Privacy Policy

This privacy policy informs you about the type, scope and purpose of the processing of personal data on this website (www.goddessart.art).

Controller: atelier RHEAsilvia · Silvia Steiger, Pöttschingersee R 11, A-7033 Pöttsching, Austria. Mail: [email protected], Phone: +43 69981896980.

This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which processes the data on our behalf. When you visit the website, the server automatically records technical access data (requested page, date and time, transferred data volume, browser type, operating system, IP address). This data is processed on the basis of our legitimate interest in the secure and stable operation of the website (Art. 6 (1) lit. f GDPR), is not merged with other data sources and is deleted after a short period unless it is required to investigate a specific security incident.

To protect the website against attacks and to deliver it quickly, all requests pass through the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes the technical access data listed above, including your IP address, on our behalf. Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in a secure and reliable website (Art. 6 (1) lit. f GDPR). Details: cloudflare.com/privacypolicy.

For reach measurement we use Plausible Analytics, operated by us on our own server. Plausible works without cookies and without storing personal data: IP addresses and other identifying data are not stored, and no data is transferred to third parties or outside our own infrastructure. The legal basis is our legitimate interest in a privacy-friendly analysis of website usage (Art. 6 (1) lit. f GDPR). Because no cookies are used and no personal data is stored, no consent banner is required for this.

If you contact us via the contact or commission form (or by e-mail), we process the data you provide (name, e-mail address, your message and, where given, the piece you refer to) in order to handle and answer your enquiry. The legal basis is Art. 6 (1) lit. b GDPR (steps prior to entering into a contract) and our legitimate interest in answering enquiries. The data is stored in our content management system and deleted automatically 12 months after the enquiry has been dealt with, unless statutory retention obligations apply. A copy of each enquiry is sent to our e-mail inbox, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Gmail); our replies are also sent from there.

If you purchase in our shop, payment is processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. For this purpose the data required for the payment (name, billing and shipping address, e-mail address, payment details) is transmitted to Stripe. We ourselves never receive your full payment details. The legal basis is Art. 6 (1) lit. b GDPR (performance of a contract). Stripe may transfer data to third countries on the basis of the EU standard contractual clauses; details can be found in Stripe’s privacy policy at stripe.com/privacy.

We store order data (ordered work, delivery address, payment status) for the performance of the contract and for the statutory retention periods under Austrian tax law (in general 7 years).

If you sign up for our newsletter ("Letters from the atelier"), we store your e-mail address, the language you chose and the time of sign-up and of your confirmation. Sign-up uses a double-opt-in procedure: you will receive a confirmation e-mail and your address is only used for the newsletter once you have confirmed it. Sign-ups that are not confirmed within 30 days are deleted automatically. We receive a notification of each sign-up in our e-mail inbox (Gmail, see above). The legal basis is your consent (Art. 6 (1) lit. a GDPR). You can revoke your consent at any time with effect for the future by using the unsubscribe link in any newsletter or by contacting [email protected]; your address will then be deleted from the newsletter list.

You have the right to information about your stored personal data, to rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. To exercise these rights, contact [email protected].

You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

We may update this privacy policy when the website or the legal situation changes. The current version is always available on this page.