Privacy Policy

The controller in the sense of the General Data Protection Regulation (GDPR) is:
Isabelle Akhavan Collection Akhavan Schlossgasse 14/6 1050 Vienna, Austria Email: info@akhavancollection.com
Museum location: Mittersteig 15, 1040 Vienna

We generally only process personal data of our users insofar as this is necessary to provide a functional website and our content and services (ticket reservation, rental of the space for events). The processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR), for the fulfillment of a contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR), for the fulfillment of a legal obligation (Art. 6 para. 1 lit. c GDPR) or due to legitimate interests (Art. 6 para. 1 lit. f GDPR).

For museum visits, tickets can be reserved non-bindingly via our website or requested by email; online sales or online payment do not take place (payment is made on site). As part of the reservation, we process the data you provide (e.g., name, email address, number of tickets, desired visit date) to process your request. The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual measure) or Art. 6 para. 1 lit. a GDPR, if the reservation is made via a form with separate consent.

If you submit an inquiry by email to rent the premises for an event, we process the data you provide (e.g., name, contact details, desired event date, type of event, number of participants) to process the inquiry and, if applicable, to create an offer or contract. The legal basis for this is Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 para. 1 lit. a GDPR, provided that the inquiry is made via a form with separate consent.

This website is hosted by Shopify. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1 Victoria Street, Dublin 2, Ireland ("Shopify"). When you access the website, Shopify automatically collects information in so-called server log files, which your browser transmits, including in particular:
IP address of the requesting device
Date and time of access
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Browser used and, if applicable, operating system
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our legitimate interest in ensuring trouble-free operation, system security and stability, and for administrative purposes. Shopify processes this data as our processor within the meaning of Art. 28 GDPR on the basis of a corresponding data processing agreement. Data transfer to third countries (including Canada, USA) is not excluded when using Shopify; Shopify relies on the EU standard contractual clauses for this. Further information can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy

Our Shopify-hosted website uses technically necessary cookies, without which the operation of the site or individual functions (e.g., fraud prevention, load balancing, system security) would not work - such as cookies with names like _shopify_s, _shopify_y, or _shopify_essential. This website does not sell tickets or other services online, nor does it have a shopping cart or checkout process. These technically necessary cookies are set on the basis of Art. 6 para. 1 lit. f GDPR or § 96 para. 3 TKG and do not require separate consent. Beyond the standard Shopify setup, no additional analytics, marketing, or tracking tools are currently used.

You have the right at any time:
to request information about your personal data processed by us in accordance with Art. 15 GDPR,
to request the correction of inaccurate data or the completion of your data stored by us in accordance with Art. 16 GDPR,
to request the erasure of your data stored by us in accordance with Art. 17 GDPR, unless legal retention periods prevent this,
to request the restriction of processing in accordance with Art. 18 GDPR,
to receive your data in a structured, common and machine-readable format in accordance with Art. 20 GDPR,
to withdraw a once given consent at any time in accordance with Art. 7 (3) GDPR,
to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that this is based on legitimate interests, and
to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. In Austria, this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna (www.dsb.gv.at).

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing ceases to apply, provided that no statutory retention obligations (e.g., under tax law) conflict with this.

We reserve the right to adapt this Privacy Policy so that it always complies with current legal requirements or to implement changes to our services.