Privacy policy

Controller

UpTownArt26 – Association for the Promotion of Art and Culture, Austrian association register no. 1052146297, Sporgasse 24, 8010 Graz, Austria

Privacy enquiries: office@uptown.art

Store and account

For carts, orders, payments and optional accounts we process contact, delivery, order and payment-status data. Legal bases are contract performance, legal obligations and our legitimate interest in secure operation. Stripe processes card data; we do not receive complete card details.

Comments, translation and reactions

For comments we store the name, a non-reversible email verification value, original text, language and moderation state. A language model may translate comments for bilingual display while the original remains unchanged. Reactions use a pseudonymous identifier to prevent repeated submissions.

Analytics and personalization

Product views for personal suggestions are counted only after consent. Consent can be withdrawn at any time in Cookie settings; locally stored view counts are then deleted.

Processors and retention

We use Cloudflare for hosting and security, Stripe for payments, Mailgun for transactional email and our EU-hosted AIO infrastructure on a netcup VPS for comment translation. Data is kept only as long as needed for its purpose, legal retention and defending claims.

Your rights

You may request access, correction, deletion, restriction, portability, objection and withdrawal of consent. Complaints may be lodged with the Austrian Data Protection Authority.