Privacy Policy
Last updated: 28.01.2026
This Privacy Policy explains how personal data is collected, used, and protected when you visit or make a purchase from this website.
1. Data Controller (Art. 13 GDPR)
The data controller responsible for data processing on this website is:
Balázs Fehér
Kohlgasse 39/2.7
1050 Vienna
Austria
Email: feherpaintings@gmail.com
2. Personal Data We Collect
We may collect and process the following categories of personal data:
Contact data: name, email address, message content (via contact forms or email)
Order data: name, billing and shipping address, email address, order details
Payment confirmation data (no direct access to card or bank details)
Technical data: IP address, browser type, device information, access times
3. Legal Basis for Processing (Art. 6 GDPR)
Personal data is processed on the following legal bases:
Art. 6(1)(b) GDPR – performance of a contract
(order processing, payment, shipping of artworks)Art. 6(1)(f) GDPR – legitimate interests
(operation, security, and functionality of the website)Art. 6(1)(a) GDPR – consent
(contact forms, optional analytics, cookies where required)
Where processing is based on consent, consent may be withdrawn at any time with future effect.
4. Purpose of Processing
Personal data is processed for the following purposes:
Responding to inquiries
Processing and fulfilling orders
Shipping artworks worldwide
Communication related to commissions
Compliance with legal and accounting obligations
Ensuring technical functionality and security of the website
5. Website Platform, Cookies, and Hosting (Squarespace)
This website is hosted on Squarespace.
Squarespace uses essential cookies and similar technologies to ensure the operation, security, and performance of the website. These cookies are necessary for functions such as page navigation, form submissions, and checkout processes.
Depending on configuration, Squarespace may also use analytics and performance cookies. Such cookies are only used where legally permitted and, where required, only with user consent.
More information on Squarespace’s data processing and cookies can be found here:
https://www.squarespace.com/privacy
6. Analytics
This website may use analytics tools (such as Google Analytics) in the future to understand how visitors use the website.
If analytics tools are enabled:
Data is processed only with user consent
IP anonymization and GDPR-compliant configurations are applied where possible
Consent can be withdrawn at any time
7. Payment Processing
Payments are processed via third-party payment providers (e.g. Stripe).
Payment data is processed directly by the payment provider. The website operator does not receive or store full payment details.
Processing is subject to the privacy policies of the respective providers.
8. Data Transfers Outside the EU
Squarespace and certain payment providers may process personal data on servers located outside the European Union, in particular in the United States.
Such transfers are carried out in compliance with GDPR requirements, based on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission.
9. Data Retention
Personal data is stored only for as long as necessary to fulfill the purposes described above or as required by applicable legal retention obligations.
10. Your Rights as a Data Subject (Art. 15–22 GDPR)
You have the right to:
Access your personal data
Rectification of inaccurate data
Erasure (“right to be forgotten”)
Restriction of processing
Data portability
Object to processing based on legitimate interests
Withdraw consent at any time
To exercise your rights, please contact:
feherpaintings@gmail.com
11. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority.
In Austria, the competent authority is:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42
1030 Vienna
Austria
https://www.dsb.gv.at
12. Data Security
Appropriate technical and organizational measures are implemented to protect personal data against loss, misuse, or unauthorized access.
13. Changes to This Privacy Policy
This Privacy Policy may be updated from time to time to reflect legal or technical changes.
The version published on this website applies.