PRIVACY NOTICE

Effective date: 01/01/2025

Cup of Cosy Art operates the website www.cupofcosy.art. This privacy notice provides details on how I handle personal data collected from website visitors, newsletter subscribers, and customers in compliance with the General Data Protection Regulation (GDPR) and Austrian data protection laws (DSG – Datenschutzgesetz).

1. Data Controller

The data controller responsible for processing your personal data is:

Cup of Cosy Art
Birgit Hämmerle

Email: studio@cupofcosy.art

If you have any questions regarding this privacy notice or how your data is processed, you may contact me at the email address provided above.

2. Data Processing on This Website

Website Visitors – Analytics & Log Data

This website uses Google Analytics, which collects anonymised data, including:

  • Browser, network, and device information

  • Web pages visited prior to accessing this website

  • Your IP address (anonymised, where applicable)

  • Interactions with the website (clicks, internal links, pages visited, searches, timestamps)

Legal basis: Processing is based on legitimate interest (Art. 6(1)(f) GDPR) in improving and securing the functionality of this website.

Hosting Provider – Squarespace
This website is hosted by Squarespace, which collects personal data when you visit this website. This log data may include:

  • IP address, browser type, browser version

  • Pages visited, time and date of visit, time spent on pages

  • Other diagnostic data for maintaining and improving Squarespace’s platform

Squarespace processes this data to operate, secure, and improve the website. The data is analysed in a manner that does not personally identify individuals.

For further details, please refer to Squarespace’s Privacy Policy.

3. Cookies

This website uses cookies and similar technologies via Squarespace. These cookies are only used if you acknowledge the cookie banner displayed when visiting the site.

Cookies may include:

  • Essential cookies (necessary for website functionality)

  • Analytics and performance cookies (to monitor site traffic and improve services)

For a detailed list of cookies used by Squarespace, please visit Squarespace’s Cookie Policy.

Legal basis: Cookie use is based on user consent (Art. 6(1)(a) GDPR). You can manage or withdraw your consent at any time via your browser settings.

4. Newsletter Subscriptions

If you sign up for my newsletter, I will collect your email address to send you updates, special offers, and information related to my art.

  • Newsletters are sent via MailerLite, an external email marketing service provider.

  • I track email open rates and click-through rates using standard industry tracking technologies to monitor and improve my newsletter content.

  • Your data will not be shared, sold, traded, or rented to third parties.

You can unsubscribe at any time by clicking the "unsubscribe" link in the footer of any email.

Legal basis: Processing is based on consent (Art. 6(1)(a) GDPR). By subscribing, you agree to the processing of your personal data by MailerLite in accordance with their Privacy Policy.

5. Contact Form

If you contact me via the website’s contact form, I will collect your name and email address solely to respond to your inquiry.

  • Your data will not be used for marketing purposes without explicit consent.

  • I do not share your data with third parties.

Legal basis: Processing is based on legitimate interest (Art. 6(1)(f) GDPR) in responding to inquiries.

6. Customers & Order Processing

When you place an order through my website, I collect and process the following data:

  • Name, billing & shipping address (to fulfil and deliver your order)

  • Email address (for order confirmation and updates)

Third-party services involved in order fulfilment:

  • Courier services (for shipping orders)

  • Gelato (print-on-demand service for art prints, cards, and calendars)

Your personal data is shared with these service providers only as necessary for order fulfilment.

All transactions are processed via PayPal and Stripe, both of which act as independent data controllers. For details on how your payment information is handled, please refer to the PayPal Privacy Notice and Stripe Privacy Policy.

I retain order records for seven years in compliance with Austrian tax and accounting regulations.

Legal basis: Processing is based on contractual necessity (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR).

If you follow a link to my Redbubble shop, any purchases made there are processed directly through Redbubble. Their own privacy policy applies, and I do not have access to customer data collected on their platform.

7. Links to External Websites

This website may contain links to external websites. I am not responsible for the privacy practices of these third-party sites. Please refer to their respective privacy policies for further information.

8. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right to access – You can request a copy of the data I hold about you.

  • Right to rectification – You can request corrections to inaccurate or incomplete data.

  • Right to erasure ("right to be forgotten") – You can request the deletion of your data, where legally permissible.

  • Right to restrict processing – You can request that your data is only used in limited circumstances.

  • Right to object – You can object to data processing based on legitimate interests.

  • Right to data portability – You can request a transfer of your data to another provider.

If you wish to exercise any of these rights, please contact me at studio@cupofcosy.art.

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):

Austrian Data Protection Authority (DSB)
Barichgasse 40-42, 1030 Vienna, Austria
Website: www.dsb.gv.at