Privacy policy

Privacy Policy

The protection of your personal data is of particular importance to us, Davy Art Space GmbH (hereinafter referred to as “we”). We process your data exclusively on the basis of the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Telecommunications Act (TKG).

With this Privacy Policy, we inform you pursuant to Articles 13 and 14 GDPR about the nature, scope and purpose of the processing of personal data in connection with our website, our online shop, our contact forms and our newsletter.

1. Controller within the meaning of the GDPR

Davy Art Space GmbH
Lindengasse 51/2
1070 Vienna, Austria
Management Director: Mr Daniel KARL
E-mail: office@davyartspace.com

2. General Information

Personal data means any information relating to an identified or identifiable natural person (e.g. name, address, e-mail address, IP address).

The use of our website is generally possible without providing personal data. Where personal data is collected on our website, this is done – where possible – on a voluntary basis.

3. Purposes and Legal Bases of Data Processing

We process personal data for the following purposes:

  • Operation and security of the website and the online shop
  • Contract performance (orders, payments, delivery)
  • Processing of enquiries via contact forms or e-mail
  • Customer service and communication
  • Sending newsletters
  • Reach measurement and analysis (Google Analytics – only with consent)

  • Marketing and advertising (only within the limits permitted by law)

The legal bases for the processing are in particular:

  • Art. 6(1)(a) GDPR (consent)

  • Art. 6(1)(b) GDPR (performance of a contract)

  • Art. 6(1)(c) GDPR (legal obligation)

  • Art. 6(1)(f) GDPR (legitimate interest)

Our legitimate interest lies in particular in ensuring the operation of our website, improving our services and the economic management of our company.

4. Contact Forms and E-mail Contact

If you contact us via a contact form or by e-mail, the data you provide (e.g. name, e-mail address, message) will be stored for the purpose of processing your enquiry and in case of follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR.

The data will be deleted as soon as it is no longer required for the purpose of processing and no statutory retention obligations apply.

5. Online Shop and Contract Processing

Within the scope of our online shop, we process personal data necessary for processing your order (name, billing and delivery address, e-mail address, payment information).

Legal basis: Art. 6(1)(b) GDPR.

Recipients or categories of recipients of personal data include in particular IT and hosting service providers, payment service providers, shipping and logistics companies, newsletter service providers as well as tax and accounting service providers, insofar as this is necessary for contract performance.

6. Newsletter (Omnisend)

For sending our newsletter, we use the service Omnisend (Omnisend Ltd.).

If you subscribe to our newsletter, we process your e-mail address and – if provided – additional data for the purpose of sending information about our offers.

Registration takes place using the double opt-in procedure. You can unsubscribe from the newsletter at any time via the unsubscribe link or by sending an e-mail to office@davyartspace.com.

Legal basis: Art. 6(1)(a) GDPR (consent).

Omnisend processes data as a processor on the basis of a data processing agreement pursuant to Art. 28 GDPR. A transfer of data to third countries takes place only in compliance with the GDPR, in particular on the basis of standard contractual clauses.

7. Cookies

Our website uses cookies. Cookies are small text files that are stored on your end device.

7.1 Technically Necessary Cookies

These cookies are required to ensure the operation of the website and the online shop. They cannot be deactivated.

Legal basis: Art. 6(1)(f) GDPR in conjunction with Section 165(3) TKG.

7.2 Statistics and Marketing Cookies

Statistics and marketing cookies are only set if you have expressly given your consent via our cookie banner.

Legal basis: Art. 6(1)(a) GDPR.

You can revoke your consent at any time via the cookie settings on our website (footer link “Cookie Settings”).

8. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited.

Google Analytics uses cookies that enable an analysis of your use of the website. The IP address is anonymised before being stored.

Processing takes place exclusively on the basis of your explicit consent.

A transfer of data to the USA cannot be ruled out. The transfer takes place on the basis of standard contractual clauses pursuant to Art. 46 GDPR. However, it cannot be excluded that US authorities may access this data without you having an effective legal remedy against it.

9. Social Media Links (Facebook & Instagram)

Our website contains links to our profiles on Facebook and Instagram (Meta Platforms Ireland Ltd.).

When clicking on the links, you will be redirected to the respective platform. Data processing by the respective provider only takes place there.

Further information can be found in the privacy policies of the respective providers.

10. Fonts (Helvetica)

Our website uses the font Helvetica, which is hosted locally on our server. No personal data is transmitted to third parties in this context.

11. Storage Period

We store personal data only for as long as necessary for the respective purposes or as long as statutory retention obligations apply (in particular under the Austrian Commercial Code (UGB) and the Federal Fiscal Code (BAO)).

12. Data Security

We implement appropriate technical and organisational measures to protect your data against loss, manipulation or unauthorised access.

13. Automated Decision-Making

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

14. Your Rights

You have in particular the right to:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of consent given

To exercise your rights, please contact Mr Daniel KARL at office@davyartspace.com

15. Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you may – without prejudice to any other administrative or judicial remedy – lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority
Wickenburggasse 8–10
1080 Vienna
E-mail: dsb@dsb.gv.at

16. External Links

Our website contains links to external websites. We have no influence on their content or data protection practices and therefore accept no responsibility for them.

Last updated: January 2026