GDPR - Edelmann Barber Studio

Data Controller

Edelmann Barber Studio acts as the data controller for personal information collected through this website. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and Austrian data protection laws.

Contact details:
Edelmann Barber Studio
Mariahilfer Strasse 42
1070 Vienna, Austria
[email protected]

Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: When you submit a contact or booking form, you consent to our processing of your data for the purpose of responding to your inquiry.
Contractual necessity: Processing necessary to fulfill appointment requests and provide our services.
Legitimate interests: Processing necessary for our legitimate business interests, such as improving our website and services.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access (Article 15): You have the right to obtain confirmation as to whether personal data concerning you is being processed and access to that data.
Right to Rectification (Article 16): You have the right to have inaccurate personal data corrected without undue delay.
Right to Erasure (Article 17): You have the right to have your personal data erased under certain circumstances.
Right to Restriction (Article 18): You have the right to restrict the processing of your personal data in certain situations.
Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used format.
Right to Object (Article 21): You have the right to object to processing of your personal data for direct marketing purposes.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are retained for up to 24 months unless you request earlier deletion.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption of data in transit and secure storage practices.

Third-Party Transfers

We do not transfer your personal data to countries outside the European Economic Area. Any service providers we use are bound by data processing agreements compliant with GDPR requirements.

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) if you believe your rights have been violated.

Updates

This GDPR information page may be updated periodically. Please check back regularly for any changes.

Last updated: August 2024

GDPR Compliance