Privacy
This page describes which personal data I process, what for, for how long, and what rights you have. The controller is Christian Renezeder; the address and e-mail address are in the imprint.
Visiting the website
When a page is requested, the server processes technically necessary access data: IP address, time, the address requested and the details your browser sends. They serve the secure operation of the site, are not combined with any other data, and are automatically overwritten after a short time (Art. 6(1)(f) GDPR).
The website uses no analytics, no advertising networks and no external services; even the typeface is loaded from this website itself. Only one cookie is set, "rz_lang": it remembers for a year whether you read the site in German or English. It is necessary for that function and needs no consent — which is why there is no cookie banner.
Enquiries
If you use the contact form, your name, e-mail address, message and — where the enquiry concerns a work — its reference number are processed in order to answer the enquiry (Art. 6(1)(b) GDPR). The enquiry is delivered to me by e-mail and held on the server only until I take it into my own records; it is then deleted there.
If you are subscribed to the newsletter, or have allowed me to keep your contact details, they stay in my records for as long as they are needed for that. Otherwise I delete your data from my records once the enquiry has been dealt with. I delete it at any time on request, unless the law requires it to be kept.
Newsletter
If you sign up for the newsletter, I process your e-mail address and — if given — your name in order to send you news of work, exhibitions and workshops (Art. 6(1)(a) GDPR, § 174 Austrian TKG 2021).
The sign-up takes effect only once you click the link in the confirmation e-mail. Nothing is stored on this website's server in the process; after confirmation I am notified and add you to my records. The newsletter contains no tracking pixels and no tracked links; the pictures of the works are loaded from this website when you open it.
You can unsubscribe at any time — through the link in every issue or with an informal e-mail. Your address is then no longer used, and I delete your other data unless it has to be kept for an invoice. I keep only a note that you unsubscribed, so that you are not added again by mistake.
Purchase, invoice, workshop
If you buy a work or take part in a workshop, I process your name, address and e-mail address in order to fulfil the contract and issue the invoice (Art. 6(1)(b) and (c) GDPR). Invoices are kept for seven years, as the law requires (§ 132 Austrian BAO).
If you are neither subscribed to the newsletter nor have allowed me to keep your contact details, I delete your data from my records once the purchase or the workshop has been completed. My catalogue of works then notes only that a work was sold and on which invoice — who acquired it is on the invoice alone.
Contact details with your consent
If you have allowed me in writing to keep your contact details in my customer records, your purchases and the works you own stay recorded under your name in my catalogue of works. You will not be contacted because of this; you receive news only if you have subscribed to the newsletter. The basis is your consent (Art. 6(1)(a) GDPR); it holds until you withdraw it.
Who else sees your data
Your data is not sold and not passed on for anyone else's purposes. So that this website and the e-mails work, service providers process it on my behalf.
Your rights
You have the right of access to your data, to rectification, erasure and restriction of processing, to data portability and to object. You may withdraw a consent at any time; processing up to then remains lawful. Write informally to the e-mail address in the imprint.
You may also lodge a complaint with the supervisory authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, Austria, dsb.gv.at.