Privacy policy

1. Data Controller

The data controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:

Sanfte Schönheit – Silvia Schuh
Silvia Schuh GmbH
Vitiserstraße 7
3830 Waidhofen an der Thaya
Austria
service@sanfteschoenheit.at
+43 2842 515 90
https://sanfteschoenheit.at/
If you have any questions regarding data protection, you may contact us at any time using the contact information listed above.

2. General Information

The protection of your personal data is of particular importance to us. We process your data exclusively in accordance with legal provisions, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and other applicable regulations.
Personal data refers to any information relating to an identified or identifiable natural person.

3. Purposes and Legal Bases for Processing

We process personal data in particular for the following purposes:

  • Provision of our website
  • Scheduling appointments
  • Customer management
  • Order and contract processing
  • Payment processing
  • Shipping of goods and gift certificates
  • Communication with customers and prospective customers
  • Newsletters and direct marketing
  • Compliance with legal obligations
  • Protection of legitimate interests

Processing is based on:

  • Art. 6(1)(a) GDPR (consent)
  • Art. 6(1)(b) GDPR (performance of a contract)
  • Art. 6(1)(c) GDPR (legal obligation)
  • Art. 6(1)(f) GDPR (legitimate interests)

4. Visiting Our Website

When you visit our website, technical information is automatically processed:

  • IP address
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referrer URL
  • Pages accessed

This processing is carried out to ensure system security, perform error analysis, and provide our online services.
The legal basis is Article 6(1)(f) of the GDPR.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies.
These may include:

  • technically necessary cookies,
  • statistical and analytical cookies,
  • and marketing and advertising cookies.

To the extent required by law, their use is based solely on your consent.
Consent may be revoked or adjusted at any time via the cookie settings.

6. Contacting Us

When you contact us via email, phone, contact form, or social media, we process the data you provide to handle your inquiry.
In particular, the following data is processed:

  • Name
  • Contact information
  • Communication content
  • Other information provided voluntarily

The legal basis is Article 6(1)(b) and (f) of the GDPR.

7. Appointment Bookings and Customer Management

We use specialized software solutions to manage appointments, customer relationships, gift certificates, and services.
In this context, the following data in particular may be processed:

  • Master data
  • Contact information
  • Appointment information
  • Customer history
  • Payment information
  • Gift certificate data

Processing is carried out for the purpose of fulfilling the contract and providing customer service in accordance with Article 6(1)(b) of the GDPR.

8. Online Store and Orders

When processing orders through our online store, we process the following data in particular:

  • Name
  • Billing address
  • Shipping address
  • Contact information
  • Order details
  • Payment information

Data processing is carried out for the purpose of taking pre-contractual measures and for the performance of the contract in accordance with Article 6(1)(b) of the GDPR.

9. Payment Processing

We use external payment service providers to process payments.
The data required for this purpose is transmitted to the respective payment providers only to the extent necessary.
Processing is carried out for the purpose of performing the contractual relationship in accordance with Article 6(1)(b) of the GDPR.

10. Shipping and Delivery

To deliver goods, gift certificates, and other shipments, we transmit the necessary data to shipping and logistics companies.
This includes, in particular:

  • Name
  • Address
  • Email address
  • Phone number
  • Shipping information

The legal basis is Article 6(1)(b) of the GDPR.

11. Newsletters and Direct Marketing

Provided you have expressly consented or a legal basis exists, we use your contact information to provide you with information about products, services, and offers.
Registration is carried out via a double opt-in procedure.
Consent that has been given may be revoked at any time with future effect.

12. Social Media

We maintain a presence on social networks and platforms.
When interacting via our social media channels, personal data may be processed by the respective platform operators.
Please refer to the privacy policies of the respective providers.

13. External Service Providers

To provide our services, we use carefully selected service providers, particularly in the following areas:

  • Hosting
  • Cloud services
  • Email communication
  • Customer management
  • Payment processing
  • Shipping
  • IT security
  • Video conferencing

To the extent that these service providers process personal data on our behalf, corresponding data processing agreements are in place in accordance with Art. 28 of the GDPR.

14. Data Transfers to Third Countries

If personal data is transferred to recipients outside the European Economic Area, this is done exclusively in compliance with the legal requirements set forth in Art. 44 et seq. of the GDPR.
These include, in particular:

  • Adequacy decisions by the European Commission,
  • the EU-US Data Privacy Framework,
  • and the European Commission’s Standard Contractual Clauses.

15. Retention Period

Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention and record-keeping obligations.
Once the purpose of processing no longer applies, the data is deleted, provided that no legal obligations or legitimate interests preclude such deletion.

16. Data Security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, or alteration.

17. Rights of Data Subjects

Data subjects are entitled to the following rights in particular:

  • Access
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability
  • Objection to processing
  • Withdrawal of consent

You may contact us at any time to exercise your rights.

18. Right to File a Complaint

If you believe that the processing of your personal data violates data protection regulations, you have the right to file a complaint with the competent supervisory authority.
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
www.dsb.gv.at

19. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy in response to changes in our services, legal requirements, or technical developments.
The current version published on our website is always the one that applies.