PRIVACY POLICY
1. Controller
The controller responsible for the processing of personal data on this website is:
Melanie Trügler
Trend Atelier
Bernhardstraße 5/6
3100 St. Pölten
Austria
Email: [email protected]
Phone: +43 686 0611567
2. General information on data processing
The protection of your personal data is important to us. Personal data is processed on this website exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and the Austrian Telecommunications Act 2021 (TKG 2021).
Personal data means information relating to an identified or identifiable natural person, for example a name, email address or IP address.
3. Hosting and server log files
When you visit this website, technically necessary data is processed by the web server. This may include in particular:
IP address
date and time of access
page or file accessed
browser type and browser version
operating system
referrer URL
amount of data transferred
access status or HTTP status code
The processing is carried out in order to technically provide the website, ensure its stability and security and detect and prevent abusive access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.
For this purpose, we use an external hosting provider as a technical service provider.
4. Cookies and consent management
This website uses cookies and similar technologies. Cookies are small files or pieces of information that may be stored on your device or read from it.
Strictly necessary cookies and technologies may be used without prior consent where they are required to provide website functions expressly requested by you.
For cookies and services that are not strictly necessary, your consent is obtained before they are activated. The legal basis for the associated processing of personal data is Article 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.
You may change or withdraw consent you have given at any time with effect for the future via the website’s cookie settings.
Complianz
We use Complianz | GDPR/CCPA Cookie Consent to manage cookie consent.
Complianz stores the choice you make so that the website can respect your decision and, where necessary, demonstrate whether consent was granted or refused.
The processing is carried out in order to comply with data protection obligations and to manage your consent choices.
Further details about the cookies and services used, their purposes and storage periods can be found in our Cookie Policy, which is accessible via the cookie banner and the website.
5. Contact
If you contact us by email, contact form or in another manner, we process the data you provide, in particular your name, email address and the content of your message.
The processing is carried out in order to handle your request.
Where your request concerns the preparation or performance of a contract, the processing is based on Article 6(1)(b) GDPR. In all other cases, it is based on our legitimate interest in handling enquiries pursuant to Article 6(1)(f) GDPR.
The data will be deleted as soon as it is no longer required to process the request and no statutory retention obligations apply.
6. Google reCAPTCHA
This website may use Google reCAPTCHA to protect forms against automated access, spam and abuse.
For users in the European Economic Area, the provider is generally Google Ireland Limited. When the service is used, technical information such as the IP address, device and browser information and information about website usage may be transmitted to Google.
Google reCAPTCHA may use the “_GRECAPTCHA” cookie, among other things, to carry out a risk analysis.
On this website, reCAPTCHA is generally blocked by our consent management system until you have consented to its use.
The legal basis is your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.
You may withdraw your consent at any time via the cookie settings.
7. Google Maps
Maps provided by Google Maps may be embedded on this website.
For users in the European Economic Area, the provider is generally Google Ireland Limited.
When a Google Maps map is loaded, data such as your IP address, device information and, where applicable, location information may be transmitted to Google.
Google Maps is only loaded on this website after you have given your consent via the cookie settings or the relevant placeholder.
The legal basis is your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 165(3) TKG 2021.
You may withdraw your consent at any time via the cookie settings.
8. Google Fonts
According to the current configuration, Google Fonts used on this website are stored locally on our own web server and served from there.
When merely visiting the website, no connection to Google’s servers is therefore established for the delivery of these locally stored fonts.
9. Wordfence Security
To protect our website against attacks, malware and unauthorised access, we use the security plugin Wordfence Security provided by Defiant, Inc., USA.
Wordfence may process IP addresses, access attempts and other security-related technical data. This data is used to detect attacks, block suspicious access and ensure the security of the website.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the security and integrity of our website and the data processed on it.
In connection with Wordfence, data may be processed in the United States. Where required, transfers to third countries are carried out in compliance with the requirements of Articles 44 et seq. GDPR.
10. Website management with ManageWP
For technical administration, maintenance and security tasks relating to our WordPress website, we use ManageWP, a service of the GoDaddy group.
ManageWP may process technical website information and data required for maintenance, updates, backups and administration of the website.
The processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation and technical maintenance of our website.
Where service providers process personal data on our behalf, they are used in accordance with the applicable requirements for processors.
11. Other technical WordPress components
For the structure, display and multilingual functionality of the website, we use WordPress extensions such as Elementor, Elementor Pro and WPML.
These components primarily serve the technical provision and display of the website. Where personal data is processed in this context, this is limited to the extent necessary for the relevant website function.
12. Data security
We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other unlawful processing.
Transmission of this website is encrypted using HTTPS/TLS.
13. Storage period
Personal data is generally stored only for as long as necessary for the respective processing purpose.
Longer storage only takes place where statutory retention or documentation obligations apply or where the data is required for the establishment, exercise or defence of legal claims.
14. Recipients of data
Where necessary, personal data may be transferred to technical service providers who assist us with the operation, maintenance, security or provision of individual functions of this website.
Where these service providers process personal data on our behalf, they are engaged in accordance with the applicable legal requirements.
Personal data is not disclosed to third parties for advertising purposes without an appropriate legal basis or consent.
15. Transfers of data to third countries
For certain services used, it cannot be ruled out that personal data may be processed outside the European Union or the European Economic Area.
Such transfers are only carried out under the conditions of Articles 44 et seq. GDPR, for example on the basis of an adequacy decision of the European Commission or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
16. Your rights
Subject to the applicable statutory requirements, you have in particular the following rights:
right of access to the data processed concerning you
right to rectification of inaccurate data
right to erasure of your data
right to restriction of processing
right to data portability
right to object to certain processing
right to withdraw consent with effect for the future
Consent may be withdrawn at any time. The lawfulness of processing carried out before withdrawal remains unaffected.
To exercise your rights, you may contact us at:
17. Right to lodge a complaint
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority.
In Austria, this is:
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria
18. Automated decision-making
According to the current configuration of this website, no decision-making based solely on automated processing, including profiling within the meaning of Article 22 GDPR, takes place.
19. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if the website, the services used or the legal requirements change.
Last updated: October 2026