The following information provides a clear overview of what data is collected when you visit this website, how it is used, and your rights under the General Data Protection Regulation (GDPR).

1. Controller
Reflected Spaces
Anna Kozyr
Jösefstädter St. 60/17
1080 Vienna
Austria
Email: design@reflectedspaces.com

2. Data Processing on this Website
a) Server log files
The hosting provider automatically collects and stores information in server log files, which your browser automatically transmits. This may include:
• Browser type and version
• Operating system
• Referrer URL
• Host name of the accessing computer
• Time of server request
• IP address
This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technically error-free presentation and optimization of the website.
b) Cookies
This website uses cookies which are required for the secure and correct technical operation of the site. Cookies are small text files that are stored on your device. Essential cookies cannot be deactivated. Should additional cookies (e.g. for analytics or marketing) be used, these will only be set with your prior consent.
c) Contact form / email
If you contact us via the contact form or email, the data provided (name, email address, message) will be processed exclusively for handling your inquiry. The data will not be shared without your consent. Processing is based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in processing inquiries).
d) Google Fonts
This website may use Google Fonts for consistent presentation of text. For this purpose, your browser establishes a connection with Google’s servers, which may involve the transfer of your IP address. The use of Google Fonts is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the uniform display of the website.

3. Legal Basis for Processing
Data processing is carried out in accordance with Art. 6 GDPR, namely:
• Art. 6(1)(a) GDPR: based on your consent
• Art. 6(1)(b) GDPR: for the performance of a contract or pre-contractual measures
• Art. 6(1)(f) GDPR: based on legitimate interests such as secure and efficient website operation

4. Data Retention
Personal data will be retained only for as long as necessary to fulfill the purposes outlined herein or as required by statutory retention obligations.

5. Your Rights
You have the following rights under the GDPR:
• Right of access to your personal data
• Right to rectification or erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with the competent supervisory authority

6. Data Security
Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, alteration, disclosure, or destruction.