1. Data Controller

The controller responsible for processing personal data through this website is:

BALETA Handmade
Paul Baleta
Gewerbepark-Draubogen 13
9162 Ferlach
Austria

Email: paul@baletahandmade.com
Telephone: +43 676 3443282

2. Personal Data We May Collect

Depending on how you use the website, we may collect information including:

• name

• billing and delivery address

• email address

• telephone number

• order details and purchase history

• information relating to custom or commissioned products

• payment-related transaction information

• correspondence and enquiries

• information submitted through contact forms

• withdrawal or return information

• newsletter subscription information

• technical information such as IP address, browser type, device information and website usage information

• cookie and consent preferences

We only collect personal data that is reasonably necessary for the relevant purpose.

3. Orders and Contract Performance

When you place an order, we process personal data necessary to:

• process and fulfil the order

• receive or verify payment

• communicate with you regarding the order

• arrange delivery

• manage returns, withdrawals, complaints and warranty matters

• maintain appropriate accounting and business records

The legal basis for this processing is generally the performance of a contract or steps taken at your request before entering into a contract.

Certain information may also be processed where required to comply with legal obligations, including tax, accounting and commercial record-keeping requirements.

4. Payments

Payments may be processed through independent payment service providers.

BALETA Handmade does not necessarily receive or store complete payment-card details. Payment providers process payment information in accordance with their own privacy and security arrangements.

Information necessary to identify and reconcile a payment may be available to BALETA Handmade.

The specific payment services available may vary depending on the method selected during checkout.

5. Delivery and Shipping

Where necessary to fulfil an order, personal data such as your name, delivery address, contact details and relevant shipment information may be provided to postal operators, courier companies and other delivery service providers.

Only information reasonably necessary for arranging and completing delivery is provided.

6. Contact Forms and Enquiries

If you contact BALETA Handmade by email, website form or another communication method, we process the information you provide in order to respond to your enquiry and, where relevant, take steps requested by you before entering into a contract.

Correspondence may be retained where reasonably necessary for customer service, legal, accounting or business-record purposes.

7. Withdrawal Form

If you use the online withdrawal function, the information provided is processed in order to:

• identify the relevant contract or order

• record and confirm your withdrawal

• communicate with you regarding return arrangements

• comply with applicable consumer-law obligations

The withdrawal submission and confirmation may be retained as evidence that the request was received and handled.

8. Newsletter and Marketing Communications

If you subscribe to the BALETA Handmade newsletter, we may process your name, email address, subscription information and related consent records for the purpose of sending news, product information and marketing communications.

Where consent is the legal basis for marketing communications, you may withdraw that consent at any time.

Every marketing email will provide an unsubscribe method where required.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

9. Website Platform — Wix

This website is created and hosted using services provided by Wix.com.

Wix may process technical and personal information necessary to provide website hosting, ecommerce functions, security, forms, customer records and related website services on behalf of BALETA Handmade.

As the website owner, BALETA Handmade acts as controller of customer and visitor information processed for our purposes, while Wix acts as a processor in relation to much of that data. Wix states that it uses infrastructure and subprocessors in a number of countries and provides safeguards for international data transfers where applicable. Wix Support

10. Cookies and Similar Technologies

This website uses cookies and similar technologies.

Some cookies are technically necessary for functions such as website security, navigation, ecommerce, checkout and remembering privacy preferences.

Other cookies, including certain analytics or marketing technologies, may require your consent before they are used.

Where consent is required, such cookies will only be activated after you have made an appropriate choice through the website's cookie consent mechanism.

You can change or withdraw your cookie preferences where the website provides that functionality.

Further information is available in our Cookie Policy.

Austrian guidance requires active opt-in consent for non-essential tracking or marketing cookies; pre-selected consent is not sufficient. wko.at

11. Analytics and Website Usage

BALETA Handmade may use website analytics tools to understand how visitors use the website and to improve website functionality and content.

Where analytics involve non-essential cookies or similar tracking technologies, they will only be used where the required consent has been obtained.

The exact analytics services used may depend on the current website configuration.

12. Sharing of Personal Data

Personal data may be shared where reasonably necessary with service providers involved in operating the business and fulfilling customer orders, including:

• Wix and related website-service providers

• payment processors

• postal and courier services

• email or newsletter providers

• IT and hosting providers

• accountants, tax advisers or other professional advisers

• public authorities where disclosure is legally required

Personal data is not sold to third parties.

Service providers are given access only to information reasonably necessary for the relevant service.

13. International Data Transfers

Some service providers used by BALETA Handmade may process data outside Austria or outside the European Economic Area.

Where personal data is transferred internationally, appropriate legal safeguards will be used where required by applicable data-protection law.

This may include adequacy decisions, standard contractual clauses or other recognised safeguards.

Wix, for example, states that customer data may be processed in several locations and that transfers are handled in accordance with applicable data-protection requirements. Wix Support

14. Data Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected or for the period required by applicable law.

Retention periods may therefore vary depending on the type of information.

For example:

• order and accounting records may need to be retained for statutory tax and accounting periods

• correspondence may be retained while an enquiry, order or dispute remains relevant

• newsletter information may be retained until you unsubscribe or withdraw consent, subject to retaining limited evidence of consent or withdrawal where legally necessary

• withdrawal and return records may be retained where needed to demonstrate compliance with consumer-law obligations

Data that is no longer required will be deleted or anonymised where appropriate.

15. Security

BALETA Handmade takes reasonable organisational and technical measures to protect personal data against unauthorised access, loss, alteration, misuse or disclosure.

No internet-based system can be guaranteed to be completely secure, but we seek to use appropriate services and security measures relative to the nature of the information processed.

16. Your Data Protection Rights

Subject to applicable law, you may have rights including:

• the right to obtain information about personal data processed about you

• the right to access your personal data

• the right to correct inaccurate or incomplete data

• the right to request deletion of data in certain circumstances

• the right to restrict processing in certain circumstances

• the right to object to certain processing

• the right to data portability where applicable

• the right to withdraw consent where processing is based on consent

To exercise a data-protection right, contact:

paul@baletahandmade.com

We may need to take reasonable steps to verify your identity before responding to a request.

17. Complaints

If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data-protection supervisory authority.

In Austria, this is the:

Österreichische Datenschutzbehörde
Austrian Data Protection Authority

You may also contact BALETA Handmade first so that we have an opportunity to address your concern directly.

18. Changes to This Privacy Policy

This Privacy Policy may be updated where necessary to reflect changes to the website, services, service providers or applicable law.

The current version will be published on this website together with the date of the most recent update.