Your rights under the General Data Protection Regulation
Last updated: August 2026
The General Data Protection Regulation (GDPR) is a European Union regulation that governs data protection and privacy for individuals within the EU. At Handgemacht Wien, we are committed to ensuring compliance with GDPR requirements and protecting your personal data.
Handgemacht Wien acts as the data controller for personal information collected through this website. As the data controller, we determine the purposes and means of processing your personal data.
Contact details:
Handgemacht Wien
Mariahilfer Straße 45
1060 Vienna, Austria
Email: [email protected]
We process your personal data based on the following legal grounds:
Under the GDPR, you have the following rights regarding your personal data:
You have the right to request copies of your personal data that we hold. We may charge a reasonable fee for additional copies.
You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
You have the right to request that we erase your personal data under certain conditions, such as when the data is no longer necessary for its original purpose.
You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data.
You have the right to object to our processing of your personal data under certain conditions, particularly when processing is based on legitimate interests.
You have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
If we transfer your personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the European Commission.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. When personal data is no longer needed, we securely delete or anonymize it.
To exercise any of your GDPR rights, please contact us at:
Email: [email protected]
We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by up to two additional months, informing you of any extension.
If you believe that we have not handled your personal data properly or have not responded adequately to your concerns, you have the right to lodge a complaint with a supervisory authority. In Austria, this is:
Österreichische Datenschutzbehörde
Barichgasse 40-42
1030 Vienna, Austria
Website: dsb.gv.at
We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.