Note: The items marked […] (legal form, company register number, VAT ID etc.) still need to be completed and the texts legally reviewed before publication.
1. Controller
ArtWave
Jennifer Davison & Bea Robein
Mohsgasse 3/15
1030 Wien, Austria
E-Mail: artwavewellness@gmail.com
2. Principles
We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). We only collect the data required for the respective purpose and store it only as long as necessary for that purpose or due to legal obligations.
3. What data we process and why
3.1 Registration, workshop bookings and enquiries
When you pre-register for the ArtWave app, book a workshop or send an enquiry, we process the data you provide (name, email address, organisation, phone number, device type, message) to handle your registration, booking or enquiry. The legal basis is contract performance or pre-contractual measures (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR).
3.2 Payment processing
Payments for paid bookings are processed by Stripe (Stripe Payments Europe, Ltd., Dublin, Ireland). The data required for payment processing is transmitted to Stripe. The legal basis is Art. 6(1)(b) GDPR. Stripe's privacy policy applies: stripe.com/at/privacy.
3.3 Newsletter („2 Minutes to Tune")
We process your email address to send our newsletter on the basis of your consent (Art. 6(1)(a) GDPR). Subscription uses a double opt-in procedure: your subscription only becomes active after you confirm the link sent by email. The confirmation token is stored exclusively as a hash. You may withdraw your consent at any time with effect for the future, e.g. via the unsubscribe link in every email or by messaging artwavewellness@gmail.com.
3.4 Campaign parameters (UTM)
If you sign up via a campaign link, we also store the campaign parameters contained in the link (e.g. utm_source, utm_medium, utm_campaign) to understand which channel led to the signup. The legal basis is our legitimate interest in evaluating our marketing measures (Art. 6(1)(f) GDPR).
3.5 Recommendation assistant (AI)
Our recommendation assistant creates suggestions from the existing ArtWave offering (blog articles and workshops) based on your freely described wellness goals. Your input is processed solely to create the response and is not stored permanently. The legal basis is your consent through voluntary use (Art. 6(1)(a) GDPR).
3.6 Customer account
If you create a customer account, we process your login data (email address, password – stored exclusively in encrypted form) and profile details so you can view and manage your bookings. Bookings you previously made with the same email address without an account are assigned to your account. The legal basis is Art. 6(1)(b) GDPR.
3.7 Server log data
When you visit the website, the hosting provider automatically processes technical access data (e.g. IP address, date and time, page accessed, browser type). This data serves the security and technical operation of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation).
3.8 Cookies
This website only uses technically necessary cookies and browser storage required for operation (e.g. login session). No tracking or marketing cookies are set.
4. Recipients and third countries
To provide our services we use carefully selected processors, in particular for hosting, database and email delivery (Lovable Cloud / Supabase) and for payment processing (Stripe). Data is transferred to third countries only where an adequate level of data protection is ensured (e.g. EU standard contractual clauses). Your data is not passed on to third parties beyond this.
5. Retention period
We store personal data only as long as required for the respective purpose or as statutory retention obligations exist (in particular under the Austrian Commercial Code and the Federal Fiscal Code). Newsletter subscriptions are deleted after withdrawal.
6. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21) at any time. You may withdraw consent at any time with effect for the future. Contact artwavewellness@gmail.com. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at).
7. Data security
We take technical and organisational measures to protect your data against loss, manipulation and unauthorised access. This website is transmitted in encrypted form (TLS).
Last updated: October 2026