Privacy Policy

Privacy Policy


Responsible person in terms of data protection: Mag. Lisa Farkas 

I take the issue of data protection very seriously. 

Personal data refer to information that can be used to determine the identity of a person (e.g. name, address, etc.). When we speak of "data" in the following, we are referring to personal data. 

The term "data processing" as defined by the GDPR is to be understood very broadly, because even the mere storage of data fulfils this term. 


What data I process: 

The data I process depends on whether you visit my website as a guest or whether you are a customer.  


If you are a visitor to my website  


I only use technically necessary cookies. If you are a guest on my website, I as the website owner can trace the IP address of you as the website user back to the server to which the website is transferred. This is not technically possible in any other way. 

However, since no data other than technically necessary data, i.e. your IP address, is stored, I use so-called „Session Cookies“. This means that this data is automatically deleted within a short period of time after you leave the website. In individual cases, it may be necessary for me to disclose this data, for example to improve my IT. 


Social Media 

This website contains social media buttons for Facebook, Instagram and Pinterest. If you visit the social media profiles linked via these buttons (Facebook, Instagram, Pinterest), you will be taken to the websites of third parties, which in turn are their own data controllers within the meaning of the GDPR. In this context, it may be that the operators of these websites process data about you and that data may be transferred to EU third countries. In this context, the data protection declaration and cookie policy of these website operators are authoritative (for details concerning


If you are a client or intend to work with me 

In the event that you are a client or intend to commission me for an artwork or wish to purchase a finished artwork, I process all data on the basis of your express consent pursuant to Art 6 (1) lit a GDPR or within the framework of the (initiated) client relationship, i.e. pursuant to Art 6 (1) lit b GDPR. 

In case of a termination of the business cooperation or a rejection of your request, I will keep your data for the purpose of internal logging of the termination/rejection (Art 6 para 1 lit f GDPR). 


I only store your data for as long as this is necessary for my professional purposes/for the provision of my services. In doing so, I observe legal requirements regarding storage periods and deletion periods (e.g. tax law requirements, civil law limitation periods). 

I appreciate the trust you place in me when you provide me with your data so that I can carry out my professional activities to the best of my knowledge and belief. Please also understand that I cannot undertake commissioned work or can only do so to a limited extent if you do not wish to provide me with the necessary data for my work. 


If you are a business partner 

If you are a business partner of mine, I process your data for the purpose of initiating, maintaining and processing our contracts, i.e. in accordance with GDPR for the implementation of pre-contractual measures, for the fulfilment of contractual obligations (Art 6 Para 1 lit b GDPR) and/or with your express consent (Art 6 Para 1 lit a GDPR). 

In case of a termination of the business cooperation or a rejection of your request, I will keep your data for the purpose of internal logging of the termination/rejection (Art 6 para 1 lit f GDPR).  


Your rights in terms of data processing 

If you have provided me with your data yourself or consented to data processing, you may withdraw this consent at any time. However, the previous data processing remains unaffected by such a withdrawal (Art 7 (3) GDPR). Please also take into account that, as already mentioned above, in such a case the maintenance of the business relationship may no longer be possible or only possible to a limited extent. 

Furthermore, you have the right to information, correction, deletion, restriction of data processing, objection and data portability (cf. Art 15 ff GDPR). Should a violation of your rights occur despite the greatest care in handling your data, please do not hesitate to contact me immediately. I would also like to point out that in such a case you can file a complaint with the data protection authority . 

For all questions and concerns, please feel free to contact me at or at +43 660 4890 747.