Last updated: 3 August 2026
1. Data Controller
Blattwerk Studio
Josefstädter Straße 18
1080 Wien, Austria
Email: [email protected]
Phone: +43 1 406 2291
Blattwerk Studio is the data controller responsible for your personal data processed through this website and our business operations.
2. Legal Basis for Processing
We process personal data on the following legal bases under Article 6 of the GDPR:
- Contract performance (Art. 6(1)(b)): Processing necessary to fulfil service agreements, consultations, and installations.
- Legitimate interests (Art. 6(1)(f)): Responding to enquiries, improving our services, and maintaining business records.
- Consent (Art. 6(1)(a)): Where you have given explicit consent, such as for marketing communications or non-essential cookies.
- Legal obligation (Art. 6(1)(c)): Compliance with Austrian tax, accounting, and commercial law requirements.
3. Data We Collect
3.1 Information you provide
- Name, email address, and phone number (via contact form or email)
- Property address and access details for on-site consultations
- Payment and billing information for invoiced services
- Communications and correspondence related to your project
3.2 Information collected automatically
- IP address, browser type, and device information
- Pages visited, time spent, and referral source
- Cookie data as described in our Cookie Policy
4. How We Use Your Data
We use personal data to:
- Respond to enquiries and provide quotations
- Schedule and conduct on-site assessments and installations
- Process payments and issue invoices
- Deliver care documentation and follow-up communications
- Maintain records required by Austrian commercial and tax law
- Improve our website and services through aggregated analytics
- Send marketing communications only where you have opted in
5. Data Sharing and Processors
We do not sell personal data. We may share data with:
- Payment processors for transaction handling
- Email and hosting providers operating under data processing agreements
- Accounting and legal advisors bound by confidentiality
- Public authorities when required by law
All third-party processors are located within the European Economic Area or provide adequate safeguards under GDPR Article 46.
6. Data Retention
- Enquiry data: 24 months from last contact, unless a contract is formed
- Contract and invoice data: 7 years per Austrian tax law (Bundesabgabenordnung)
- Marketing consent records: until consent is withdrawn, plus 3 years for proof
- Website analytics: 14 months (aggregated, anonymised where possible)
7. Your Rights Under the GDPR
You have the right to:
- Access — request a copy of personal data we hold about you (Art. 15)
- Rectification — request correction of inaccurate data (Art. 16)
- Erasure — request deletion where no legal basis for retention exists (Art. 17)
- Restriction — request limited processing in certain circumstances (Art. 18)
- Portability — receive your data in a structured, machine-readable format (Art. 20)
- Objection — object to processing based on legitimate interests or for direct marketing (Art. 21)
- Withdraw consent — at any time, without affecting prior lawful processing (Art. 7(3))
To exercise any of these rights, contact us at [email protected]. We respond within 30 days.
8. Data Security
We implement appropriate technical and organisational measures including encrypted connections (TLS), access controls, and regular review of data handling practices. No method of transmission over the internet is completely secure; we cannot guarantee absolute security.
9. International Transfers
Personal data is primarily processed within Austria and the EU. If data is transferred outside the EEA, we ensure appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.
10. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.
11. Children's Data
Our services are not directed at individuals under 16. We do not knowingly collect data from children. If you believe we have collected a child's data, contact us for immediate deletion.
12. Changes to This Policy
We may update this policy to reflect legal or operational changes. Material changes will be posted on this page with an updated date. Continued use of our services after changes constitutes acceptance.
13. Supervisory Authority
If you believe your data protection rights have been violated, you may lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde):
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Wien, Austria
Website: www.dsb.gv.at
14. Contact
For privacy-related questions or to exercise your rights:
Email: [email protected]
Post: Blattwerk Studio, Josefstädter Straße 18, 1080 Wien, Austria