Privacy Policy

Last updated: October 11, 2026

This Privacy Policy explains how personal data is collected and processed when you visit www.janinajanda.com, contact the artist, subscribe to the newsletter, or enquire about or purchase an artwork.

Your personal data is handled in accordance with the EU General Data Protection Regulation (GDPR) and applicable Austrian data protection laws.

1. Data Controller

The person responsible for processing personal data on this website is:

Janina Janda
Independent Visual Artist
Koppstraße 62/9–12
1160 Vienna, Austria

Email: studio@janinajanda.com
Website: https://www.janinajanda.com

For any questions concerning your personal data, please use the contact details above.

2. Personal Data We Collect

Depending on how you interact with this website, the following categories of personal data may be processed:

  • Technical data: IP address, browser type, device information, access times, and website usage information.

  • Contact data: Name, email address, and information voluntarily submitted through the contact form or by email.

  • Newsletter data: Email address, subscription status, consent records, and, where enabled, information about newsletter interactions.

  • Purchase data: Name, contact details, billing and delivery addresses, information about purchased artworks, payment and shipping details.

Personal data is collected only where necessary for the purposes described in this policy and where an appropriate legal basis exists.

3. Website Hosting

This website is hosted by Squarespace.

Squarespace processes certain technical information necessary to provide, maintain, and protect the website. This may include IP addresses, browser information, device details, and server access data.

This processing is based on Article 6(1)(f) GDPR, reflecting the legitimate interest in operating a secure and functional website, insofar as the processing is necessary for these purposes.

Further information is available in the Squarespace Privacy Policy:

https://www.squarespace.com/privacy

4. Cookies & Analytics

This website uses cookies and similar technologies.

Essential technologies are used to support the operation, security, and functionality of the website.

Squarespace Analytics is used to understand website traffic and how visitors interact with the website. Depending on the configuration, this may involve the processing of technical information and usage data.

Where consent is legally required, optional cookies and tracking technologies may only be used after valid consent has been obtained.

The applicable legal bases are Article 6(1)(f) GDPR for necessary technical processing, where appropriate, and Article 6(1)(a) GDPR for consent-based analytics processing.

Visitors can manage cookies through their browser settings and, where available, through the website's cookie preferences.

For further information:

https://www.squarespace.com/cookie-policy

5. Contact Forms & Email Communication

If you contact the artist through the website's contact form or directly by email, the information you provide will be processed to respond to your enquiry.

This may include your name, email address, message, and any additional information you choose to share.

Email communication is handled through Google Workspace.

The legal basis is Article 6(1)(b) GDPR when the enquiry concerns a potential purchase or contractual relationship.

For other enquiries, processing is based on Article 6(1)(f) GDPR, reflecting the legitimate interest in responding to communications.

Contact information will not be added to the newsletter mailing list solely because you have submitted an enquiry.

Further information about Google's data processing is available at:

https://policies.google.com/privacy

6. Newsletter

Visitors can subscribe to receive occasional emails about new collections, available artworks, exhibitions, and other artistic projects.

Newsletters are managed through Squarespace Email Campaigns.

When you subscribe, your email address and information necessary to administer and document your subscription are processed. Depending on the settings, newsletter delivery and interaction data may also be processed.

The legal basis for sending the newsletter is your consent under Article 6(1)(a) GDPR.

You may withdraw your consent at any time by clicking the unsubscribe link included in newsletter emails or by contacting studio@janinajanda.com.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

7. Artwork Enquiries & Purchases

Artworks are offered through individual enquiries rather than an automated online checkout.

When you enquire about or purchase an artwork, personal data may be processed to communicate with you, confirm availability, arrange payment, issue invoices, and organise delivery.

This may include:

  • Full name

  • Email address

  • Billing and delivery address

  • Telephone number, where necessary for delivery

  • Artwork and purchase details

  • Payment and shipping information

Payment is arranged individually, usually by bank transfer or, where agreed, through PayPal.

Relevant transaction information may be shared with banks, payment providers, and delivery services where necessary to complete the purchase.

Artwork inventory and order information may be managed using Google Sheets.

The legal bases are Article 6(1)(b) GDPR for contractual processing and Article 6(1)(c) GDPR for compliance with applicable legal obligations, including accounting and tax requirements.

8. Instagram & Third-Party Content

This website may display or link to content from Instagram, a service provided by Meta.

When embedded Instagram content is loaded, technical information such as your IP address, browser details, and information about your interaction with the embedded content may be transmitted to Meta.

Where prior consent is legally required, such third-party content must not be activated before valid consent has been obtained.

Clicking a link to Instagram may also result in data processing by Meta on its own platform.

Further information is available in Meta's Privacy Policy:

https://www.facebook.com/privacy/policy/

9. Data Sharing & Service Providers

Personal data is not sold to third parties.

Where necessary, information may be shared with service providers involved in operating the website, managing communications, or fulfilling artwork purchases.

These may include:

  • Squarespace, for website hosting, analytics, and newsletter management.

  • Google, for email communication and order administration.

  • Meta, where Instagram content is embedded.

  • Banks and payment service providers, where relevant.

  • Shipping and delivery providers, where necessary.

Personal data is shared only where an appropriate legal basis exists and to the extent necessary for the relevant purpose.

Where required by law, suitable data processing agreements and safeguards are implemented.

10. International Data Transfers

Some service providers may process personal data outside the European Economic Area, including in the United States.

Where international transfers are made, they must comply with applicable data protection requirements.

Depending on the provider and circumstances, appropriate safeguards may include an applicable adequacy decision, certification under the EU–US Data Privacy Framework, or the European Commission's Standard Contractual Clauses.

11. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected, unless longer retention is required by law.

  • Contact enquiries: Retained for the period reasonably necessary to handle the enquiry and any relevant follow-up or legal claims.

  • Newsletter data: Retained while the subscription remains active. Limited records may be retained afterwards where necessary to document consent and compliance with legal obligations.

  • Purchase and invoice information: Generally retained for seven years in accordance with applicable Austrian tax and accounting obligations, subject to any legally required extensions.

  • Website usage data: Retained according to the relevant technical settings, purposes, and applicable legal requirements.

12. Your Rights

Under the GDPR, you have the following rights, subject to applicable legal conditions:

  • The right to access your personal data.

  • The right to request correction of inaccurate information.

  • The right to request deletion of your personal data.

  • The right to restrict certain processing activities.

  • The right to object to processing based on legitimate interests.

  • The right to data portability, where applicable.

  • The right to withdraw consent at any time where processing is based on consent.

To exercise your rights, please contact studio@janinajanda.com.

You also have the right to lodge a complaint with a data protection supervisory authority.

The competent supervisory authority in Austria is:

Austrian Data Protection Authority (Datenschutzbehörde)
https://www.dsb.gv.at

13. Data Security

Appropriate technical and organisational measures are taken to protect personal data against unauthorised access, loss, alteration, or misuse.

However, no method of electronic transmission or storage can guarantee absolute security.

14. Changes to This Privacy Policy

This Privacy Policy may be updated to reflect changes in website functionality, data processing activities, or legal requirements.

The current version will be published on this website with an updated revision date.