Last updated: October 2026

1. Data controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

interior-s

Mag. Stephanie Wintersteller-Vogel, MSc.

Kaiserfeldgasse 19, 8010 Graz

Email: office@interior-s.at

Telephone: +43 (0) 664 266 55 39

2. General information on data processing

Protecting your personal data is important to us. We process personal data only in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and, where applicable, the Austrian Telecommunications Act 2021 (TKG 2021).

Personal data means information relating to an identified or identifiable natural person. This may include, in particular, your name, contact details, IP address and information you provide to us in connection with an enquiry or business relationship.

3. Hosting and Squarespace

This website is provided through Squarespace. The provider is Squarespace, Inc., 225 Varick Street, 12th Floor, New York, NY 10014, USA. According to the provider’s information, Squarespace Ireland Limited, Ireland, is the contracting party for businesses whose principal place of business is outside the USA. Other companies within the Squarespace group, particularly in the USA, may be involved in providing the services.

When you visit this website, technically necessary data may be processed, including, in particular, information about your browser, network and device, your IP address, the pages accessed, and the date and time of access. This processing is necessary to provide the website, ensure its security and stability, and detect errors.

To the extent that processing is necessary to provide a secure and functional website, it is based on our legitimate interest pursuant to Article 6(1)(f) GDPR.

In connection with Squarespace, personal data may be processed outside the European Economic Area, particularly in the USA. Squarespace states that it provides appropriate data protection mechanisms for international data transfers.

Privacy information: https://www.squarespace.com/privacy

Provider information: https://www.squarespace.com/imprint

4. Cookies and similar technologies

Our website uses cookies and similar technologies. Cookies are small files or pieces of information that can be stored on or accessed from your device.

Technically necessary cookies are used where required to provide a secure and functional website. Where required by law, we obtain your consent through our cookie banner before using cookies and similar technologies that are not technically necessary.

The storage of information on your device and access to that information are governed by Section 165(3) TKG 2021. An exception to the consent requirement applies, in particular, to technologies that are strictly necessary to transmit a communication or provide a service you have expressly requested.

In particular, with your consent, Squarespace analytics and performance cookies may be used to obtain information about the use of our website and visitor traffic. The legal basis for any subsequent processing of personal data is your consent pursuant to Article 6(1)(a) GDPR, where such consent is required.

You may withdraw your consent at any time with effect for the future or change your preferences. To do so, use the “Cookie Settings” link in the footer of our website.

5. Squarespace Analytics

We may use Squarespace Analytics to understand how our website is used and improve our services.

The following information, in particular, may be processed:

·       browser, network and device information;

·       IP address;

·       the website previously visited;

·       pages visited and internal links;

·       clicks and scrolling behaviour;

·       searches;

·       times of access and interactions.

Where this involves cookies or similar technologies that are not necessary, processing takes place only after you have given your consent. In this case, the legal basis is Article 6(1)(a) GDPR.

6. Contacting us and the contact form

If you contact us using the contact form, by email, by telephone or by other means, we process the personal data you provide, in particular your name, contact details and the information supplied as part of your enquiry.

The data is processed to handle and respond to your enquiry.

If you contact us in connection with entering into or performing a contract, processing is based on Article 6(1)(b) GDPR. In other cases, processing may be based on our legitimate interest in handling business enquiries pursuant to Article 6(1)(f) GDPR.

As a general rule, the data is retained only for as long as necessary to handle the enquiry and comply with statutory retention or documentation requirements.

7. Client and project data

In connection with an enquiry, consultation or engagement, we may process the following data in particular:

·       name and contact details;

·       billing address and, where applicable, project address;

·       communications and contractual data;

·       project information;

·       floor plans, room measurements and plans;

·       photographs and other information about the spaces to be designed;

·       billing and payment information.

Processing is carried out, in particular, to handle enquiries, prepare quotations, provide consultation and planning services, manage projects, communicate and issue invoices.

The legal basis is, in particular, Article 6(1)(b) GDPR. Where statutory retention or documentation requirements apply, processing is also based on Article 6(1)(c) GDPR.

8. Project documents and images of spaces

To provide our interior design services, we may process floor plans, measurements, photographs and videos of spaces, information about existing furniture, and project preferences. The legal basis is Article 6(1)(b) GDPR. Where possible, please do not provide unnecessary personal information or images in which people not involved in the project are identifiable.

9. Online consultations

For online consultations, we process appointment and contact details, the content of communications, and the project documents provided for the consultation. The legal basis is Article 6(1)(b) GDPR. If external video conferencing services are used, their providers may process additional technical connection data.

10. Email communications

We use Google Workspace for our business email communications. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; other companies within the Google group may also be involved in providing the services.

If you contact us by email, the data required for the communication is processed through this service.

Depending on the content of the communication, processing is carried out, in particular, to take steps prior to entering into a contract or to perform a contract pursuant to Article 6(1)(b) GDPR, or on the basis of our legitimate interest in efficient business communications pursuant to Article 6(1)(f) GDPR.

Further information: https://policies.google.com/privacy

Information on processing on our behalf: https://workspace.google.com/terms/dpa_terms.html

11. Invoicing and payment processing

We process contractual, billing and payment data for invoicing, bookkeeping and compliance with tax obligations. The legal bases are Article 6(1)(b) and (c) GDPR. Where necessary, relevant data is provided to banks, payment service providers, bookkeeping service providers or tax advisers.

12. Recipients of personal data

Personal data is disclosed only where necessary for the purposes stated, where a legal obligation exists, or where there is an appropriate legal basis.

Recipients may include, in particular, hosting, IT and communications service providers, banks, payment service providers, bookkeeping service providers and tax advisers, as well as specialist contractors commissioned or requested by the client in connection with a project. Data is transferred to specialist contractors only to the extent necessary to provide the agreed services or implement requested measures, or where another lawful basis exists.

Where service providers process personal data on our behalf, the requirements of Article 28 GDPR are observed. Other recipients may process data as independent controllers.

13. Transfers of data to third countries

When certain service providers are used, personal data may be processed outside the European Union or the European Economic Area.

Such transfers take place only in compliance with the requirements of Article 44 et seq. GDPR, in particular on the basis of an adequacy decision by the European Commission or appropriate safeguards such as standard contractual clauses, where required.

Information about the safeguards applicable to the relevant service and, where applicable, a copy of the relevant safeguards are available on request at office@interior-s.at.

14. Retention periods

As a general rule, we retain personal data only for as long as necessary for the relevant processing purpose.

Data may also be retained where statutory retention and documentation requirements apply or where the data is necessary for the establishment, exercise or defence of legal claims.

Once the relevant purpose no longer applies and the applicable retention periods have expired, the data is deleted or anonymised, unless another legal basis for continued retention exists.

15. Data security

We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss and unlawful alteration.

16. Your rights

Subject to the applicable legal requirements, you have, in particular, the right to:

·       access your personal data;

·       rectification of inaccurate or incomplete data;

·       erasure of your data;

·       restriction of processing;

·       data portability;

·       object to certain processing; and

·       withdraw consent at any time with effect for the future.

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, you may contact us at office@interior-s.at.

17. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes data protection law.

In Austria: Austrian Data Protection Authority (Österreichische Datenschutzbehörde)

Barichgasse 40–42, 1030 Vienna

Email: dsb@dsb.gv.at

Website: https://www.dsb.gv.at

18. Updates to this privacy policy

We reserve the right to amend this privacy policy if our data processing activities, the services we use or the legal framework change.

The current version published on this website applies.