Back to home

Privacy Policy

This policy explains which personal data is processed when you visit this website, for what purpose, on what legal basis and for how long.

Last updated: 21 September 2026

Controller

Yildiz Möbel

Güngör Yildiz
Erdbergstraße 140-144
1030 Wien, Austria
info@yildizmoebel.com

For questions about data protection, please use the contact details above.

This website works without tracking

This website sets no cookies. No analytics, statistics or marketing services are used, no usage profile is created and no data is passed to advertising networks. A consent banner is therefore not required.

Fonts are not loaded from external servers either; they are delivered together with the website. Opening a page therefore creates no connection to Google or any other third party.

Visiting the website and server logs

When you open this website, your browser transmits technically necessary data to the server of our hosting provider. The following is logged in particular:

  • IP address of the requesting device
  • date and time of the request
  • the address requested and the amount of data transferred
  • the status code of the response
  • browser and operating system details

This processing is necessary to provide the website and to keep it stable and secure. The legal basis is Art. 6 para. 1 lit. f GDPR, our legitimate interest in secure operation. The logs are not merged with other data sources and are deleted automatically once they are no longer needed for these purposes.

Contact form

If you use the contact form, we process the details you enter: name, email address, telephone number, an optional preferred appointment and your message. This data is used solely to handle your enquiry.

The legal basis is Art. 6 para. 1 lit. b GDPR where the enquiry is directed at a contract, otherwise Art. 6 para. 1 lit. f GDPR, our legitimate interest in answering enquiries.

The form message is delivered to our mailbox through an email service provider acting as a processor. The provider does not use your details for its own purposes.

Protection against automated requests

When the form is submitted, the IP address is counted briefly in memory to prevent automated bulk requests. The counter expires after one hour. No permanent storage and no evaluation of individual people takes place. The legal basis is Art. 6 para. 1 lit. f GDPR.

Contact by email or telephone

If you contact us by email or telephone, we process your details in order to answer the enquiry and to carry out any resulting order. The legal basis is Art. 6 para. 1 lit. b or lit. f GDPR.

Recipients and transfer to the USA

We use the following processors to provide the website and to deliver form messages:

Hosting
Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA
Provider's privacy notice
Email delivery
Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA
Provider's privacy notice

Both providers are certified under the EU-US Data Privacy Framework. The transfer is therefore based on the European Commission's adequacy decision under Art. 45 GDPR, supported by data processing agreements under Art. 28 GDPR.

Your data is not passed on to any other third party unless we are legally obliged to do so.

Retention periods

Enquiries are kept for as long as they are needed to handle them. If an enquiry leads to an order, the statutory retention periods apply, in particular seven years under section 132 of the Austrian Federal Fiscal Code. Server logs are deleted after a short period.

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability, as well as the right to object to processing based on legitimate interests. An informal message to the email address above is sufficient.

If you believe that the processing of your data breaches data protection law, you may lodge a complaint with the supervisory authority:

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien
dsb@dsb.gv.at · dsb.gv.at

No automated decision making

No automated decision making, including profiling under Art. 22 GDPR, takes place. This website has neither user accounts nor a newsletter.

Changes to this policy

If the services used or the legal situation change, we will adapt this policy. The version published here is the one that applies.