privacy

The use of our website is generally possible without providing personal data. Insofar as personal data (e.g., name, address, or email addresses) is collected on our site, this is always done on a voluntary basis, where possible. This data will not be passed on to third parties without your express consent.

Please note that data transmission over the Internet (e.g., when communicating by email) can have security vulnerabilities. Complete protection of data against access by third parties is not possible.

We hereby expressly object to the use of contact data published within the scope of the legal notice by third parties for sending unsolicited advertising and informational materials. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

Use of the contact/order request form

Data processed: First name, last name, email address, project description/message; Optional technical metadata (e.g., time, IP address) for fraud prevention.

Purpose: Processing your request, communication, preparation of a contractual relationship.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures). If your request is of a general nature, Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient communication).

Recipients: If applicable, email/communication service providers [name, address if applicable] as data processors.

Storage period: We generally delete requests without a subsequent contract after a maximum of [e.g., 12] months. If a contractual relationship is established, statutory retention periods apply (in particular, 6 years for business correspondence according to § 257 HGB, 10 years for tax-relevant documents according to § 147 AO).

Integration of Instagram content (Instagram plugins)

Our website may include functions and content from the Instagram service. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Further information on data protection at Instagram/Meta can be found at https://privacycenter.instagram.com/policy.

When you visit a page containing Instagram content (e.g., images, videos, post embeds, or buttons), a direct connection is established to Instagram/Meta's servers. This process transmits, among other things, your IP address, the date and time, the URL accessed, the previously visited URL (referrer), and browser and device information. Instagram/Meta may use cookies and similar technologies. If you are logged into Instagram or Facebook, Instagram/Meta can associate your visit to our pages with your user account. If you interact with the content (e.g., "Like," comment, share), this information is also transmitted to and stored by Instagram/Meta.

Instagram/Meta Legal basis:

Where consent to the setting/reading of cookies or to data processing is required for the integration of this feature, processing is based on Article 6(1)(a) GDPR in conjunction with Section 25 of the German Telecommunications and Telemedia Data Protection Act (TTDSG).

Otherwise, processing is based on our legitimate interest in presenting our online services in an appealing manner and interacting with users (Article 6(1)(f) GDPR).

Recipients and transfer to third countries:

The recipient is Meta Platforms Ireland Limited. A transfer to the USA to Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, cannot be ruled out. Such a transfer will only take place in compliance with Articles 44 et seq. GDPR (e.g., on the basis of an adequacy decision or the EU Standard Contractual Clauses).

If you do not want Instagram/Meta to be able to associate your visit to our website with your Instagram or Facebook account, please log out before visiting our site and delete any relevant cookies. Further information on the purpose and scope of data collection and processing, as well as your rights and privacy settings, can be found at https://privacycenter.instagram.com/policy and in your account settings at https://www.instagram.com/accounts/privacy_and_security/.

Cookies are text files that are automatically stored locally in the visitor's browser when a website is accessed. This website uses cookies to make the site more user-friendly and functional. For example, these files make it possible to display information on a page that is tailored to individual interests. Security-related functions that protect your privacy are also enabled through the use of cookies. The sole purpose is to adapt our services to your needs as best as possible and to make using the site as convenient as possible. With the implementation of the GDPR 2018, website operators are obligated to comply with the General Data Protection Regulation published at https://eu-datenschutz.org/ and to inform their users accordingly about the collection and processing of data. The lawfulness of the processing is based on Chapter 2, Article 6 of the GDPR.

Information on the data controller

The data controller for data processing on this website is:

Patricia Kahle

Naruvien Art&Design

Gumpendorfer Straße 142

1060 Vienna

Tel.: +49 (0) 1512 9116511

Email: shop (at) naruvien.de

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Data Retention Period

Unless a more specific retention period is stated within this Privacy Policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted, provided we have no other legally permissible grounds for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the data will be deleted once these grounds cease to apply.

General Information on the Legal Basis for Data Processing on this Website

If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR if special categories of data pursuant to Article 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing also takes place on the basis of Article 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g., via device fingerprinting), data processing additionally takes place on the basis of Section 25(1) of the German Telemedia Act (TMG). You may withdraw your consent at any time. If your data is required for the performance of a contract or for taking steps prior to entering into a contract, we process your data on the basis of Article 6(1)(b) GDPR. Furthermore, we process your data if this is necessary for compliance with a legal obligation, based on Article 6(1)(c) GDPR. Data processing may also be based on our legitimate interest pursuant to Article 6(1)(f) GDPR. The applicable legal bases in each individual case are explained in the following paragraphs of this privacy policy.

Access, Erasure, Restriction of Processing

You have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as the right to rectification, restriction of processing, or erasure of this data. For this purpose, and for any further questions regarding personal data, you can contact us at any time using the address of the website operator provided in the legal notice.