Privacy Policy

Controller

Valerie Gegenhuber

Kollergasse 16

4400 Steyr

Austria

gegenhuberdesign@gmail.com

Data Collection

Personal data is collected when you:

  • visit this website

  • place an order

  • contact via email

This may include:

  • name

  • email address

  • billing and shipping address

  • payment information (processed by external providers)

  • order details

Purpose of Processing

Data is processed for:

  • order fulfillment

  • communication

  • payment processing

  • shipping and delivery

Legal Basis (Art. 6 GDPR)

Processing is based on:

  • contract fulfillment (Art. 6(1)(b))

  • legal obligations (Art. 6(1)(c))

  • legitimate interest in website functionality and security (Art. 6(1)(f))

Hosting and Website Infrastructure

This website is hosted and operated using Squarespace.

Squarespace processes data on behalf of the controller, including technical data such as IP address, browser information, and website interactions.

Payments

Payments are processed via external providers, such as:

  • Stripe

  • PayPal

Payment data is processed directly by these providers and is not stored by the website operator.

Shipping

For order delivery, personal data (name and address) is shared with shipping service providers, such as:

  • Austrian Post

Data is shared only to the extent necessary for delivery.

Data Retention

Personal data is stored only as long as necessary for:

  • order fulfillment

  • legal obligations (e.g. accounting requirements)

Cookies

This website uses essential cookies required for functionality.
Squarespace may also use analytics and performance cookies.

You can manage cookie preferences through your browser settings.

Your Rights

Under the GDPR, you have the right to:

  • access your data

  • rectification

  • erasure

  • restriction of processing

  • data portability

  • object to processing

To exercise your rights, contact: gegenhuberdesign@gmail.com

Data Transfers

Some service providers (e.g. Squarespace, Stripe, PayPal) may process data outside the European Union.
In such cases, appropriate safeguards (e.g. Standard Contractual Clauses) are applied.