Last updated: September 2026
The controller responsible for the processing of personal data on this website is:
Katia Salmasi
Canettistraße 4/810
1100 Vienna
Austria
Email: info@katiasalmasi.art
Phone: +43 677 61506070
Personal data is processed on this website only to the extent necessary for the operation of the website, the handling of inquiries, the processing of orders, payment processing, the delivery of goods, website security, or compliance with legal obligations.
Depending on the processing activity, processing is based in particular on the following legal bases:
Consent that has been given may be withdrawn at any time with effect for the future.
This website is operated on servers located in Germany. According to the technical information available to us, infrastructure provided by Hetzner Online GmbH is used.
When you access this website, technically necessary information may be processed in server log files. This may include in particular:
This processing serves the technical provision of the website, the maintenance of stability and security, error analysis, and the detection and prevention of misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of this website.
If you contact us via the contact form or by email, we process the data you provide in order to handle your inquiry.
In particular, the following data may be processed via the contact form:
Processing is based on Art. 6(1)(b) GDPR where your inquiry concerns the conclusion or performance of a contract.
For other inquiries, processing is based on our legitimate interest in handling incoming inquiries pursuant to Art. 6(1)(f) GDPR.
The data entered via the contact form is not stored in WordPress as form submissions using Elementor’s “Submissions” feature.
For the technical delivery of emails from this website, we use Site Mailer / Email Deliverability by Elementor.
This includes in particular messages sent via the contact form as well as technical or shop-related emails generated by the website.
For delivery purposes, required information and technical log data may be processed. This may include in particular:
Storage of full email content in the Site Mailer log is disabled on this website.
According to the provider, technical email logs may be stored for a limited period.
Elementor may also process data outside the European Economic Area in connection with the provision of the service. According to the provider, the required data protection safeguards are used for such transfers.
We use WooCommerce to operate our online shop.
When you place an order, we process the data required to carry out and fulfil the order.
This may include in particular:
Processing is carried out for the performance of the purchase contract pursuant to Art. 6(1)(b) GDPR.
Where order, payment or invoice data must be retained due to statutory tax, accounting or other retention obligations, further processing is based on Art. 6(1)(c) GDPR.
Orders may be placed as guest orders. Customer account creation is currently not offered.
We use PayPal for payment processing.
If you use PayPal or a payment method provided via PayPal, the information required for payment processing is transmitted to or processed by PayPal.
This may include in particular:
Processing is carried out for the performance of the contract concluded with you pursuant to Art. 6(1)(b) GDPR.
Depending on availability and technical requirements, PayPal may provide additional payment methods in addition to the standard PayPal payment option.
PayPal’s own privacy policy applies to the further processing of personal data by PayPal.
To protect the ordering and payment process against automated attacks, bots, misuse and fraudulent payment attempts, Google reCAPTCHA is used in connection with WooCommerce PayPal Payments.
We use reCAPTCHA v3. Where necessary, reCAPTCHA v2 may be used as an additional verification measure.
When reCAPTCHA is used, technical information about the device used and the access may be processed. This may include, for example:
This data is used to distinguish automated or abusive access from normal human access and to protect the payment process against fraud.
The integration of Google reCAPTCHA is taken into account by our consent management system.
Where consent is required for the use of reCAPTCHA, processing is based on Art. 6(1)(a) GDPR.
Where processing is necessary to secure the payment process and prevent specific misuse or fraud attempts, we rely on our legitimate interest in the security of our online shop pursuant to Art. 6(1)(f) GDPR.
The provider of this service is Google. Google’s privacy policy applies to further processing by Google.
We use Österreichische Post AG (Austrian Post) for the delivery of ordered goods.
For the purpose of delivery, we currently transmit only the data necessary for delivery:
We do not currently transmit the recipient’s email address or telephone number to Austrian Post.
There is no automatic connection to Austrian Post via a shipping plugin or shipping API. Shipments are handed in by us directly at a post office branch.
The transmission of data is carried out for the performance of the purchase contract pursuant to Art. 6(1)(b) GDPR.
Austrian Post’s own privacy policy applies to its further processing of personal data.
This website uses cookies and comparable technologies where this is necessary for the technical operation of the website or where corresponding consent has been given.
For the management of consent, we use Complianz | GDPR/CCPA Cookie Consent.
You can make your choice and manage your settings via the cookie banner.
Technically necessary cookies and comparable technologies may be used where they are required for the operation of the website or for functions expressly requested by you.
Where consent is required, the relevant technologies are used on the basis of Art. 6(1)(a) GDPR.
The free version of Complianz used by us does not maintain server-side storage of complete individual consent records.
The website is also configured to respect supported Do Not Track and Global Privacy Control signals.
Further information about the cookies and services used on this website can be found in our Cookie Policy (EU).
Fonts used on this website, including Google Fonts, are hosted locally on our own web server.
As a result, no connection to Google Fonts servers is established merely when these locally hosted fonts are loaded.
This website contains links to external profiles on Instagram and LinkedIn.
These are simple external links. Social media feeds or comparable content from these platforms are not currently embedded in the website.
A connection to the respective platform provider is generally established only when you click the corresponding link and visit the external platform.
The respective platform provider is responsible for subsequent data processing in accordance with its own privacy policy.
We currently do not use any web analytics service configured by us, such as Google Analytics.
Personal data is generally stored only for as long as necessary for the respective processing purpose or for as long as statutory retention obligations apply.
For orders, the following technical retention periods are currently configured in WooCommerce:
Tax- and accounting-relevant documents are retained in accordance with the applicable statutory retention obligations.
Longer storage may be necessary in particular where data is required for the establishment, exercise or defence of legal claims or due to administrative or judicial proceedings.
Contact and communication data is deleted when it is no longer required for handling and possible follow-up of an inquiry and no statutory retention obligations prevent deletion.
Personal data may be transferred, where necessary for the respective purpose, in particular to the following recipients:
Personal data is not disclosed for other purposes without an appropriate legal basis.
Subject to the applicable legal requirements, you have in particular the following rights:
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
To exercise your rights, you may contact us using the contact details provided in Section 1.
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a data protection supervisory authority.
In Austria, this is in particular:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria
Email: dsb@dsb.gv.at
Phone: +43 1 52 152-0
We reserve the right to amend this Privacy Policy if the services used, the functionality of this website or the applicable legal requirements change.