Privacy Policy
Privacy Policy of Simone Becke – Information on the processing of your personal data in accordance with the GDPR.
1. Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Simone Becke e.U.Aschbachweg 30
6370 Kitzbühel
Austria
Email: datenschutz@simonebecke.com
Phone: +43 676 4903040
2. Legal Basis for Data Processing
We process personal data only on the basis of the following legal grounds under the GDPR:
- Art. 6(1)(a) GDPR (Consent): You have given your consent for processing for one or more specific purposes (e.g. newsletter, cookies).
- Art. 6(1)(b) GDPR (Contract): Processing is necessary for the performance of a contract (e.g. order fulfilment).
- Art. 6(1)(c) GDPR (Legal Obligation): Processing is necessary for compliance with a legal obligation (e.g. retention periods).
- Art. 6(1)(f) GDPR (Legitimate Interest): Processing is necessary for the purposes of our legitimate interests (e.g. website security).
3. What Data We Collect
3.1 Automatically Collected Data (Server Logs)
The following data is automatically recorded each time our website is accessed:
- IP address (anonymised)
- Date and time of the request
- Page/file accessed
- Amount of data transferred
- Browser type and version
- Operating system
- Referrer URL (previously visited page)
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and optimisation of our website)
3.2 When Placing Orders
To process orders, we collect:
- Name (first and last name)
- Email address
- Delivery address
- Phone number (optional)
- Payment information (processed directly by the payment service provider)
Legal basis: Art. 6(1)(b) GDPR (performance of contract)
3.3 When Contacting Us
If you contact us by email or contact form, we store your details for the purpose of processing your enquiry and any follow-up questions.
Legal basis: Art. 6(1)(b)/(f) GDPR
3.4 User Account
When registering a user account, we store your email address and encrypted password. You may optionally provide additional profile information.
Legal basis: Art. 6(1)(b) GDPR (performance of contract)
5. Third-Party Services
5.1 Google Analytics
We use Google Analytics to analyse user behaviour. Google Analytics uses cookies that enable analysis of website usage.
- Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- We use IP anonymisation (anonymizeIp)
- Data transfer to the USA based on Standard Contractual Clauses
Legal basis: Art. 6(1)(a) GDPR (consent)
5.2 Resend (Email Delivery)
We use the Resend service for sending transactional emails and newsletters.
- Provider: Resend, Inc., 2261 Market Street #4059, San Francisco, CA 94114, USA
- Data stored: email address, send time, delivery status
- Data transfer to the USA based on Standard Contractual Clauses
- Newsletter subscriber data (email, sign-up date) is stored and managed in our own database
Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR (performance of contract for transactional emails)
5.3 Hosting & CDN
Our website is hosted by an external service provider.
- Server location: European Union
- A Data Processing Agreement (DPA) has been concluded
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
7. Payment Processing
We use the payment service provider SumUp for payment processing:
SumUp
- Provider: SumUp Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin 2, Ireland
- Payment data is transmitted directly to SumUp and not stored on our servers
- SumUp is PCI-DSS certified
Legal basis: Art. 6(1)(b) GDPR (performance of contract)
8. Your Rights as a Data Subject
You have the following rights regarding your personal data:
Right of Access (Art. 15 GDPR)
You may request information about your data stored by us.
Right to Rectification (Art. 16 GDPR)
You may request the correction of inaccurate data.
Right to Erasure (Art. 17 GDPR)
You may request the deletion of your data ("right to be forgotten").
Right to Restriction (Art. 18 GDPR)
You may request the restriction of the processing of your data.
Right to Object (Art. 21 GDPR)
You may object to the processing of your data.
Data Portability (Art. 20 GDPR)
You may receive your data in a machine-readable format.
Right of Withdrawal
If you have given consent to data processing, you may revoke it at any time. The lawfulness of processing carried out prior to the withdrawal shall remain unaffected.
Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority:
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna
dsb@dsb.gv.at
www.dsb.gv.at
9. Data Retention
We store personal data only for as long as necessary for the purposes for which it was collected or as required by statutory retention periods:
- Order data: 7 years (statutory retention obligation in Austria)
- Invoices: 7 years (Austrian Federal Tax Code)
- User accounts: Until account deletion by you
- Newsletter data: Until withdrawal of consent
- Cookie consents: 1 year (then re-prompted)
- Server logs: 30 days
10. Data Security
We implement technical and organisational measures to protect your data:
- SSL/TLS Encryption: All data transmissions are encrypted
- Secure Passwords: Passwords are stored in encrypted form
- Access Control: Only authorised persons have access to your data
- Regular Updates: Our systems are updated regularly
- Backups: Regular data backups
11. Changes to This Privacy Policy
We reserve the right to amend this privacy policy to reflect changes in legislation or modifications to our services. The current version is always available on this page.
Significant changes will be communicated to you by email if you are registered with us.
12. Contact for Data Protection Enquiries
For questions about data protection or to exercise your rights, please contact us at:
Data Protection Enquiries
Email: datenschutz@simonebecke.com
We will respond to your enquiry as soon as possible, but no later than within one month.