Privacy Policy (GDPR) — Covent Studio GmbH

1. Controller

Responsible for the processing of personal data on this website within the meaning of Art. 4 (7) GDPR is:

Covent Studio GmbH: Rasumofskygasse 26, 1030 Vienna, Austria
E-mail: info@coventstudio.com

2. Scope

This privacy policy applies to the coventstudio.com website operated by Covent Studio GmbH.

3. Data Collected and Purposes

3.1 Server log files

When you access this website, technical data is automatically captured by our hosting provider:

IP address (anonymised)
Date and time of access
Requested URL and HTTP status code
Referrer URL
Browser type and version, operating system

Purpose: ensuring technical operation, error diagnosis, protection against misuse.
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest).
Storage period: a maximum of 30 days, then automatic deletion.

3.2 E-mail enquiries

If you contact us by e-mail, we process your name, e-mail address, and the content of your message.

Purpose: processing your enquiry.
Legal basis: Art. 6 (1)(b) GDPR (pre-contractual measures) or (f) GDPR (legitimate interest in handling enquiries).
Storage period: until the conclusion of your enquiry; business correspondence is retained for seven years under § 132 BAO and § 212 UGB.

4. Cookies

This website uses only technically necessary local-storage entries to support core navigation (no third-party cookies, no tracking, no advertising cookies). No consent is required (§ 96 (3) Austrian TKG 2021 in conjunction with Art. 6 (1)(f) GDPR).

We deliberately use no tracking pixels and no web-analytics services.

5. Processors

We use external service providers who, as processors within the meaning of Art. 28 GDPR, have entered into a data-processing agreement with us:

Hosting provider: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg — operation of the web server in EU data centres.
E-mail provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft 365) — receipt and dispatch of e-mail to the info@coventstudio.com address.

6. Google Fonts

This website uses fonts ("Inter" and "Playfair Display") provided by Google Fonts (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). When you visit this website, the fonts are loaded from a Google server, which transmits your IP address to Google.

Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in consistent typography).
Recipient: Google Ireland Ltd. — privacy policy: policies.google.com/privacy

7. Transfer to Third Countries

A transfer of personal data to third countries (outside the EEA) takes place only to the extent described in section 6 (Google Fonts). Google processes data under the EU Standard Contractual Clauses and is certified under the EU-US Data Privacy Framework.

8. Your Rights as a Data Subject

You have the following rights vis-à-vis Covent Studio GmbH with respect to personal data concerning you:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7 (3) GDPR)

To exercise your rights, please contact info@coventstudio.com.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data. The competent authority in Austria is:

Austrian Data Protection Authority: Barichgasse 40-42, 1030 Vienna
Phone: +43 1 52 152-0
E-mail: dsb@dsb.gv.at
Web: www.dsb.gv.at

10. Currency of this Privacy Policy

This privacy policy is current as of May 2026. Updates may be required due to website developments or changes in legal requirements. The current version can always be retrieved at coventstudio.com/en/privacy.html.