Design Fabrik

Privacy Policy

The protection of your personal data is particularly important to us. We therefore process your data exclusively on the basis of the legal provisions (GDPR, TKG 2003).

1. Contact us
If you have any questions or complaints, please contact the person responsible for this website:

Sarah Schubert
Am Kaisermühlendamm 87/4/2 DG, 1220 Vienna, Austria
+43 670 509 59 93
[email protected]

2. Rights of those affected

You have the following rights:

  • Right to information (Article 15 GDPR);
  • Right to rectification (Article 16 GDPR;
  • Right to deletion (Article 17 GDPR);
  • Right to restriction (Article 18 GDPR);
  • Right to data portability (Article 20 GDPR);
  • Right to object (Article 21 GDPR);
  • Right to revoke consent (Article 7 Paragraph 3 GDPR);


If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you have the right to lodge a complaint with the responsible supervisory authority (Article 77 GDPR). In Austria this is the data protection authority.

3.Collection and storage of personal data

a) When visiting the website
When you access our website, the browser you use automatically sends information to our website server (so-called log files). The following files are collected:

  • Date and time of access,
  • Name and URL of the retrieved file,
  • Website from which access is made,
  • IP address of the requesting computer, browser used and the user's operating system and its interface as well as the name of your access provider.


The data mentioned is required by us for a smooth visit and use of the website, to maintain system security and for administrative purposes.

The legal basis for data processing is Art. 6 Paragraph 1 lit f GDPR. The data will be deleted or anonymized at the end of the respective session. If the data is stored in log files, it will be deleted after 3 days.

b) When completing an order

The data you provide is necessary to fulfill the contract or process the order. Without this data we cannot conclude the contract with you. Data will not be transferred to third parties, with the exception of the transfer of credit card details to the processing banking institution/payment service provider PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg; Luxembourg, for the purpose of debiting the purchase price and to Österreichische Post AG; Corporate headquarters Rochusplatz 1; 1030 Vienna, Austria to handle postal shipping.

The legal basis for data processing is Article 6 Paragraph b GDPR.

If a contract is concluded, all data from the contractual relationship will be stored until the tax retention period (7 years) or another longer legal period expires.

c) When using our contact form

To make contact easier, we offer you the opportunity to contact us using a contact form on our website. The mandatory information (e-mail address, name, telephone) is necessary to ensure the best possible answer to your query. Data processing for the purpose of contacting us is carried out in accordance with Article 6 Paragraph 1 1 lit a GDPR based on your voluntarily given consent.

The personal data we collect when using the contact form will be entered into a customer database, provided it does not lead to a business transaction, so that we can respond better to your concerns in the future. If there is no activity for more than a year, this data will be automatically deleted.

4. Sharing of data

Your personal data will only be transferred to third parties if:

you give your express consent in accordance with Article 6 Paragraph 1 lit a GDPR;
the disclosure is necessary in accordance with Article 6 Paragraph 1 1 lit f of the GDPR to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data;
in the event that there is a legal obligation for the transfer in accordance with Article 6 Paragraph 1 lit c GDPR; as well as
this is legally permissible and necessary for the processing of contractual relationships with you in accordance with Article 6 Paragraph 1 lit b GDPR.

5. Hosting
Hosted by Jimdo
We use the shop system of the service provider Jimdo, Jimdo GmbH, Stresemannstr. 375, 22761 Hamburg Germany (“Jimdo”), for the purpose of hosting and displaying the online shop based on processing on our behalf. All data collected on our website is processed on Jimdo’s servers. The use of Jimdo is based on Article 6 Paragraph 1 Letter f GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If appropriate consent has been requested, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR; consent can be revoked at any time.
Further information on data protection from Jimdo can be found on the following website: https://www.jimdo.com/de/info/datenschutzerklaerung/
Further processing on servers other than those mentioned above by Jimdo only takes place within the scope stated below.

6.Cookies
We use cookies to operate the website. A cookie is a small file containing either letters or numbers that is sent to the visitor's browser and this cookie is stored on the hard drive of a computer (or other internet-enabled device) when the website is visited. They are based on our legitimate interests in providing a fully functional website and the services you require (Article 6 Paragraph 1 Letter f GDPR, Section 96 Paragraph 3 TKG).

Two types of cookies are used on our website:

  • Session cookies: These are temporary cookies that remain on the user's computer until the browser is closed and are then automatically deleted.
  • Permanent cookies: To improve user-friendliness, cookies remain stored on your device and allow us to recognize your browser on your next visit.


If you would like to block or restrict cookies completely, you can make the changes in the settings of your internet browser. Cookies that have already been saved can be deleted at any time. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

7. Analytic Tools

We currently use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.de/intl/de/about/) (“Google”) on our website.
In this context, anonymized usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as
Date and time of access,
Name and URL of the retrieved file,
Website from which access is made,
The IP address of the requesting computer is transmitted to a Google server in the USA and stored there.
You can prevent the installation of cookies by setting the browser software accordingly.

Data processing is carried out on the basis of the legal provisions of Section 96 Paragraph 3 TKG and Article 6 Paragraph 1 lit a (consent) and/or f (legitimate interest) GDPR. Our concern within the meaning of the GDPR (legitimate interest) is to improve our offering and our website. The user data is stored for a period of 26 months (according to Google's current standard settings).

8. Social network plug-ins

Based on Art 6 Paragraph 1 lit f GDPR, plug-ins, links and buttons to social media websites are used for the purpose of advertising and information. By incorporating these elements, when our site is accessed, data is transmitted to the relevant social media providers, possibly also in third countries. This data is stored and processed by the providers in accordance with their terms of use.

9. Data security

Your personal data is protected through appropriate organizational and technical precautions. These precautions relate in particular to protection against unauthorized, unlawful or even accidental access, processing, loss, use and manipulation.

10. Status and update of this data protection declaration

This data protection declaration is valid as of September 21, 2023. We reserve the right to update the privacy policy from time to time to improve and/or adapt data protection.