Privacy Policy
Last updated: September 2026
The protection of your personal data is important to me. This Privacy Policy explains what personal data is processed when you visit or use this website and for what purposes.
1. Data Controller
The controller responsible for data processing on this website is:
Kaspar Laurenz Schmidt
Innsbrucker Straße 11
6060 Hall in Tirol
Austria
Email: atelier@kaspar-laurenz.at
2. General Information on Data Processing
Personal data is any information relating to an identified or identifiable natural person, such as your name, email address, postal address, IP address, payment details or order information.
Personal data is processed on this website only where necessary to operate the website, respond to enquiries, process orders, send newsletters or where you have given your consent.
The legal bases for processing may include Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures), Article 6(1)(c) GDPR (legal obligation) and, where applicable, Article 6(1)(f) GDPR (legitimate interests).
3. Website Hosting and Wix
This website is created and operated using services provided by Wix.
When you visit the website, technical information may be processed, including your IP address, date and time of access, browser type, operating system, device information and pages visited.
This processing is necessary to provide the website securely and reliably.
Wix may process data through its international infrastructure and service providers. Further information can be found in Wix’s privacy policy.
4. Cookies and Wix Analytics
This website uses cookies and similar technologies. Technically necessary cookies may be required to ensure that the website and, in particular, functions such as the online shop operate properly.
In addition, the Wix Analytics functionality integrated into Wix is used. This may be used, for example, to statistically evaluate information about page views and the use of the website.
Where non-essential cookies or comparable technologies are used for these purposes, processing takes place only with your consent. Consent is managed through the Usercentrics consent management system used on this website.
You may change or withdraw your consent at any time with effect for the future through the website's cookie settings.
No additional marketing or tracking services such as Google Analytics or Meta Pixel are currently used. However, embedded content and related services, in particular Instagram, may be loaded after you have given the corresponding consent. Further information can be found under “Instagram and Embedded Content”.
5. Contact
If you contact me through a contact form on this website, the information you provide, in particular your email address and message, will be processed and transmitted to me via Wix.
The information will be used solely to respond to your enquiry and for related communication.
Where your enquiry relates to a contract or a possible purchase, processing is based on Article 6(1)(b) GDPR. For other enquiries, processing may be based on my legitimate interest in responding to messages under Article 6(1)(f) GDPR.
6. Newsletter
You may subscribe to receive news and information by email.
For this purpose, your email address is processed on the basis of your consent under Article 6(1)(a) GDPR.
A double opt-in procedure may be used to confirm your subscription. In this case, after subscribing you will receive an email asking you to confirm your registration. Your email address will only be used for newsletter purposes after confirmation.
You may withdraw your consent at any time with effect for the future, for example by contacting:
Following withdrawal, your email address will no longer be used for newsletter purposes unless another legal basis requires continued storage.
7. Online Shop and Orders
This website operates an online shop using Wix Stores.
When you place an order, the personal data necessary to process your purchase will be processed. This may include:
name, billing address, delivery address, email address, products ordered, order information, transaction information, payment method and shipping method.
The processing is necessary to perform the contract with you in accordance with Article 6(1)(b) GDPR.
Order and invoice data may also be retained where required by tax, accounting or other legal obligations.
8. Payment Processing
Payments in the online shop are processed using Wix Payments and PayPal.
Wix Payments currently allows payments by credit and debit card as well as Apple Pay and Google Pay.
When you choose a payment method, the information required to process the payment may be transferred to the relevant payment service providers, banks, payment networks and financial institutions.
The processing is necessary to complete the payment and therefore to perform the contract under Article 6(1)(b) GDPR and, where applicable, to comply with legal obligations.
If you select PayPal, the payment will also be processed by PayPal, which may process your personal data under its own responsibility.
I do not generally receive your complete credit card or banking details when these payment services are used.
9. Shipping
For the delivery of orders, the personal data required for shipping may be transferred to Österreichische Post AG, Rochusplatz 1, 1030 Vienna, Austria.
This may include your name, delivery address and, where necessary, additional contact information required for delivery.
The transfer is necessary to perform the purchase contract in accordance with Article 6(1)(b) GDPR.
10. Enquiries About Artworks and Limited Editions
If you enquire about an artwork or a limited edition, the contact details and information you provide may, where necessary, be shared with the gallery responsible for the relevant artwork or edition.
Such information will only be shared after you have expressly agreed to this.
The legal basis for this transfer is your consent under Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future.
After the transfer, the relevant gallery may process your personal data under its own data protection responsibility.
11. External Links and Social Media
This website may contain links to external websites and social media services, in particular Instagram.
In the case of simple external links, the mere presence of the link generally does not result in personal data being transmitted to the respective provider. Only when you follow such a link do you leave this website, and the privacy policies of the respective external provider apply.
Independently of this, content from Instagram may also be embedded on this website. The separate information under “Instagram and Embedded Content” applies to such embedded content.
12. Retention Periods
Personal data is retained only for as long as necessary for the relevant purpose or as required by law.
Information provided in contact enquiries is generally deleted once the enquiry has been fully resolved, unless legal or contractual reasons require longer retention.
Order and invoice data may be stored for the duration required by applicable statutory retention periods.
Newsletter data is generally processed until you withdraw your consent or unsubscribe.
13. Recipients of Personal Data
Personal data is transferred or made accessible to third parties only where this is necessary to provide the services offered, where there is a legal obligation to do so, where you have expressly consented, or where another legal basis under data protection law applies.
Possible recipients include, in particular, Wix and its service providers, payment service providers and payment networks, PayPal, Österreichische Post and – with your express consent – a gallery responsible for an artwork or limited edition about which you have made an enquiry.
Where you consent to embedded Instagram content, data may also be transmitted to Meta Platforms Ireland Limited and, where applicable, other companies and service providers affiliated with Meta.
14. International Data Transfers
In connection with the use of Wix, individual payment or technical service providers and – following your corresponding consent – embedded Instagram content, personal data may also be processed outside the European Union or the European Economic Area.
Where personal data is transferred to a third country, such transfer takes place on the basis of the applicable data protection requirements and appropriate safeguards.In connection with the use of Wix, individual payment or technical service providers and – following your corresponding consent – embedded Instagram content, personal data may also be processed outside the European Union or the European Economic Area.
Where personal data is transferred to a third country, such transfer takes place on the basis of the applicable data protection requirements and appropriate safeguards.
15. Your Rights
Under the General Data Protection Regulation, you may have the right to:
-
access your personal data,
-
request correction of inaccurate data,
-
request deletion of your data,
-
request restriction of processing,
-
receive certain personal data in a portable format,
-
object to certain processing activities.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
The lawfulness of processing carried out before withdrawal is not affected.
To exercise your rights, please contact:
You also have the right to lodge a complaint with a competent data protection authority. In Austria, this is in particular the Austrian Data Protection Authority.
16. Instagram and Embedded Content
Content from the social network Instagram is embedded on this website. Instagram is provided in the European Union by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
When embedded Instagram content is loaded, a connection to Meta servers may be established. In this context, your IP address, browser and device information and information about your visit to this website may in particular be processed. If you are logged into Instagram, Meta may in certain circumstances associate this information with your Instagram account.
Where consent is required, embedded Instagram content is loaded only after you have given your consent through the Usercentrics consent management system used on this website. In this case, the legal basis for processing is your consent pursuant to Art. 6(1)(a) GDPR.
You may change or withdraw your consent at any time with effect for the future through the website's cookie settings.
In connection with Instagram, personal data may also be processed outside the European Union or the European Economic Area. Further information about the processing of personal data by Instagram and Meta can be found in Meta's privacy information.
17. Changes to this Privacy Policy
This Privacy Policy may be updated if the website, the services used or the legal requirements change.
The version published on this website at the relevant time applies.