- 1. Controller
Stefanie Lechner
Studio KreativART
Achenstraße 10, 5630 Bad Hofgastein, Österreich
e-mail: office@kreativart.at office@kreativart.at
phone: +43 664 4097123
2. General
We process personal data only as far as necessary to operate the website, communicate, perform contracts (agency and webshop) and meet legal duties.
3. Hosting
The website is hosted by World4You Internet Services GmbH, Hafenstraße 35, 4020 Linz, Austria. Server log files are processed (IP address, browser type, operating system, referrer, time, pages requested) for operational security. Legal basis: Art. 6(1)(f) GDPR.
4. Contact and forms
If you contact us by email, phone or form (contact, withdrawal via WPForms), we process the data you provide to handle the request. Legal basis: Art. 6(1)(b) GDPR (contract/pre-contract) or (f) (legitimate interest in communication); where consent is given, (a).
Withdrawal form: name, email, order number/Stripe ID, product, message. Internal recipient: office@kreativart.at. office@kreativart.at.
5. Webshop and Stripe
For purchases of digital products we use Stripe.
Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland
https://stripe.com
Datenschutz: https://stripe.com/privacy
Data processed include name, email, payment data, billing address, transaction data, device and security data. You enter card data directly with Stripe.
Purposes: contract and payment (Art. 6(1)(b) GDPR), secure payment processing and fraud prevention (Art. 6(1)(f) GDPR), tax/accounting (Art. 6(1)(c) GDPR).
Stripe may transfer data to third countries (including the USA). According to Stripe, appropriate safeguards are used (e.g. standard contractual clauses). Details: Stripe privacy policy.
We store order and invoice data as long as required by the contract, warranty and statutory retention (in particular BAO/UStG, typically 7 years).
6. Cookies
Technically necessary cookies for operation and security. Non-essential cookies (analytics/marketing) only with consent (Art. 6(1)(a) GDPR), withdrawable via your cookie banner or browser settings.
7. Google services
Where embedded: Google Fonts and/or Google Maps via Google Ireland Limited. A connection to Google may be established. Legal basis depends on the embedding: consent or legitimate interest. Google privacy: https://policies.google.com/privacy https://policies.google.com/privacy
8. Social Media
Links to Instagram, Facebook, LinkedIn and similar. When you visit the respective platform, its privacy policy applies. We operate company pages; joint controllership may exist under the relevant platform policy.
9. Analytics and marketing tools
If Google Analytics, Meta Pixel or comparable tools are active: processing only with consent. Without consent there is no non-essential tracking.
10. Storage period
Data are deleted when the purpose ceases and no retention duty applies.
11. Your rights
Access, rectification, erasure, restriction, data portability, objection to processing based on Art. 6(1)(f) GDPR, withdrawal of consent with effect for the future.
12. Complaint
Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, https://www.dsb.gv.at
13. Security
Standard technical and organisational measures. Absolute security on the internet cannot be guaranteed.
14. Changes
This notice may be updated if the website, webshop or legal situation changes. The version published on this page applies.