This translation is provided for your convenience. The German version is legally binding.
Information on the processing of your personal data pursuant to Art 13 GDPR
1. General
Protecting your personal data is important to me. I process your data exclusively on the basis of the statutory provisions, in particular the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). Below I inform you about the processing of your data when you visit this website, contact me, and book and attend the Good Design Call and the Good Design Focus (hereinafter together “Calls”).
2. Controller
GOOD DESIGN – Avelina Stefanie Gut
Hintergärtengasse 5a, 1190 Vienna, Austria · Email: [email protected] · Phone: +43 699 17074212
3. Purposes of processing and legal bases
3.1 Website hosting (Cloudflare)
This website is provided via Cloudflare Pages (Cloudflare, Inc., USA). When you visit the website, Cloudflare processes technically necessary access data (IP address, date and time, page accessed, browser and operating system) in order to deliver the website and protect it against attacks. Legal basis: Art 6(1)(f) GDPR (legitimate interest in secure and stable website operation). I cannot identify you from this data. This access data is deleted after 6 months at the latest.
3.2 Fonts
The fonts used on this website are loaded directly from this server. No connection to third-party servers (e.g. Google) is made.
3.3 Cookies and visitor statistics
This website does not set any cookies. For anonymous visitor statistics I use Cloudflare Web Analytics (Cloudflare, Inc., USA). No cookies are set and no user profiles are created. Only aggregated data such as pages visited, country of origin, browser and device type are recorded. I cannot identify you personally from this data. Legal basis: Art 6(1)(f) GDPR (legitimate interest in improving the website).
3.4 Contact (email, phone, WhatsApp)
If you contact me by email, phone or WhatsApp, I process your name, your contact details, the content of your message and any documents you send (e.g. photos, floor plans) in order to handle your enquiry. Legal bases: Art 6(1)(b) GDPR (pre-contractual measures) and Art 6(1)(f) GDPR (legitimate interest in answering enquiries).
When you use WhatsApp (WhatsApp Ireland Ltd / Meta Platforms Ireland Ltd), metadata is also processed by the operator. Its use is voluntary; you can always reach me by email or phone as well.
3.5 Booking and payment (Calendly, Stripe)
Calls are booked via Calendly (Calendly LLC, USA). Your name, contact details, appointment details and the information you enter in the booking form (e.g. partner code) are processed. Payment is handled by Stripe (Stripe Payments Europe Ltd, Ireland, with processing by Stripe Inc., USA); your full payment details are processed directly by Stripe and are not transmitted to me. Stripe is PCI DSS certified. Legal basis: Art 6(1)(b) GDPR (performance of contract).
3.6 Conducting the calls (Zoom)
Calls take place via Zoom (Zoom Communications Inc., USA). Name, email address and technical session data are processed. Calls are not recorded. Legal basis: Art 6(1)(b) GDPR (performance of contract).
3.7 Client care
I store my clients' contact details, bookings, project documents and correspondence to carry out and support the assignment. I also use these contact details to stay in touch with you and occasionally send you information about my own similar services and seasonal greetings. Legal bases: Art 6(1)(b) and (f) GDPR and § 174(4) TKG 2021. You can object to this use at any time informally, e.g. by email to [email protected].
3.8 Links to social networks
This website only contains simple links to Instagram, Facebook, LinkedIn and WhatsApp. Data is only transferred when you click a link; the privacy policy of the respective provider then applies.
4. Recipients and transfers to third countries
Your data is only passed on to the extent necessary for the purposes stated:
- Cloudflare, Inc. (website hosting) – USA
- Calendly LLC (appointment booking) – USA
- Stripe Payments Europe Ltd / Stripe Inc. (payment processing) – Ireland/USA
- Zoom Communications Inc. (video consultation) – USA
- WhatsApp Ireland Ltd / Meta Platforms Ireland Ltd (messenger, only if you use it) – Ireland/USA
- IONOS SE (email hosting) – Germany
- Tax advisor (statutory obligation under the Austrian Federal Fiscal Code, BAO) – Austria
Transfers to the USA are based on the EU-US Data Privacy Framework where the recipient is certified, otherwise on EU standard contractual clauses. Any further disclosure only takes place where required by law.
5. Storage period
- Enquiries without a subsequent assignment: until finally processed, then deleted
- Booking and invoice data: 7 years (retention obligation under the Austrian Federal Fiscal Code, BAO)
- Client and project data: for the duration of the client relationship and beyond, until you object or request deletion, unless statutory retention obligations apply
6. Automated decisions
There is no automated decision-making and no profiling within the meaning of Art 22 GDPR.
7. Your rights
You have the right of access (Art 15), rectification (Art 16), erasure (Art 17), restriction of processing (Art 18), data portability (Art 20), objection (Art 21) and withdrawal of consent given (Art 7). To exercise these rights, simply contact [email protected].
8. Right to lodge a complaint
You have the right to lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
9. Data security
I use technical and organisational measures to protect your data against loss and unauthorised access. The connection to this website is encrypted using SSL (https).
10. Changes
I reserve the right to amend this privacy policy if the legal situation or my services change. The version published on this website applies.
As of: October 2026