Privacy Policy

Introduction and Controller Contact Details
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Mel Weisweiler, Atelier Mel Weisweiler, Höhenleitweg 39, A-6353 Going am Wilden Kaiser, Austria, Tel.: +43 5358 44777, e-mail: info@melweisweiler.com. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Data collection when visiting our website
2.1 When you use our website purely for information purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the moment of access
Amount of data sent in bytes
Source/referrer from which you reached the page
Browser used
Operating system used
IP address used (where applicable: in anonymized form)
Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed to third parties or used for other purposes. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser’s address bar.

Hosting & Content Delivery Network
We use a provider for hosting our website and displaying page content who provides services itself or through selected sub-contractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
Cookies
To make visiting our website attractive and to enable certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after you close the browser (so-called “session cookies”), while others remain longer on your device and allow site settings to be stored (so-called “persistent cookies”). In the latter case, you can find the storage duration in your web browser’s cookie settings overview.
If personal data is also processed by individual cookies we use, the processing takes place pursuant to Art. 6(1)(b) GDPR either for the performance of a contract, pursuant to Art. 6(1)(a) GDPR if consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
You can set your browser to inform you about the setting of cookies and decide individually whether to accept them, or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
Contacting us
When you contact us (e.g. via contact form or e-mail), personal data is processed solely for the purpose of handling and responding to your inquiry and only to the extent necessary for this.
The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
Data processing for order handling
6.1 Insofar as necessary for contract execution for delivery and payment purposes, the personal data we collect will be forwarded to the commissioned transport company and the commissioned credit institution pursuant to Art. 6(1)(b) GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provided when ordering in order to personally inform you within the scope of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact data will be used strictly for the purpose of messages about updates we owe and will be processed by us only to the extent necessary for the respective information.
To process your order, we also cooperate with the following service providers who support us wholly or partly in the execution of concluded contracts. Certain personal data is transmitted to these service providers as detailed below.

6.2 Disclosure of personal data to shipping service providers

GLS
We use the following provider as a transport service provider: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1–7, 36286 Neuenstein, Germany
We will forward your e-mail address and/or telephone number to the provider prior to the delivery of the goods for the purpose of coordinating a delivery date or providing a delivery notification pursuant to Art. 6(1)(a) GDPR, provided you have expressly consented to this during the ordering process. Otherwise, for the purpose of delivery pursuant to Art. 6(1)(b) GDPR, we only provide the recipient’s name and the delivery address to the provider. The data will only be disclosed insofar as this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider and the delivery notification are not possible.
Consent can be revoked at any time with effect for the future by contacting the controller named above or by contacting the provider.

6.3 Use of payment service providers

PayPal
One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method from the provider for which you pay in advance, the payment data you provide during the order process (including name, address, bank and card information, currency and transaction number) and information about the content of your order will be transmitted to the provider pursuant to Art. 6(1)(b) GDPR. Your data is transmitted exclusively for the purpose of processing payment with the provider and only to the extent necessary for this.
If you select a payment method for which we pay in advance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, if applicable data for an alternative means of payment).
To protect our legitimate interest in assessing your ability to pay in such cases, we will forward this data to the provider for the purpose of a credit check pursuant to Art. 6(1)(f) GDPR. The provider checks, based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experience), whether the payment option you have selected can be granted with regard to the risk of payment and/or default of claims.
The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is included in the calculation of score values among other factors, but not exclusively.
You can object to this processing of your data at any time by sending us a message or by contacting the provider. However, the provider may still be entitled to process your personal data insofar as this is necessary for contractual payment processing.

Site functionalities
Instagram plugins
Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially disabled and integrated into the page using the so-called “2-click” or “Shariff” solution.
This integration ensures that when you access a page of our website containing such plugins, no connection is established with the provider’s servers.
Only when you activate the plugins and thereby give your consent to data transmission pursuant to Art. 6(1)(a) GDPR does your browser establish a direct connection to the provider’s servers. In doing so, regardless of a login to an existing user profile, information about your device (including your IP address), your browser, and your page history is transmitted to the provider to a certain extent and may be further processed there.
If you are logged into an existing user profile on the provider’s social network, information about interactions via the plugins will also be published there and shown to your contacts. You can revoke your consent at any time by deactivating the activated plugin again by clicking it. Revocation does not affect data that has already been transmitted to the provider.
Data may also be transferred to: Meta Platforms Inc., USA
We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
For transfers of data to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the European level of data protection.
Tools and miscellaneous
Cookie consent tool
This website uses a so-called “cookie consent tool” to obtain effective user consents for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users when the page is accessed in the form of an interactive user interface, on which consents for certain cookies and/or cookie-based applications can be granted by ticking boxes. By using the tool, all services/cookies that require consent are only loaded if the respective user has granted the corresponding consents by ticking. This ensures that such cookies are set on the respective user’s device only in the event of consent.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, personal data (such as IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in lawful, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our online presence.
Another legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are legally obliged to make the use of non-essential cookies dependent on the respective user’s consent.
Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.
Rights of the data subject
9.1 Under applicable data protection law, you have the following rights vis-à-vis the controller regarding the processing of your personal data (rights of access and intervention). The respective legal basis for exercising each right is referenced:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

9.2 Right to object
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

Duration of storage of personal data
The duration of the storage of personal data depends on the respective legal basis, the processing purpose and—where applicable—also on statutory retention periods (e.g. commercial and tax law retention periods).
In the case of processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you revoke your consent.
Where statutory retention periods exist for data that is processed based on Art. 6(1)(b) GDPR within the scope of contractual or quasi-contractual obligations, such data will be routinely deleted after the retention periods expire, provided that it is no longer required for the fulfillment of the contract or initiation of a contract and/or there is no legitimate interest on our part in the continued storage.
In the case of processing personal data based on Art. 6(1)(f) GDPR, such data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
In the case of processing personal data for the purpose of direct marketing based on Art. 6(1)(f) GDPR, such data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.
Unless otherwise stated in the other information in this policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.