Privacy Policy 

We take the protection of your personal data very seriously. This privacy policy informs you about the type, scope, and purpose of the collection and use of personal data on our website [giorgiaharan.com]. 

  1. Data Controller 

The data controller within the meaning of the General Data Protection Regulation (GDPR) is: 

Giorgia Haran / Einsiedeleigasse 2/2/13, 1130 Wien, Austria / g.haran@yahoo.com / +43 676 4629221 

  1. Collection and Processing of Personal Data 

We collect and process personal data only to the extent necessary to provide our services. This includes: 

Name, address, email, telephone number (for processing orders and customer communication) 

Payment information (for processing payments) 

IP address, browser type, operating system (for technical operation and security of the website) 

  1. Purposes of Processing 

We process personal data for the following purposes: 

Fulfillment of contractual obligations (art. 6 para. 1 lit. b GDPR) 

Compliance with legal obligations, e.g. tax law (art. 6 para. 1 lit. c GDPR) 

Protection of legitimate interests, e.g. IT security (art. 6 para. 1 lit. f GDPR) 

Based on consent, e.g. newsletter subscriptions (art. 6 para. 1 lit. a GDPR) 

  1. Data Sharing 

We share personal data only with third parties if this is necessary for: 

Payment processing (e.g. PayPal, credit card providers) 

Shipping service providers (e.g. postal services, couriers) 

Our tax advisors or legal advisors (to comply with legal obligations) 

Any further disclosure will only take place with your explicit consent. 

  1. Storage Period 

We store personal data only as long as necessary for the purpose of processing, or as required by statutory retention obligations (e.g. tax law: 7 years). 

  1. Cookies and Web Analytics 

Our website uses cookies to make it more user-friendly. Cookies are small text files stored on your device. You can configure your browser to block cookies or to request confirmation before they are stored. Disabling cookies may limit the functionality of the website. 

If we use web analytics tools (e.g. Google Analytics), we will inform you separately and request your consent via a cookie banner. 

  1. Your Rights (Art. 15–22 GDPR) 

As a data subject, you have the following rights: 

Right of access to your personal data 

Right to rectification of incorrect or incomplete data 

Right to erasure (“right to be forgotten”) 

Right to restriction of processing 

Right to data portability 

Right to object to processing based on legitimate interests 

Right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal) 

To exercise these rights, please contact us at [your email]. 

  1. Right to Lodge a Complaint 

If you believe your data protection rights have been violated, you can lodge a complaint with the Austrian Data Protection Authority: 

Österreichische Datenschutzbehörde Barichgasse 40–42 1030 Wien Austria Email: dsb@dsb.gv.at