Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
Carrato Interior Design
Mag. Stefanie Carrato-Farr
Messenhausergasse 2/Top 22
1030 Vienna, Austria
+436765718042
Email: kontakt@carratodesign.at
Website: www.carratodesign.at
The protection of your personal data is of particular concern to us. In this Privacy Policy, we inform you about the most important aspects of data processing within the scope of our website.
2. Hosting
This website is operated via the provider Squarespace. When visiting the website, personal data may be processed by the hosting provider, particularly technical data such as IP address, browser information, or access times. Processing is carried out for the purpose of securely and efficiently providing our online offering.
3. Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits. These include, for example:
• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of server request
• IP address
This data cannot be assigned to specific persons.
4. Contacting Us
If you contact us via the contact form or by email, the data you provide will be stored and processed for the purpose of handling your inquiry. We will not share this data without your consent.
5. Cookies
Our website uses cookies. These are small text files that are stored on your device. Some of the cookies are technically necessary to ensure the functionality of the website. Other cookies may be used to analyze user behavior.
To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the “Real Cookie Banner” consent tool. Details on how “Real Cookie Banner” works can be found at <a href=”https://devowl.io/de/rcb/datenverarbeitung/” rel=”noreferrer” target=”_blank”>https://devowl.io/de/rcb/datenverarbeitung/</a>.
The legal bases for the processing of personal data in this context are Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.
6. Web Analytics with Google Analytics
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies that enable an analysis of your use of the website. The information generated about your use of this website is usually transmitted to a Google server and stored there. Processing only takes place after your consent via the cookie banner.
7. Data Transfer to Third Countries
When using services such as Google Analytics, personal data may be transferred to countries outside the European Union, particularly to the USA. In these countries, an equivalent level of data protection may not exist under certain circumstances.
8. Storage Period
Personal data is only stored for as long as necessary for the respective purposes or as required by legal retention periods.
9. Your Rights
You generally have the right to information, rectification, erasure, restriction of processing, data portability, as well as revocation and objection.
If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority.
10. Data Security
We implement technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.
As of March 4, 2026