Privacy

Datenschutzerklärung. What this website does with personal data, and what it leaves alone.

Draft. The marked details are still missing, and a lawyer has to check this page before the site goes live.

Who is responsible

Christopher Granabetter, street and number, postcode Vienna, Austria. Email: address.

This website

This website sets no cookies, counts no visitors and loads nothing from other companies. Its fonts, pictures and films come from our own server.

If you choose the light or the dark page, your browser remembers that choice on your device. It is not sent to us.

Server logs

Like every web server, ours records each request: the IP address, the time, the page asked for and the browser. We need this to keep the site running and to defend it against attacks (Art. 6 (1) (f) GDPR). The logs are deleted after number of days.

The server is run for us by hosting company, address, country as a processor under Art. 28 GDPR.

When you write to us

We use your address and your message to answer you (Art. 6 (1) (b) or (f) GDPR). We delete them when the matter is settled, unless the law requires us to keep them.

When you order

You order in our shop on Etsy. For the shop and the payment, Etsy Ireland UC, Dublin, is responsible, and its own privacy policy applies there.

From Etsy we receive your name, your delivery address and what you tell us for the artwork: the date, the time, the place and the words for the caption. We use them to make and deliver your artwork (Art. 6 (1) (b) GDPR).

The finished picture and the delivery address go to our print partner, company and country, who prints and ships it. If the partner is outside the EU: the basis of the transfer

We keep what is needed to make your artwork again exactly (date, time, place and caption) for how long. We keep invoices for seven years, as tax law requires (§ 132 BAO, Art. 6 (1) (c) GDPR).

Your rights

You can ask us what we hold about you, have it corrected or deleted, have its use restricted, receive it in a portable form, and object to its use (Art. 15 to 21 GDPR). Write to the address above.

You can also complain to the Austrian data protection authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Version of date.