Privacy Policy
Controller
The controller responsible for the processing of personal data on this website is:
Zackarias Hillberg
Grangasse 1/32
1150 Vienna
Austria
Phone: +43 664 417 66 71
Email: concierge@hillbergdesign.com
Hosting and Website Operation
This website and online store are operated using Wix.com.
When you visit or use this website, certain technical data may be processed, including your IP address, device and browser information, and technical usage data. This processing is based on our legitimate interest in providing a secure and functional website pursuant to Art. 6(1)(f) GDPR.
Wix may also process personal data outside the European Economic Area. Wix is headquartered in Israel, for which the European Commission has adopted an adequacy decision. For transfers to other third countries, Wix states that it uses appropriate safeguards.
Further information can be found in Wix’s Privacy Policy.
Online Store and Orders
When you place an order through our online store, we process the personal data required to process and fulfil your order. This may include your name, email address, billing and delivery address, telephone number where applicable, and order and payment information.
Processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR. Where statutory retention obligations apply, further processing is based on Art. 6(1)(c) GDPR.
Without the information required to process an order, we are unable to complete the order.
Payments
We use Wix Payments to process payments. Available payment methods may include credit and debit cards, Apple Pay and Google Pay. We also offer advance payment by bank transfer.
The payment and transaction data required to process payments via Wix Payments are processed by Wix and the payment service providers involved in the respective transaction. For advance payment by bank transfer, the data required to process the transfer may be processed by the banks and financial institutions involved.
Processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR and, where necessary, for compliance with legal obligations pursuant to Art. 6(1)(c) GDPR.
When using Apple Pay or Google Pay, personal data may also be processed by the respective payment service provider in accordance with its own privacy policy.
Shipping
For the delivery of your order, we provide the personal data required for shipping, in particular your name, delivery address and, where necessary, contact details, to the relevant shipping provider.
We currently use, in particular, Österreichische Post AG (Austrian Post). Processing is carried out for the performance of the contract pursuant to Art. 6(1)(b) GDPR.
Contact
If you contact us by email or through the contact form, we process the information you provide in order to respond to your enquiry.
Where your enquiry relates to an existing or potential contract, processing is based on Art. 6(1)(b) GDPR. Other enquiries are processed on the basis of our legitimate interest in responding to and handling enquiries pursuant to Art. 6(1)(f) GDPR. The contact form is provided through Wix.
Newsletter
If you subscribe to our newsletter, we process your email address for the purpose of sending you the newsletter.
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by using the unsubscribe link included in each newsletter. The newsletter is technically provided through Wix.
Google Analytics
This website uses Google Analytics 4, a web analytics service provided by Google.
Google Analytics processes information about how this website is used, including pages viewed, interactions, duration of visits, and device and browser information. This information is used to analyse website usage and improve our website.
Google Analytics is activated only after you have given your prior consent. Processing is based on Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future through the cookie settings. Processing of personal data outside the European Economic Area cannot be excluded.
Instagram Feed
An Instagram feed is embedded on this website to display content from our Instagram profile directly on the website. When the feed is loaded, personal data such as your IP address and device and browser information may be transmitted to the provider of the Instagram service.
The Instagram feed is loaded only after you have given your prior consent. Processing is based on Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future through the cookie settings.
Cookies and Similar Technologies
This website uses technically necessary cookies and similar technologies where required for the operation, security and essential functionality of the website and online store.
Non-essential cookies and similar technologies, in particular those used for analytics and social media functions, are used only after you have given your prior consent. You may change or withdraw your consent at any time with effect for the future through the cookie settings.
Retention Period
Personal data are retained only for as long as necessary for the respective purpose of processing or for as long as statutory retention obligations apply.
Once the relevant purpose no longer applies or the applicable statutory retention period has expired, the data will be deleted unless another legal basis permits or requires continued storage.
Your Rights
Subject to the applicable legal requirements, you have the right to:
-
access your personal data
-
rectify inaccurate or incomplete personal data
-
request erasure of your personal data
-
restrict the processing of your personal data
-
data portability
-
object to certain processing activities
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. To exercise your rights, please contact us at concierge@hillbergdesign.com. You also have the right to lodge a complaint with a data protection supervisory authority. In Austria, the competent supervisory authority is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde).
Last updated: Sept 2026