Last updated: 24 September 2026
This Privacy & Cookie Policy explains how AQSA ATELIER collects, uses and protects personal data when you visit our website, create an account or place an order.
1. Data Controller
The controller responsible for the processing of personal data is:
AQSA ATELIER
Email: aqsaatelierco@gmail.com
Temporary legal notice/address reference: https://aqsaatelierco.etsy.com
Website: https://www.aqsaatelier.com
2. Personal Data We Process
Depending on how you use our website, we may process:
- Your name
- Billing and delivery addresses
- Email address and telephone number, if provided
- Order, delivery, return and refund information
- Payment status and transaction references
- Customer-account information
- Messages and customer-service correspondence
- IP address, browser, device and security information
- Cookie preferences and consent records
Complete payment-card or bank-account details are handled by the payment provider selected during checkout. We do not normally receive or store complete card details.
3. Purposes and Legal Bases
We process personal data for the following purposes:
Orders and customer service
We use your information to process payments, fulfil and deliver orders, handle returns and refunds, and respond to enquiries.
Legal basis: Article 6(1)(b) GDPR — performance of a contract or steps taken before entering into a contract.
Legal obligations
We retain certain order, invoice and transaction information to comply with tax, accounting and commercial obligations.
Legal basis: Article 6(1)(c) GDPR — compliance with a legal obligation.
Security and fraud prevention
We may process technical information to secure our website, prevent misuse or fraud and establish or defend legal claims.
Legal basis: Article 6(1)(f) GDPR — our legitimate interests in operating a secure and reliable online shop.
Optional analytics and marketing
Optional analytics, advertising cookies or newsletters are used only after you have provided consent.
Legal basis: Article 6(1)(a) GDPR — consent. You may withdraw your consent at any time.
4. Recipients and Service Providers
Where necessary, personal data may be shared with:
- Our website and hosting provider
- WooCommerce and associated technical service providers
- The payment provider selected at checkout
- Shipping and delivery providers
- Accounting and tax-service providers
- Email, customer-service and IT providers
- Public authorities where disclosure is legally required
These recipients receive only the information necessary to provide their respective services.
Some providers may process information outside the European Economic Area. Where applicable, such transfers are protected by an adequacy decision, Standard Contractual Clauses or another safeguard recognised under the GDPR.
5. Data Retention
We retain personal data only for as long as necessary:
- Order, invoice and accounting records are generally retained for seven years in accordance with Austrian legal requirements.
- Customer-account information is retained until the account is deleted or is no longer required, subject to statutory retention obligations.
- Customer-service correspondence is retained until the matter is resolved and, where necessary, for the applicable legal limitation period.
- Newsletter information is retained until consent is withdrawn.
- Technical and security information is retained only for as long as necessary to operate and protect the website.
6. Cookies
Cookies are small files stored on your device when you visit a website.
Strictly necessary cookies
Our shop uses necessary cookies for functions including:
- Shopping-cart contents
- Checkout and order processing
- Customer-account login
- Website security
- Session management
- Storage of cookie preferences
These cookies are required to provide the website and do not require consent where they are strictly necessary.
Optional cookies
We may use optional cookies for:
- Website analytics
- Performance measurement
- Personalised content
- Advertising or social-media functions
Optional cookies are activated only after you provide consent through the cookie banner. Refusing optional cookies does not prevent you from using the essential functions of the shop.
Managing your preferences
You can accept, reject or withdraw consent for optional cookies through the cookie settings displayed on our website. You may also delete cookies through your browser settings.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Disabling necessary cookies may prevent the shopping cart or checkout from working correctly.
7. Your Rights
Subject to the requirements of the GDPR, you may have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict certain processing
- Receive certain data in a portable format
- Object to processing based on legitimate interests
- Withdraw consent at any time
To exercise these rights, contact:
You also have the right to lodge a complaint with:
Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna, Austria
Email: dsb@dsb.gv.at
Website: www.dsb.gv.at
8. Required Information
Information marked as required during checkout is necessary to process and deliver your order. Without this information, we may be unable to conclude or fulfil the purchase contract.
9. Automated Decision-Making
We do not use automated decision-making that produces legal effects or similarly significantly affects customers.
10. Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. Nevertheless, no internet transmission can be guaranteed to be completely secure.
11. Changes to This Policy
We may update this Privacy & Cookie Policy when our services, plugins, service providers or legal obligations change. The current version and its revision date will be published on this page.