Privacy Policy
Privacy Policy
We take the protection of your personal data seriously and want you to feel comfortable when visiting our website. Protecting your privacy when processing personal data is important to us and is taken into account in our business processes.
This privacy policy explains how personal data is collected, processed, and used during and after your use of our website, what types of data this concerns, why such data is collected, with whom it is shared, and what rights you have in this regard.
Please read this notice carefully.
Privacy settings
Explanation of terms
We have designed our privacy policy in accordance with the principles of the GDPR, see Article 5 GDPR. Should any ambiguities remain regarding the use of terminology, you can find the corresponding definitions here.
Name and address of the responsible party
Sylvia Spitzbart-Gundolf,
Nonntaler Hauptstraße 61, A-5020 Salzburg,
Tel. +43 664 4304430
, studio@sylviaspitzbart.at
Storage period and deletion
Unless a more specific retention period is stated within this privacy notice, your personal data will remain with us until the purpose or legal basis for data processing no longer applies. If you submit a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted, provided we have no other legally permissible grounds for storing your personal data (eg, tax or commercial law retention periods). In the latter case, the data will be deleted once these grounds cease to apply.
Provision of the website and creation of log files
When you visit our website, your browser automatically sends information to our website’s server. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until it is automatically deleted:
IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access is made
browser used and, if applicable, the operating system of your computer, as well as the name of your access provider.
We process the aforementioned data for the following purposes:
Ensuring a smooth connection to the website
Ensuring comfortable use of the website
Evaluation of system security and stability
Error analysis
for other administrative purposes
The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interest arises from the purposes of data collection listed above. Under no circumstances we will use the collected data to draw conclusions about your identity.
The legitimate interest for this processing is as follows: The integrity and security of the website, which is carried out by the security team through the collection of logs, in particular IP addresses, in order to detect possible misuse at an early stage and to be able to take measures to reduce damage.
Your personal data will be stored with our provider, with whom a data processing agreement pursuant to Art. 28 GDPR has been concluded.
SSL encryption
For security reasons, our website uses SSL encryption. This protects transmitted data and prevents it from being read by unauthorized third parties.
You can recognize an encrypted connection by the fact that the browser’s address bar changes from „http://“ to „https://“ and by the lock symbol, which is visible on the left side of your browser bar.
Cookies
To make our website more attractive, user-friendly, and effective, we use cookies. These are small text files that are stored on your device and contain information about the websites you visit. Cookies do not harm your computer and do not contain viruses.
By adjusting your browser settings, you can be notified when cookies are set and decide individually whether to accept them, block them entirely, or configure your browser to automatically delete cookies when you close the browser window. Disabling cookies may prevent you from using all the features of our website.
Analytics, statistics and tag management services
Google Tag Manager
We use Google Tag Manager on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager serves as a central management tool for website tags and allows us to technically integrate and control other services and analytics tools. Google Tag Manager itself does not create its own user profiles. However, when the service is accessed, technical information, in particular the IP address as well as browser and device information, may be transmitted to Google.
The Google Tag Manager will only load on our website after you have given your consent via our consent management tool. The legal basis for this processing is Article 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie settings on our website.
Data may also be processed by Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. For data transfers not covered by an adequacy mechanism, Google provides additional appropriate data protection safeguards, such as standard contractual clauses.
For more information, please see Google’s privacy policy:
https://policies.google.com/privacy?hl=de
Google Analytics
We use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics allows us to statistically analyze the use of our website and improve our online services. This may involve processing information such as pages visited, interactions with the website, approximate location information, devices used, browsers, operating systems, as well as the origin and time of a website visit.
Google states that IP addresses of users from the European Union, Switzerland, and the United Kingdom are not logged or stored. The IP address is processed technically during data collection and then discarded before the data is stored.
Google Analytics is only activated on our website with your prior consent. The legal basis for this processing is Article 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie settings on our website.
Google Analytics may use cookies and similar technologies to collect information about the use of our website and to recognize returning visitors. The specific storage duration of the cookies used is displayed in our consent management tool.
Data may also be processed by Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. Google also provides data processing terms for companies in the European Economic Area for its analytics services.
For more information, please see Google’s privacy policy:
https://policies.google.com/privacy?hl=de
Jetpack
Our website uses Jetpack, a service provided by Automattic. For users in Europe, Automattic services are generally provided by Automattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Place, Dublin, D02 AY86, Ireland. Automattic Inc. in the USA may also be responsible for certain processing operations.
Jetpack provides various features for WordPress websites. The personal data processed depends on which Jetpack features are activated on our website. This may include, but is not limited to, IP address, browser type, device information, operating system, referrer URL, date and time of access, pages visited, interactions with the website, and approximate location information derived from the IP address.
To the extent that we use Jetpack for statistical and analytical purposes, any non-essential functions will only be activated with your prior consent. The legal basis for this is Article 6(1)(a) GDPR. You can withdraw your consent at any time via the cookie settings on our website.
Insofar as individual Jetpack functions serve solely the security, stability, or technical provision of our website, the processing may be based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and reliable provision of our website.
If Jetpack Stats is used, data such as page and post views, clicks on external links, referring URLs, search terms, and the visitor’s country can be recorded. Automattic states that statistics logs, which may contain IP addresses, are stored for 28 days.
When using Jetpack, data may be processed outside the European Economic Area. Automattic states that it uses standard contractual clauses approved by the European Commission for such international data transfers, unless an adequacy decision exists.
For more information, please visit the Jetpack Privacy Center:
as well as in Automattic’s privacy policy:
https://automattic.com/de/privacy/
Contacting the company
You can contact us at any time. We would like to provide you with the following information:
General contact options
As general contact media, you have the option
by mail,
by phone or
Please contact us via email.
In order to process your contact request, we will need to store your communication data (e.g. telephone number, e-mail address) and identification data (e.g. name, address).
The legal basis of Art. 6 para. 1 lit. b) GDPR applies only if the contact is based on the initiation, performance of an existing or modification of a contractual relationship.
For all other cases of contact, the processing is based on the legitimate interest of the company pursuant to Art. 6 para. 1 lit. f) GDPR.
The legitimate interest for this processing is as follows: As a company, we pursue the economic interests of individualizing and optimizing our products, which are declared as economic factors of the company.
Data processing by social networks
We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below.
Soziale Netzwerke wie Facebook, Twitter etc. können Ihr Nutzerverhalten in der Regel umfassend analysieren, wenn Sie deren Website oder eine Website mit integrierten Social-Media-Inhalten (z. B. Like-Buttons oder Werbebannern) besuchen. Durch den Besuch unserer Social-Media-Präsenzen werden zahlreiche datenschutzrelevante Verarbeitungsvorgänge ausgelöst.
Im Einzelnen: Wenn Sie in Ihrem Social-Media-Account eingeloggt sind und unsere Social-Media-Präsenz besuchen, kann der Betreiber des Social-Media-Portals diesen Besuch Ihrem Benutzerkonto zuordnen. Ihre personenbezogenen Daten können unter Umständen aber auch dann erfasst werden, wenn Sie nicht eingeloggt sind oder keinen Account beim jeweiligen Social-Media-Portal besitzen. Diese Datenerfassung erfolgt in diesem Fall beispielsweise über Cookies, die auf Ihrem Endgerät gespeichert werden oder durch Erfassung Ihrer IP-Adresse.
Mit Hilfe der so erfassten Daten können die Betreiber der Social-Media-Portale Nutzerprofile erstellen, in denen Ihre Präferenzen und Interessen hinterlegt sind. Auf diese Weise kann Ihnen interessenbezogene Werbung in- und außerhalb der jeweiligen Social-Media-Präsenz angezeigt werden. Sofern Sie über einen Account beim jeweiligen sozialen Netzwerk verfügen, kann die interessenbezogene Werbung auf allen Geräten angezeigt werden, auf denen Sie eingeloggt sind oder eingeloggt waren.
Bitte beachten Sie außerdem, dass wir nicht alle Verarbeitungsprozesse auf den Social-Media-Portalen nachvollziehen können. Je nach Anbieter können daher ggf. weitere Verarbeitungsvorgänge von den Betreibern der Social-Media-Portale durchgeführt werden. Details hierzu entnehmen Sie den Nutzungsbedingungen und Datenschutzbestimmungen der jeweiligen Social-Media-Portale.
Rechtsgrundlage
Unsere Social-Media-Auftritte sollen eine möglichst umfassende Präsenz im Internet gewährleisten. Hierbei handelt es sich um ein berechtigtes Interesse im Sinne von Art. 6 UAbs. 1 lit. f) DSGVO.
Die von den sozialen Netzwerken initiierten Analyseprozesse beruhen ggf. auf abweichenden Rechtsgrundlagen, die von den Betreibern der sozialen Netzwerke anzugeben sind (z. B. Einwilligung im Sinne des Art. 6 UAbs. 1 lit. a) DSGVO).
Verantwortlicher und Geltendmachung von Rechten
Wenn Sie einen unserer Social-Media-Auftritte (z. B. Facebook) besuchen, sind wir gemeinsam mit dem Betreiber der Social-Media-Plattform für die bei diesem Besuch ausgelösten Datenverarbeitungsvorgänge verantwortlich. Sie können Ihre Rechte (Auskunft, Berichtigung, Löschung, Einschränkung der Verarbeitung, Datenübertragbarkeit und Beschwerde) grundsätzlich sowohl gegenüber uns als auch gegenüber dem Betreiber des jeweiligen Social-Media-Portals (z. B. Facebook) geltend machen.
Bitte beachten Sie, dass wir trotz der gemeinsamen Verantwortlichkeit mit den Social-Media-Portal-Betreibern nicht vollumfänglich Einfluss auf die Datenverarbeitungsvorgänge der Social-Media-Portale haben. Unsere Möglichkeiten richten sich maßgeblich nach der Unternehmenspolitik des jeweiligen Anbieters.
Speicherdauer
Die unmittelbar von uns über die Social-Media-Präsenz erfassten Daten werden von unseren Systemen gelöscht, sobald Sie uns zur Löschung auffordern, Ihre Einwilligung zur Speicherung widerrufen oder der Zweck für die Datenspeicherung entfällt. Gespeicherte Cookies verbleiben auf Ihrem Endgerät, bis Sie sie löschen. Zwingende gesetzliche Bestimmungen – insb. Aufbewahrungsfristen – bleiben unberührt.
Auf die Speicherdauer Ihrer Daten, die von den Betreibern der sozialen Netzwerke zu eigenen Zwecken gespeichert werden, haben wir keinen Einfluss. Für Einzelheiten dazu informieren Sie sich bitte direkt bei den Betreibern der sozialen Netzwerke (z. B. in deren Datenschutzerklärung, siehe unten).
Soziale Netzwerke im Einzelnen
Wir verfügen über ein Profil bei Facebook. Anbieter dieses Dienstes ist die Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland. Die erfassten Daten werden nach Aussage von Meta auch in die USA und in andere Drittländer übertragen.
Wir haben mit Facebook eine Vereinbarung über gemeinsame Verarbeitung (Controller Addendum) geschlossen. In dieser Vereinbarung wird festgelegt, für welche Datenverarbeitungsvorgänge wir bzw. Facebook verantwortlich ist, wenn Sie unsere Facebook-Page besuchen. Diese Vereinbarung können Sie unter folgendem Link einsehen:
https://www.facebook.com/legal/terms/page_controller_addendum
Sie können Ihre Werbeeinstellungen selbstständig in Ihrem Nutzer-Account anpassen. Klicken Sie hierzu auf folgenden Link und loggen Sie sich ein:
https://www.facebook.com/settings?tab=ads
Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der EU-Kommission gestützt.
Details finden Sie hier:
https://www.facebook.com/legal/EU_data_transfer_addendum
https://de-de.facebook.com/help/566994660333381
Details entnehmen Sie der Datenschutzerklärung von Facebook:
https://www.facebook.com/about/privacy/
Wir verfügen über ein Profil bei Instagram. Anbieter ist die Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland. Die erfassten Daten werden nach Aussage des Anbieters auch in die USA und andere Drittländer übertragen. Die Datenübertragung in die USA wird auf die Standardvertragsklauseln der EU-Kommission gestützt.
Details finden Sie hier:
https://privacycenter.instagram.com/policy/
https://www.facebook.com/legal/EU_data_transfer_addendum
https://de-de.facebook.com/help/566994660333381
For details on how they handle your personal data, please see Instagram’s privacy policy:
https://help.instagram.com/519522125107875
Google Maps
Our website uses a Google Maps link to our location to help visitors find us quickly. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When using Google Maps, Google also collects, processes, and uses data about visitors‘ use of the map features. You can find more information about data processing by Google in Google’s privacy policy:
https://policies.google.com/privacy?hl=de&gl=de
The legal basis for processing this personal data is Article 6(1)(f) GDPR. Our legitimate interest lies in making our location easy to find.
Rights of the person concerned
You have the fundamental rights to information, rectification, erasure, restriction of processing, data portability, withdrawal of consent, and objection. If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority.
Change and update
As part of ongoing updates, our privacy policy may be amended from time to time. If any changes are made to this notice, we will indicate them for you.
We use the „Real Cookie Banner“ consent tool to manage the cookies and similar technologies (tracking pixels, web beacons, etc.) we employ and the associated consents. Details on how „Real Cookie Banner“ works can be found at:
https://devowl.io/de/rcb/datenrechner/
The legal basis for processing personal data in this context is Article 6(1)(c) GDPR and Article 6(1)(f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
Providing your personal data is neither contractually required nor necessary for entering into a contract. You are not obligated to provide your personal data. If you do not provide your personal data, we will be unable to manage your consent.
This privacy policy is from September 2026.