Privacy Policy
Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Aurel Bernaschek
Rögergasse 12/16
1090 Wien, Austria
Email: info@invibrations.art
General Information on Data Processing
We process personal data of our users only to the extent necessary to provide a functioning website along with our content and services. Processing of our users’ personal data generally takes place only with the user’s consent, unless another legal basis applies (e.g. legitimate interest, performance of a contract, or a legal obligation).
Cookies
Like many other websites, we use “cookies.” Cookies are small text files stored on your device that transmit certain information to us (e.g. IP address, browser used, operating system, time spent on the site).
Strictly necessary cookies
These cookies are required for the operation of the website (e.g. to store language settings or shopping cart contents) and are set on the basis of Art. 6(1)(f) GDPR (legitimate interest). No consent is required for these cookies.
Non-essential cookies (e.g. tracking, marketing)
For all cookies that are not strictly necessary, we obtain your explicit consent in accordance with Art. 6(1)(a) GDPR via our cookie consent tool before such cookies are set. On your first visit to our website, you will see a consent banner where you can choose which categories of cookies you wish to allow. You may withdraw your consent at any time with effect for the future, e.g. via the relevant settings in the cookie banner or through your browser settings.
You can generally use our website without cookies as well. Please note that if cookies are disabled, certain features of our website may not function properly.
Provision of Paid Services
For the provision of paid services, we collect additional data, such as payment information, on the basis of Art. 6(1)(b) GDPR (performance of a contract).
SSL Encryption
To protect your data during transmission, we use state-of-the-art encryption methods (e.g. SSL/TLS) via HTTPS.
Newsletter
When you subscribe to our newsletter, the data you provide is used exclusively for sending the newsletter. Subscribers may also be informed about matters relevant to the service or to their registration (e.g. changes to the newsletter offering or technical updates).
Double opt-in procedure
To register effectively, we require a valid email address. To verify that a subscription is actually made by the owner of the email address provided, we use the “double opt-in” procedure: the subscription request is logged, a confirmation email is sent, and the subscription is only activated once you click the confirmation link contained in that email. We log the time of subscription, the time of confirmation, and your IP address. This logging serves exclusively as proof of your valid consent and is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Legal basis
Sending the newsletter and the associated data processing are based on your explicit consent pursuant to Art. 6(1)(a) GDPR.
Tool used
We use the WordPress plugin MailPoet to send our newsletter. The newsletter is sent via our own server at our hosting provider; your data is not transferred to any external email service provider outside this infrastructure.
Performance measurement (tracking)
The newsletters we send contain a so-called web beacon or tracking pixel as well as tracked links. When you open the email or click on a link, a connection is established to our servers, allowing us to determine whether and when a message was opened and which links were clicked. This data is used exclusively to optimize our newsletter and to tailor content to the interests of our readers. The legal basis for this is your consent pursuant to Art. 6(1)(a) GDPR, given when you subscribe to the newsletter. It is not technically possible to disable this tracking separately; if you do not wish this measurement to take place, you will need to unsubscribe from the newsletter.
Storage period
Your data is stored for the duration of your newsletter subscription and deleted after you unsubscribe, unless statutory retention obligations require otherwise. To document consent once given, subscription data (email address, time of subscription/confirmation, IP address) may be retained for a short transitional period after unsubscribing.
Withdrawal
You can withdraw your consent to the storage of your data and to receiving the newsletter at any time, with effect for the future. Every newsletter contains a corresponding unsubscribe link. Alternatively, you may notify us of your withdrawal at any time using the contact details provided at the end of this privacy policy.
Contact Form
If you contact us by email or via a contact form, the information you provide will be stored for the purpose of processing your request and for any follow-up questions. This processing is based on Art. 6(1)(f) GDPR (legitimate interest in handling your inquiry) or Art. 6(1)(b) GDPR if your inquiry relates to the conclusion of a contract.
Deletion or Restriction of Data
We adhere to the principles of data minimization and data avoidance. We therefore store personal data only for as long as necessary to achieve the purposes stated here or as required by law. Once the purpose has been fulfilled or applicable statutory retention periods have expired, the relevant data is routinely restricted or deleted.
Use of Font Libraries (Google Web Fonts)
This website uses so-called web fonts provided by Google to ensure a consistent display of typefaces. When you access a page, your browser may load the required web fonts directly from Google’s servers in order to cache them in your browser. This may establish a connection to Google’s servers in the USA, during which your IP address is transmitted to Google. Google is currently certified under the EU-US Data Privacy Framework; insofar as such certification does not apply or data is transferred to the USA on another basis, this takes place on the basis of Standard Contractual Clauses pursuant to Art. 46 GDPR. The legal basis is our legitimate interest in a consistent presentation of our website’s typography pursuant to Art. 6(1)(f) GDPR.
Further information on Google Web Fonts is available at: https://developers.google.com/fonts/faq
Google’s privacy policy can be found here: https://policies.google.com/privacy
Use of Google Maps
This website uses the Google Maps API to display geographic information. When Google Maps is used, Google collects, processes, and uses data relating to visitors’ use of the map functions; this may involve a transfer of data to Google’s servers in the USA. Google Maps is only loaded after you have given prior consent via our cookie consent tool; the legal basis is therefore Art. 6(1)(a) GDPR. Further information on Google’s data processing can be found in Google’s privacy policy: https://policies.google.com/privacy
Embedded YouTube Videos
We embed YouTube videos on some of our pages. The provider of the relevant plugin is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. A connection to YouTube’s servers is only established after you have given your consent via our cookie consent tool. Once a connection is established, YouTube is informed which of our pages you have visited. If you are logged into your YouTube account at the same time, YouTube can associate your browsing behavior directly with your personal account. You can prevent this by logging out of your YouTube account before visiting our site. The legal basis for embedding these videos is your consent pursuant to Art. 6(1)(a) GDPR.
Further information on data protection at YouTube is available here: https://policies.google.com/privacy
Social Media Buttons
Our website uses “social media buttons.” For data protection reasons, we use the “Shariff” solution, which embeds these buttons merely as linked graphics. Only once you actively click on such a button is a connection established to the respective provider’s server and data transmitted. Without your click, no exchange of data with the social media providers takes place.
Your Rights
Subject to applicable legal requirements, you have the right at any time to:
- Access the personal data we hold about you (Art. 15 GDPR)
- Rectification of inaccurate personal data (Art. 16 GDPR)
- Erasure of your data stored with us (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to the processing of your data (Art. 21 GDPR)
- Withdraw any consent given, with effect for the future (Art. 7(3) GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The supervisory authority responsible for us is the Austrian Data Protection Authority (Datenschutzbehörde, DSB), Barichgasse 40-42, 1030 Vienna, Austria, www.dsb.gv.at.
If you have any questions about your rights or this privacy policy, please feel free to contact us at any time (see contact details above).
Changes to This Privacy Policy
We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services. The version in effect at the time of your next visit will apply.
Questions
If you have any questions about this privacy policy, please contact us by email at info@invibrations.art.
Last updated: June 2026