of the creation of the comment and the comment name you have chosen will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is for security reasons and in case the person concerned infringes the rights of third parties by posting a comment or posts illegal content. We need your email address in order to contact you in the event that a third party objects to your published content as being illegal. The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. 

6) Data processing for order handling

6.1 In order to process your order, we work together with the service provider(s) listed below, who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

6.2 Use of payment service providers (payment services)

- PayPal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - “purchase on account” or “payment by installments” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment processing. The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only insofar as this is necessary for the payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - “purchase on account” or “payment by installments” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of PayPal’s legitimate interest in finding your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data, provided that this is necessary for the contractual processing of payments.

7) Web analytics services

7.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

This website uses Google (Universal) Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymisation of the IP address by shortening it and excludes direct personal reference. The extension means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC.server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In this context, the IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.

All processing described above, in particular the setting of Google Analytics cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a GDPR. Without this consent, Google Analytics will not be used during your visit to the website.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “Cookie Consent Tool” provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties.

For the transfer of data from the EU to the USA, Google refers to the so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.

Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

7.2  Squarespace Analytics

This website uses the web analytics service “Squarespace Analytics”, which is operated by the service provider Squarespace, Le Pole House, Ship Street Great, Dublin 8, Ireland (“Squarespace”). With the help of Squarespace, pseudonymised visitor data is collected, evaluated and stored on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Art. 6 (1) lit. f GDPR. Pseudonymised user profiles can be created and evaluated from this data for the same purpose. Squarespace uses so-called “cookies”, i.e. small text files that are stored locally in the cache of the site visitor's internet browser. These cookies serve, among other things, to recognise the browser and thus enable a more precise determination of statistical data. The data of the user’s IP address is also collected, but it is pseudonymised immediately after collection and before storage in order to exclude any personal reference.

The information generated by the cookie may be transmitted to a Squarespace server in the USA and stored there.

The pseudonymised information generated by the cookie is at no time used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym. If you do not agree with the storage and evaluation of this data from your visit to our website and would like to deactivate it for the future, you can prevent the use of cookies and thus participation in tracking. If you would like to object to the evaluation of user behaviour via cookies, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.

Alternatively, you can check whether Squarespace advertising cookies are set in your browser using the deactivation page for consumers from the EU  http://www.youronlinechoices.com/de/praferenzmanagement/ and deactivate them by using an opt-out cookie.

You can find more information about Squarespace’s privacy policy at the following web address: https://www.squarespace.com/privacy/.

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the option described above for making an objection.

8) Use of your data for direct marketing

8.1  Registration for our email newsletter

If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your email address. With your order, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter is used exclusively for the purpose of sending information by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your email address will be deleted from our newsletter distribution list immediately.

8.2  Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you email offers for similar goods or services to those you have already purchased from our range. In accordance with § 107 TKG, we do not need to obtain your separate consent for this. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Art. 6 Para. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person named at the beginning. After receipt of your objection, the use of your email address for advertising purposes will cease immediately.

8.3 Newsletter dispatch via Squarespace Email Campaigns

Our email newsletters are sent via the technical service provider Squarespace Email Campaigns, a service of Squarespace, Le Pole House, Ship Street Great, Dublin 8, Ireland (https://www.squarespace.com/email-marketing), to whom we pass on the data you provided when you registering for the newsletter. This transfer takes place in accordance with Art. 6 (1) lit. f GDPR and serves our legitimate interest in using a newsletter system that is effective in advertising, secure and user-friendly. Please note that your data may also be transferred to a Squarespace server in the USA (Squarespace Inc, 8 Clarkson St, New York, NY 10014, USA) and stored there as part of further processing.

Squarespace uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This enables us to find out whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of the web beacons, Squarespace automatically creates general, non-personal statistics about the response behavior to newsletter campaigns. However, based on our legitimate interest in the statistical evaluation of the newsletter campaigns for the optimization of the advertising communication and the better alignment with recipient interests, the web beacons also collect and utilize data of the respective newsletter recipient (email address, time of retrieval, IP address, browser type and operating system) in accordance with Art. 6 para. 1 lit f GDPR. This data allows an individual conclusion to be drawn about the newsletter recipient and is processed by Squarespace for the automated creation of statistics that show whether a specific recipient has opened a newsletter message.

If you wish to deactivate the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

Squarespace may also use this data itself in accordance with Art. 6 para. 1 lit. f GDPR on the basis of its own legitimate interest in the needs-based design and optimization of the service as well as for market research purposes, for example to determine which countries the recipients come from. However, Squarespace does not use the data of our newsletter recipients to write to them itself or to pass them on to third parties.

To protect your data in the USA, we have concluded a data processing agreement (“Data Processing Agreement”) with Squarespace based on the standard contractual clauses of the European Commission to enable the transfer of your personal data to Squarespace. If you are interested, this data processing agreement can be viewed at the following internet address: https://www.squarespace.com/dpa. You can view the data protection provisions of Squarespace here: https://www.squarespace.com/privacy. 

9) Hosting

Hosting by Squarespace

We use the website building system of Squarespace, Le Pole House, Ship Street Great, Dublin 8, Ireland (“Squarespace”), for the purpose of hosting and displaying site content on a processing on our behalf basis. All data collected on our website is processed on Squarespace’s servers. As part of Squarespace’s aforementioned services, data may also be transferred to Squarespace Inc, 8 Clarkson St, New York, NY 10014, USA, as part of further processing on our behalf. Further information on data protection by Squarespace can be found at the following Internet page: https://de.squarespace.com/privacy/.

10) Rights of the data subject 

10.1  The applicable data protection law grants you comprehensive data subject rights vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:

  • Right to information pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or criteria for determining the storage period, the right of access to your personal data and the right of access to your personal data. the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, to object to processing, to lodge a complaint with a supervisory authority, the origin of your data if it has not been collected from you by us, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing which concern you, as well as your right to be informed about the guarantees pursuant to Art. 46 of the GDPR in case your data is transferred to third countries;

  • Right to rectification pursuant to Art. 16 of the GDPR: You have the right to have any inaccurate data relating to you rectified without delay and/or to have any incomplete data held by us completed;

  • Right to deletion pursuant to Art. 17 GDPR: You have the right to demand the deletion of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;

  • Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data while the accuracy of your data, which you dispute, is being verified; if you object to the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data; if you require your data for the assertion, exercise or defence of legal claims after we no longer need this data after the purpose has been achieved; or if you have lodged an objection on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds prevail;

  • Right to information pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

  • Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible;

  • Right to revoke consent given in accordance with Art. 7 (3) GDPR: You have the right to revoke consent to the processing of data once given at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, provided that further processing cannot be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation;

  • Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of personal data relating to you infringes the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in Austria the data protection authority.

10.2 Right of objection

If your personal data is processed on the basis of our overriding interest, you have the right to object to this processing at any time with effect for the future. However, we reserve the right to further processing if there are compelling reasons for further processing.