DATA PROTECTION POLICY

The Fine Print – Because Transparency Matters
  1. Controller
    The controller responsible for data processing on this website is:
    Victoria Chollenti (sole proprietor), Flachgasse 24, 1150 Vienna, Austria, email: victoria@chollenti.com

 

  1. Collection and processing of personal data
    When you submit an inquiry via the contact form, I collect the following information: first name, last name, email address, and your message. This data is processed exclusively for the purpose of handling your inquiry and, if applicable, creating a custom-made bag (made to order).

 

  1. Legal basis and purpose of data processing
    Your data is processed on the basis of Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) or Art. 6(1)(a) GDPR (consent), if you voluntarily provide additional information (e.g. color preferences). The purposes of processing are responding to your inquiry, producing your custom-made bag, and communicating with you in connection with your order.

 

  1. Storage period
    Your personal data is stored only for as long as necessary to fulfill the stated purposes or as long as statutory retention periods apply. After that, your data will be deleted or anonymized.

 

  1. Disclosure of data
    Your personal data will only be shared with third parties if this is necessary to fulfill the contract, for example with shipping service providers after an order has been placed.

 

  1. Your rights
    You have the right to access your stored personal data, to rectification of inaccurate data, to erasure (provided no statutory retention obligations apply), to restriction of processing, to data portability, and to withdraw your consent in accordance with § 7 DSG or Art. 21 GDPR. To exercise your rights, please contact me using the email address provided above.

 

  1. Data security
    Appropriate technical and organizational measures have been implemented to protect your data from unauthorized access, misuse, or loss. These measures include encrypted transmission (SSL/TLS), access restrictions, and regular security reviews.

 

  1. Changes to this privacy policy
    I reserve the right to amend this privacy policy if legal requirements or services change. The current version is always available on my website.