Privacy Policy

1. Controller
The controller responsible for data processing on this website is:
Robin Reithmayr
Scheffelstraße 7/9/2
1210 Vienna
Austria
Email: info@mriri.art
Phone: +43 650 6036277

2. Your Rights as a Data Subject
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You also have the right to lodge a complaint with the Austrian supervisory authority (“Datenschutzbehörde”, www.dsb.gv.at).

3. Processing of Access Data (Server Log Files)
3.1. Hoster: Our website is hosted by **IONOS SE**, Elgendorfer Str. 57, 56410 Montabaur, Germany.
3.2. Purpose: When you visit our website, IONOS automatically stores data in server log files, which your browser transmits. This data includes:
* Browser type and version
* Operating system used
* Referrer URL (the previously visited page)
* Hostname of the accessing computer
* Time of the server request
* IP address (typically anonymized by IONOS after a short period, e.g., 7 days, for security monitoring)
3.3. Legal Basis: This data is processed based on our legitimate interest (Art. 6 (1) lit. f GDPR) in ensuring the security, stability, and error-free operation of our website. We have concluded a Data Processing Agreement (DPA / Auftragsverarbeitungsvertrag) with IONOS.

4. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device by your browser. We use cookies that are **technically necessary** for the operation of our website and to provide the services you have requested. These cookies are essential, for example, to enable the functionality of the shopping cart (e.g., to remember which items you have placed in the cart) or to manage your session. The legal basis for processing data using these strictly necessary cookies is Art. 6 (1) lit. f GDPR (our legitimate interest in providing a functional website and shop) and § 165 Abs. 3 TKG 2021 (Austrian Telecommunications Act), which permits storage if it is necessary for providing the service explicitly requested by the user. These necessary cookies do not require your consent.

5. Contacting Us
If you contact us by email (e.g., for commissions or inquiries about original art), the data you provide will be stored for the purpose of processing the inquiry.
Legal Basis: Performance of (pre-)contractual measures (Art. 6 (1) lit. b GDPR).

6. Data Processing in the Online Shop (Orders)
We collect, process, and use personal data (name, address, email) only insofar as it is necessary for the establishment, content, or modification of the legal relationship (contract performance).
Legal Basis: Performance of the contract (Art. 6 (1) lit. b GDPR).

7. Data Transfer (Payment Service Providers)
To fulfill the contract, we pass on data to shipping companies and the payment service providers used.

7.1. PayPal
If you select payment via PayPal, your payment data will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
Legal Basis: Art. 6 (1) lit. b GDPR. PayPal’s privacy policy applies.

7.2. WooPay / WooPayments
We use “WooPay” (a service of WooPayments) for processing payments (e.g., credit card). This service is provided by **Automattic Inc.** (60 29th Street #343, San Francisco, CA 94110, USA) and often uses **Stripe** as the underlying processor.
When you pay via WooPay, your payment data (card details, purchase amount, email) is transmitted to Automattic and/or Stripe for processing.
Legal Basis: Art. 6 (1) lit. b GDPR.