Bespoke Vienna takes the protection of personal data seriously. This interim Privacy Policy explains how personal data are currently collected and used when you visit this website, submit an enquiry, request a consultation, or otherwise contact Bespoke Vienna.
A comprehensive Privacy Policy will be prepared with a data-protection specialist once the final technical structure of the website has been completed.
The controller responsible for the processing of personal data is:
Barbara Lanz, MA
Bespoke Vienna
[Business address]
Email: welcome@bespokevienna.com
Website enquiries
When you use one of the website forms, the information you provide may include:
The forms currently include enquiries relating to:
Heritage Atlas Inquiry
Where a Heritage Atlas engagement proceeds, you may be invited to complete the Heritage Atlas Inquiry. This is a written questionnaire through which you provide your own perspective on your business or institution.
The information supplied through the Inquiry is used solely for the preparation and delivery of the Heritage Atlas engagement.
Consultation and engagement information
Where you arrange a consultation or other engagement, additional information may be processed for:
Technical website data
When you visit the website, certain technical information may be processed automatically by the website host or server. This may include:
The precise technical processing will be reviewed and described in the final Privacy Policy once the website configuration has been completed.
Personal data are processed only where necessary to:
Depending on the circumstances, personal data may be processed because:
The applicable legal basis depends on the nature of the interaction.
Where payment is required for a Heritage Consultation or another engagement, payment instructions may be provided after a date or scope has been agreed.
Payment processing may involve a bank or external payment-service provider. Bespoke Vienna does not intentionally collect or store full payment-card details through the website.
Further information concerning the relevant payment provider will be added to the final Privacy Policy once the payment process has been confirmed.
Personal data are not sold or rented.
Data may be shared only where necessary with service providers supporting the operation of the practice, such as:
Any such provider receives only the information required for the relevant purpose.
Some technical, email, hosting, or payment providers may process data outside Austria or the European Economic Area.
Where this occurs, appropriate safeguards will be used where required by law. The final Privacy Policy will identify relevant providers and transfer mechanisms once the technical setup has been confirmed.
The final website configuration may use technically necessary cookies or similar technologies required for the website to function.
Any non-essential analytics, marketing, or third-party cookies will be described separately and, where legally required, activated only after consent has been given. EU guidance distinguishes between cookies required for a requested service and non-essential cookies that generally require prior consent. (Source: European Union)
The final Privacy Policy and any cookie notice will be updated once the website's actual cookie and analytics configuration is known.
Personal data are retained only for as long as necessary for the purpose for which they were collected and for any applicable legal, accounting, contractual, or documentation requirements.
The appropriate retention period depends on the nature of the enquiry or engagement.
Where an enquiry does not lead to further work, the information will not be retained longer than reasonably necessary for correspondence and administration.
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, disclosure, alteration, loss, or misuse.
No method of transmission or electronic storage can be guaranteed to be completely secure.
Subject to the applicable legal requirements, you may have the right to:
The Austrian Data Protection Authority lists the principal rights of data subjects as including information, access, rectification, erasure, restriction, portability, objection, and protection from solely automated decisions. (Source: Österreichische Datenschutzbehörde )
To exercise your rights, please contact:
welcome@bespokevienna.com
You also have the right to contact the Austrian Data Protection Authority.
Bespoke Vienna does not use personal data submitted through its enquiry forms or Inquiries for solely automated decision-making or profiling.
Enquiries and submitted materials are reviewed personally.
This is an interim Privacy Policy.
It will be replaced by a comprehensive version after the website's technical systems, hosting, cookies, analytics, payment arrangements, and service-provider relationships have been reviewed with a data-protection specialist.
Last updated: August 2026