Privacy Statement

I process your personal data exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Data Protection Act. Below, I inform you about who I am, as well as the nature, scope, and purpose of processing your personal data.

1. Legal basis (EU General Data Protection Regulation and Data Protection Act 2018)

The EU General Data Protection Regulation (2016/679) protects the fundamental rights and freedoms of natural persons, especially their right to the protection of personal data. Personal data includes any information relating to an identified or identifiable natural person.

1. Who I am (data controller) and website operator

Verena Ulrich

Zusertalgasse 62, 8010 Graz, Austria

Phone number: +43 681 2025 7073

Email address: info@verena-ulrich.com

1. Collection and processing of data

I process the personal data that you provide to me through the use of my website (including all subpages) and/or as an interested party or customer by providing information in the context of an inquiry or correspondence. When you visit the website without registering or actively providing data, I only process the data that your browser transmits to my server and that is technically necessary to display my website, ensure its stability and security, and improve its performance (e.g., name of the accessed file, date and time of access, data volume transmitted, message about successful access, browser type and version, user's operating system, referrer URL, IP address, and requesting provider). In the context of contract management (initiation, execution, processing, and administration), I process your name, address, contact details, and other information you provide.

The data processing is carried out for the following purposes based on the mentioned legal bases:

Initiation, processing, and management of contracts

Execution of service-related tasks

Marketing for my own purposes

Operation and administration of Verena Ulrich's website

Legal bases for data processing are:

Consent according to Art. 6(1)(a) GDPR

Contractual acceptance and fulfillment according to Art. 6(1)(b) GDPR - I need your data to process your request or order.

Marketing and advertising or other legitimate interests according to Art. 6(1)(f) GDPR - As an interested party, customer, or guest, I would like to inform you about updates and offers regarding my products and services.

I commit to processing your data only for specific and lawful purposes and protecting it according to the current state of technology. I do not disclose your personal data to third parties for advertising purposes. Third parties only receive your personal data from me in the manner described in these privacy policies or when legally required to do so.

1. Contact form

To request further information, I provide contact forms at various places on my websites, which allow you to contact me directly. The personal data entered in these forms (e.g., name, email address) will be processed in accordance with legal regulations for handling the inquiry.

1. Cookies

My website uses so-called cookies. These are small text files that are stored on your end device via your browser. They do not cause any damage. I use cookies to make my offer user-friendly. Some cookies remain stored on your end device until you delete them. They enable me to recognize your browser on your next visit. If you do not wish this, you can configure your browser to inform you about the setting of cookies and allow them only in individual cases. The deactivation of cookies may limit the functionality of my website. Depending on their purpose and function, the cookies are divided into categories (essential, statistics, marketing). Further information can be found in the cookie banner.

1. Collection of anonymous data and information

I or my web hosting provider collect data about each access to our website via server log files.

The access data includes: name of the accessed website, file, date and time of access, data volume transmitted, message about successful access, browser type and version, user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider.

The log data is only used for statistical evaluations for the purpose of operating, ensuring security, and optimizing the offer. However, I reserve the right to subsequently check the log data if there are concrete indications of illegal use.

1. Withdrawal, changes, correction, or deletion

Any natural person affected by data processing has the right to request information free of charge about the personal data processed about them. Additionally, the data subject has the right to correct incorrect data, block and delete their personal data processed unlawfully, provided there is no legal obligation to retain it. The data subject has the right to object to the processing of personal data concerning them at any time, with effect for the future.

Furthermore, as a data subject, you have the right to request that the personal data you have provided to me be transferred directly to another data controller, as far as technically feasible and provided this does not adversely affect the rights and freedoms of others, pursuant to Article 20(1) GDPR.

7.1. Exercise of data subject rights and right to lodge complaints

As a data subject, you have the following rights in relation to the data stored about you under Articles 15 to 22 GDPR:

Right to information

Right to correction of incorrect or incomplete data

Right to deletion of unlawfully processed data

Right to restriction of processing

Right to object to processing (only in case of legitimate interest)

Right to data portability of the data provided in a structured, common, and machine-readable format

If the processing is based on consent, you, as a data subject, have the right to revoke the consent at any time, effective for the future. This revocation does not affect the legality of the processing carried out on the basis of the consent until the revocation.

You have the right to lodge a complaint with the Austrian Data Protection Authority as the supervisory authority if you believe that the processing of your personal data is not lawful.

To exercise your data subject rights or if you have any questions about the processing of data concerning you, please contact me via email at [Your email address].

1. Storage period

Unless a specific storage period is indicated at the time of collection (e.g., in the context of a declaration of consent), I am obliged to delete personal data according to Art. 5(1)(e) GDPR as soon as the purpose for processing is fulfilled. In this context, I would like to point out that legal retention obligations represent a legitimate purpose for the processing of personal data.

In general, personal data is stored in a personalized form until the end of a business relationship or until the expiry of applicable guarantee, warranty, or statute of limitations periods, and in any case until the end of any legal disputes where the data is needed as evidence or until the end of the third year after the last contact with a business partner.