01Controller
The controller for the processing of your data within the meaning of the General Data Protection Regulation (GDPR) is:
For anything to do with data protection, a plain email to info@sonailpro.at is enough.
02The short version
We collect only the data we need for a specific purpose, and we keep it only as long as that purpose lasts. This site does not sell data, does not track you across other websites and carries no advertising networks.
03Requests sent through the forms
When you request a studio visit, a home delivery or a subscription, we process what you enter in the form in order to handle your request and get back to you.
- Data processed: name, phone number, email address where given, delivery address and postcode, the services or package you selected, and your comment.
- Purpose: handling the request, arranging an appointment, delivering the subscription card.
- Legal basis: Art. 6(1)(b) GDPR - steps taken before and in performance of a contract.
- Mandatory fields are marked in the form. Without them we cannot process the request.
05Hosting and server logs
When you open a page, your browser sends technically necessary data that our hosting provider logs briefly: IP address, date and time, the address requested, the amount of data transferred, the referrer and your browser identification.
These logs exist to keep the site secure and stable and are not combined with any other data. The legal basis is Art. 6(1)(f) GDPR.
07Who receives your data
Your data stays with us. The only other parties with access are the providers that help us run the website and are bound as processors under Art. 28 GDPR - in particular our hosting and database provider.
To take out a subscription we use Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. We pass on your name, email address and the plan you chose; your payment details are entered on Stripe's own page and are never collected or stored by us. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Stripe's privacy policy is at stripe.com/at/privacy.
We do not transfer data to countries outside the European Economic Area unless the transfer is covered by an adequacy decision or standard contractual clauses.
08How long we keep it
- Requests that did not lead to an appointment: deleted no later than six months after the last contact.
- Records of concluded contracts and subscriptions: seven years, in line with Austrian tax and commercial retention rules.
- Blog comments: until you withdraw them or the post goes offline.
- Server logs: usually no more than 30 days.
09Your rights
You may exercise all of the following against us at any time, free of charge:
- Access to the data we hold about you (Art. 15 GDPR).
- Rectification of inaccurate data (Art. 16 GDPR).
- Erasure, unless a retention obligation stands in the way (Art. 17 GDPR).
- Restriction of processing (Art. 18 GDPR).
- Portability in a common machine-readable format (Art. 20 GDPR).
- Objection to processing based on legitimate interest (Art. 21 GDPR).
An email to info@sonailpro.at is enough. We reply within one month.
10Right to complain
If you believe we are processing your data unlawfully, you can complain to the Austrian Data Protection Authority (Österreichische Datenschutzbehörde) at dsb.gv.at.
11Changes to this policy
We update this policy when our services or the law change. The version published on this page applies; the date above shows how current it is.
04Blog comments
Comments on blog posts are stored with the name you give, your email address and a timestamp. The email address is never published; we use it only for follow-up questions and to trace abuse.
The legal basis is our legitimate interest in a moderated, spam-free comment section under Art. 6(1)(f) GDPR. You can ask us to delete your comment at any time.