This notice explains how personal data is processed when you visit www.schmuckwerkstaette.at or contact us.
1. Controller
Renate Bauer, Schmuckwerkstätte Renate Bauer
Pfarrplatz 2, 4020 Linz, Austria
Phone: +43 (0) 732 7777 96
Email:
2. Hosting and technical access data
This website is hosted by World4You Internet Services GmbH, Wolfgang-Pauli-Straße 2, BT3, 4020 Linz, Austria. When you visit, data processed includes your IP address, date and time, requested page or file, response status, amount of data transferred and, where provided, referrer, browser and operating system. These data enable delivery of the website and detection of errors and abuse.
The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a functioning and secure website. The hosting provider processes the necessary data as a technical service provider. Technical logs are retained according to what is necessary for operation, troubleshooting and security. Where a specific security incident occurs, relevant data may be retained until it is resolved and, where necessary, to establish, exercise or defend legal claims.
3. Contact form, email and orders
When you contact us, we process the information you provide, including your name, email address, subject and message. Contact form entries are sent to the workshop by email. An order may also require billing and delivery addresses, order details and payment information. We use these data to handle your enquiry and fulfil your order.
Article 6(1)(b) GDPR applies to enquiries about a potential contract and its performance. General enquiries are handled on the basis of our legitimate interest in communication under Article 6(1)(f) GDPR. Statutory retention duties are based on Article 6(1)(c) GDPR.
Providing your information is voluntary. Without the necessary contact or order details, we may be unable to answer your enquiry or fulfil your order. Enquiry data is retained for as long as needed to handle the matter and related follow-up questions. Contract and invoice records are retained as required by law, generally for seven years from the end of the relevant calendar year, or longer where proceedings remain pending.
4. Contact form protection
The form uses a locally hosted ALTCHA spam check. Your browser completes a computational task, which is verified through this website. Short-lived verification values are linked to the session. No external CAPTCHA service is contacted.
Additional server checks use the form timestamp and an identifier derived from your IP address with a secret key to limit automated enquiries and excessive submissions. Submission timestamps associated with this identifier are stored in the server cache; message contents are not. Older timestamps are removed from the checking window on subsequent attempts; the cache file remains until this cache is cleared. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in protection against spam and abuse.
5. Cookies and locally hosted content
The website uses a technically necessary session cookie, including for secure form processing. It contains a session identifier and is limited to the browser session. You can delete or block cookies in your browser, although this may affect the contact form. Strictly necessary cookies do not require consent under section 165(3) of the Austrian Telecommunications Act 2021. Related processing of personal data is based on Article 6(1)(f) GDPR.
The website sets no analytics or marketing cookies and uses neither Google Analytics nor the Meta Pixel. Fonts, images, videos and news displayed on the website are served from its own web server.
6. External links
Facebook posts and the map service are provided as external links. Reading the news stored on this website does not load a Facebook plugin. Following an external link takes you to that provider, which processes data under its own privacy notice, potentially outside the European Economic Area.
7. Recipients and disclosure
Data is shared only with recipients who need it for the relevant purpose: in particular hosting and email providers and, where an order requires it, payment and delivery providers, tax advisers or competent authorities. Technical service providers are engaged as processors under Article 28 GDPR where required. We do not sell your data or use contact enquiries for advertising without a separate legal basis.
8. Your rights
Subject to statutory conditions, you may request access, rectification, erasure, restriction of processing and data portability. For processing based on legitimate interests, you may object on grounds relating to your particular situation. Where processing relies on consent, you may withdraw that consent at any time with future effect. Please use the contact details above.
You may also complain to a data protection authority, in particular the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria, email:
Last updated: 5 September 2026.