1. Introduction

The protection of your personal data is very important to us.
This Privacy Policy explains how Casa Aurelia collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

Casa Aurelia
Sole Proprietorship
Owner: Aleksandar Roguljic
Business Address: Troststraße 68–70/8/9, 1100 Vienna, Austria
Email: roguljic@casa-aurelia.store

3. Personal Data We Collect

We may collect and process the following personal data:

• Name and surname

• Billing and shipping address

• Email address

• Payment information (processed by third-party providers)

• Order details

• IP address and technical usage data (website access)

4. Purpose of Data Processing

Your personal data is processed for the following purposes:

• Processing and fulfilling orders

• Payment processing

• Shipping and delivery of products

• Customer support and communication

• Compliance with legal obligations

• Improving website functionality and security

5. Legal Basis for Processing

Personal data is processed based on:

• Contractual necessity (Art. 6(1)(b) GDPR)

• Legal obligations (Art. 6(1)(c) GDPR)

• Legitimate interests (Art. 6(1)(f) GDPR), such as website security and fraud prevention

6. Payment Providers

Payments are processed via third-party payment providers:

• PayPal

• Stripe

These providers process payment data independently and are responsible for their own data protection practices.
Only the data necessary for payment processing is transmitted.

7. Print-on-Demand and Shipping Partners

To fulfill your order, your personal data (name, address, order details) is shared with our print-on-demand production and shipping partners, solely for the purpose of producing and delivering your order.

8. Hosting

This website is hosted by Hostinger.
Hostinger processes technical and usage data (such as IP addresses and server logs) to ensure secure and reliable website operation.

9. Cookies

This website uses cookies that are necessary for the operation of the online shop.
Cookies help ensure proper functionality, security, and a smooth user experience.

If additional analytics or marketing cookies are used, you will be informed and asked for consent where required by law.

10. Data Retention

Personal data is retained only for as long as necessary to fulfill the purposes stated in this Privacy Policy or to comply with legal retention obligations.

11. Data Transfers Outside the EU

Some service providers (e.g. payment processors) may process data outside the European Union.
In such cases, appropriate safeguards such as EU Standard Contractual Clauses are applied.

12. Your Rights

You have the right to:

• Access your personal data

• Rectification of inaccurate data

• Erasure of your data (“right to be forgotten”)

• Restriction of processing

• Data portability

• Object to data processing

To exercise your rights, please contact us using the details provided above.

13. Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority.

For Austria:
Austrian Data Protection Authority (Datenschutzbehörde)

14. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or misuse.

15. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect legal or operational changes.
The current version is always available on this website.