Privacy Policy

Last Updated: March 2026

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.

How do we collect your data?

Your data is collected when you provide it to us. This may include data that you enter into a contact form, for example.

Other data is collected automatically or with your consent when you visit the website through our IT systems. This primarily includes technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the website functions properly. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances.

2. Data Controller

The data controller for data processing on this website is:

Aurea Nail Studio
Bianca Judith Auer
Fabriksgasse 1/6
8280 Fürstenfeld
Austria

Email: aureanailstudio@gmail.com

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

3. Hosting

This website is hosted by:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

When you visit our website, the host automatically collects information in so-called server log files, which your browser automatically transmits. These include:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with other data sources. The processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in the technical provision and security of the website).

We have concluded a Data Processing Agreement (DPA) with Hetzner in accordance with Art. 28 GDPR. The data is stored on servers in Germany (EU).

For more information, see Hetzner's privacy policy: https://www.hetzner.com/legal/privacy-policy

4. Contact Form

When you submit an inquiry via our contact form, your information including the contact details you provide will be stored for processing your request and for follow-up questions.

We use the service Basin (UseBasin Inc.) to process contact form data. Basin stores your data on servers in the EU and forwards it to us. Data processing is based on your consent (Art. 6 para. 1 lit. a GDPR) if you have given your consent via our contact form.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Basin stores data for 30 days by default.

For more information, see Basin's privacy policy: https://usebasin.com/privacy

5. Google Fonts

This website uses Google Fonts for consistent font display. When you access a page, your browser loads the required fonts. Your IP address is transmitted to Google servers.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in consistent display of our website)

For more information about Google Fonts, see: https://developers.google.com/fonts/faq

Google's privacy policy: https://policies.google.com/privacy

6. Web Analytics with Plausible Analytics

This website uses Plausible Analytics, a privacy-friendly web analytics service. Plausible Analytics helps us understand how visitors use our website without collecting personal data.

What does Plausible collect?

Plausible collects only aggregated, anonymized data:

  • Page views
  • Referring websites (referrers)
  • Device type (desktop, tablet, mobile)
  • Approximate location (country only)
  • Browser and operating system

What does Plausible NOT collect?

  • No IP addresses are stored
  • No cookies are set
  • No personally identifiable information
  • No cross-site tracking
  • No data sharing with third parties

Provider: Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia (EU)
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in analyzing website usage)
Data processing: All data is stored and processed on EU servers.

Plausible Analytics is GDPR-compliant and does not require cookie banners or consent, as no personal data is processed.

For more information, see Plausible's privacy policy: https://plausible.io/privacy

7. Your Rights

You have the following rights regarding your personal data:

Right to Access

You have the right to request information about your personal data processed by us (Art. 15 GDPR).

Right to Rectification

You have the right to request the correction of inaccurate or the completion of your personal data stored by us (Art. 16 GDPR).

Right to Erasure

You have the right to request the deletion of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims (Art. 17 GDPR).

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data (Art. 18 GDPR).

Right to Data Portability

You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit this data to another controller (Art. 20 GDPR).

Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data (Art. 21 GDPR).

Right to Withdraw Consent

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of data processing carried out before the withdrawal remains unaffected by the withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

Competent supervisory authority in Austria:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at/

8. Data Retention Period

Unless a more specific retention period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data.

9. Changes to This Privacy Policy

We reserve the right to update this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. Your next visit will be subject to the new privacy policy.

Last updated: March 2026