1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is: Sonja Priller e.U. (Flourish – Framed Nature®), Theobaldgasse 13/3, 1060 Vienna, Austria, e-mail: mail@sonjapriller.com, phone: +43 699 19420170
2. Hosting and provision of the online shop
This online shop is operated and hosted on the platform of Shopify International Limited (or Shopify Inc.). Personal data may also be processed outside the EU/EEA in this context; Shopify undertakes to comply with appropriate safeguards (including the EU Standard Contractual Clauses). Further information: Shopify's privacy policy at www.shopify.com/legal/privacy.
3. Data collected when visiting the website
When you access our online shop, information (including IP address, browser type, date and time of access) is automatically stored in server log files. In addition, technically necessary cookies are used to enable the checkout and shopping cart process. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the smooth operation of the website).
4. Data collected when placing an order
When you place an order with us, we process the data necessary to fulfil the contract (name, delivery address, e-mail address, telephone number where applicable, payment details). The legal basis is Art. 6 (1) (b) GDPR (performance of a contract).
5. Payment processing
For payment processing we use Shopify Payments and the payment methods offered through it (including Shop Pay and Apple Pay). The payment data processed in this context is transmitted exclusively to the respective payment service provider for the purpose of processing the payment. The legal basis is Art. 6 (1) (b) GDPR.
6. Disclosure of data
Your data is only passed on to service providers we need in order to fulfil the contract (e.g. shipping service providers, payment service providers, the hosting provider Shopify), and where we are legally obliged to do so.
7. Storage period
We store personal data only for as long as is necessary for the purposes stated or as required by statutory retention obligations (in particular under commercial and tax law).
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to the processing of your personal data. To exercise these rights, please contact us at the address given above.
9. Right to lodge a complaint
You have the right to lodge a complaint with the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at
10. Changes to this privacy policy
We reserve the right to amend this privacy policy as soon as the legal situation or our data processing changes (e.g. when integrating new tools such as analytics or marketing tools).
