Privacy Policy

1. General Information

The protection of your personal data is important to us. This Privacy Policy explains how Arcanumari processes personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian law.

We process your personal data only on a lawful basis and for the purposes described below.

2. Controller

Controller responsible for data processing:
Toni Mitev
Arcanumari
Kandlgasse 31, 1070 Vienna, Austria

Email: contact@arcanumari.com

3. Data We Collect

We may collect and process the following personal data:

Name and billing/shipping address
Email address
Account login information
Order and payment information
Digital purchase history
Communication data (e.g. emails sent to us)

4. Purpose of Data Processing

Your personal data is processed for the following purposes:

To process and fulfill orders (physical and digital products)
To create and manage customer accounts
To provide access to purchased digital content
To communicate with you regarding orders or inquiries
To comply with legal and tax obligations

The legal basis for this processing is Article 6(1)(b) GDPR (contract performance) and Article 6(1)(c) GDPR (legal obligation).

5. Online Shop & Customer Accounts

When you place an order or create a customer account, the data you provide is necessary for contract fulfillment. Without this data, we cannot process your order or provide access to digital products.

Customer account data remains stored until the account is deleted by you or upon request, unless legal retention obligations apply.

6. Digital Products

For digital products, we store the necessary data to grant access and verify lawful purchase. Download and access data may be logged to ensure proper delivery and prevent misuse.

7. Data Storage & Retention

If you place an order, all data relevant to the contractual relationship is stored for the duration of the statutory retention period under Austrian tax law (currently 7 years).

Data related to customer accounts is retained until deletion is requested, unless legal obligations require longer storage.

8. Squarespace as Hosting Provider

This website is hosted on Squarespace. Squarespace processes personal data on our behalf as a data processor.

Squarespace may store data on servers outside the European Union. In such cases, data transfers are protected by appropriate safeguards in accordance with GDPR (e.g. Standard Contractual Clauses).

More information can be found in Squarespace’s own privacy policy.

9. Cookies

Squarespace uses cookies that are necessary for the operation, security, and functionality of the website and online store.

You can configure your browser to inform you about the use of cookies and allow cookies only in individual cases or disable them entirely. Disabling cookies may limit website functionality.

10. Your Rights

You have the right to:

Access your personal data
Rectification of inaccurate data
Erasure of your data
Restriction of processing
Data portability
Withdrawal of consent
Objection to processing

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the supervisory authority.

In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde).

11. Contact

If you have any questions regarding data protection or wish to exercise your rights, please contact: