This Privacy Policy explains how Atelier Büyü ("we," "us," "our") collects, uses, and shares your personal data when you visit our website or make a purchase, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Austrian data protection law.
Data Controller
The data controller responsible for your personal data is:
Atelier Büyü [ 4020 Linz] []
What Data We Collect and Why
Site Analytics
This website collects personal data to power our site analytics, including:
Information about your browser, network, and device
Web pages you visited prior to coming to this website
Your IP address
Clicks, internal links, pages visited, scrolling, searches, and timestamps
We provide this information to Squarespace, our website analytics provider, to understand site traffic and activity.
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for essential analytics, or consent (Art. 6(1)(a) GDPR) where required for non-essential analytics cookies.
Cookies
This website uses cookies and similar technologies — small files or pieces of text downloaded to your device when you access the website.
Necessary/required cookies are always used, allowing Squarespace, our hosting platform, to securely serve this website to you.
Analytics and performance cookies are only used once you acknowledge our cookie banner, to help us understand site traffic and activity.
Legal basis: Necessary cookies rely on legitimate interest; analytics/performance cookies rely on your consent, given via our cookie banner.
orders and Purchases
When you buy something on this website, we collect personal data to fulfill your order, including your:
Billing and shipping address
Order details (e.g. size, color)
Email address
Name
Phone number
We share this information with Squarespace, our online store hosting provider, so they can provide website services to us. We also share it with our shipping provider(s) so we can deliver your order. (Add: [SHIPPING PROVIDER NAME / PRIVACY POLICY URL])
During checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to improve your checkout experience.
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
Payment Processing — Squarespace Payments
When you make a purchase, we use Squarespace Payments as our payment solution, a fully integrated payment service provided by Squarespace. Squarespace Payments uses the following third-party service providers, which also receive and process your personal data under their own privacy policies:
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
Contact Form Submissions
When you submit information via our contact form, we collect the data requested in order to respond to your inquiry. We share this information with Squarespace, our website hosting provider, so they can provide website services to us and help us manage our relationship with you.
Legal basis: Legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR), or consent where the form involves marketing sign-up.
Order and Account Emails
We may email you about order or account activity — for example, when you create a customer account, reset your password, make a purchase, or your order ships. These are transactional and cannot be unsubscribed from. We share your contact information with Squarespace so they can send these emails on our behalf.
Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).
Website Hosting
This website is hosted by Squarespace. Squarespace collects personal data when you visit, including:
Information about your browser, network, and device
Web pages visited before and during your visit
Your IP address
Squarespace needs this data to run the website and to protect and improve its platform. You can read more in Squarespace's Privacy Policy.
Legal basis: Legitimate interest / necessity for providing the website (Art. 6(1)(f) / (b) GDPR).
Fonts
This site may use Google Fonts and/or Adobe Fonts to display text. To render fonts correctly, these providers may receive:
Browser, network, or device information
Information about the page you're viewing
Your IP address
International Data Transfers
Some of our service providers (e.g. Squarespace, Stripe) may process data outside the European Economic Area (EEA), including in the United States. Where this occurs, such transfers are carried out under appropriate safeguards, such as the EU Standard Contractual Clauses, as implemented by those providers. (Confirm the specifics with each provider's own documentation — Squarespace and Stripe both publish DPAs/SCC information.)
Data Retention
We retain personal data only as long as necessary for the purposes described above, or as required by law (e.g. Austrian tax and commercial record-keeping obligations, typically 7 years for invoices/accounting records). (Specify exact retention periods once determined with your accountant/legal advisor.)
Your Rights Under GDPR
As a data subject, you have the right to:
Access the personal data we hold about you (Art. 15)
Rectify inaccurate data (Art. 16)
Erase your data ("right to be forgotten") (Art. 17)
Restrict processing (Art. 18)
Data portability (Art. 20)
Object to processing based on legitimate interest, including direct marketing (Art. 21)
Withdraw consent at any time, where processing is based on consent (Art. 7(3))
Lodge a complaint with a supervisory authority — in Austria, this is the:
Austrian Data Protection Authority (Datenschutzbehörde) Barichgasse 40-42, 1030 Vienna, Austria Website: https://www.dsb.gv.at
To exercise any of these rights, contact us at [EMAIL ADDRESS]
6. Contact Us
If you have questions about this Privacy Policy or how we handle your data, contact us at:
Email: [YOUR EMAIL ADDRESS] Address: [YOUR BUSINESS ADDRESS IN AUSTRIA]