PRIVACY
Last updated: September 2026
1. Controller
The controller responsible for the processing of personal data on this website is Happel&Kostakis GmbH, SEAMERAKI, Peter-Jordan-Straße 163/1/3, 1180 Vienna, Austria. Contact: office@seameraki.com, +43 677 647 262 37.
2. General data processing and server log files
When you access this website, technically necessary connection data may be processed, in particular your IP address, date and time of access, the page accessed, browser and device information, as well as error and security data. This processing serves the secure and stable provision of the website and is based on legitimate interests pursuant to Art. 6(1)(f) GDPR.
3. Contact and contact form
If you contact us by email or via the contact form, we process the data you provide, in particular your name, email address, telephone number (if provided) and the content of your message, in order to handle your enquiry. Depending on the content of the enquiry, processing is carried out to take steps prior to entering into a contract or to perform a contract pursuant to Art. 6(1)(b) GDPR, or on the basis of our legitimate interest in handling enquiries pursuant to Art. 6(1)(f) GDPR.
4. Online shop with Ecwid
Ecwid by Lightspeed is planned for the online shop. In connection with orders, contact, billing, delivery, order and technical usage data may in particular be processed. Processing is carried out for contract fulfilment pursuant to Art. 6(1)(b) GDPR, to comply with legal obligations pursuant to Art. 6(1)(c) GDPR and, where necessary, on the basis of legitimate interests. Ecwid may use additional service providers for technical provision. Before the shop goes live, the Ecwid functions, cookies and recipients actually used will be checked again against the final shop configuration.
5. Payment processing with Stripe
Stripe is planned for payment processing. Payment and transaction data are transmitted to Stripe and, where applicable, to participating banks, payment service providers and card organisations. Depending on the processing activity, Stripe acts as a processor and/or as an independent controller. Processing is carried out in particular for contract fulfilment pursuant to Art. 6(1)(b) GDPR and to comply with legal obligations. For users in the EEA, European Stripe entities in Ireland are particularly relevant; international data transfers may be based on appropriate safeguards such as Standard Contractual Clauses or applicable adequacy mechanisms.
6. Newsletter
If you subscribe to our newsletter, we process your email address and, where applicable, your name solely for sending the newsletter. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, in particular via the unsubscribe link in the newsletter. The specific newsletter service provider will be added to this Privacy Policy before the newsletter is activated.
7. Web analytics
If analytics or statistics services that are not technically necessary are used, they will only be activated after you have given your consent. The legal basis is Art. 6(1)(a) GDPR in conjunction with the applicable provisions of the Austrian Telecommunications Act 2021 (TKG 2021). The specific analytics provider, the cookies or technologies used, retention periods and recipients will be added before the service is activated.
8. Cookies and consent management
Technically necessary cookies and comparable storage technologies may be used where required for the operation of the website and shop. Non-essential analytics, marketing or comparable technologies are activated only after consent has been given. Consent may be withdrawn or changed at any time via the cookie settings.
9. Fonts
The fonts used on this website are loaded locally from the website resources. No connection to Google Fonts is therefore established when the fonts are loaded.
10. Social media links
This website may contain links to Instagram, Facebook and Pinterest. Where only external links are used and no social media plugins or embedded content are loaded, displaying the links does not automatically transmit data to these platforms. When you click a link, the privacy policy of the respective provider applies.
11. Retention period
We store personal data only for as long as necessary for the respective purpose or for as long as statutory retention obligations apply. Data relating to orders and business transactions may need to be retained for longer periods, in particular due to tax and corporate-law obligations.
12. Your rights
Subject to the GDPR, you have in particular the right of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future. To exercise your rights, simply contact us at office@seameraki.com.
13. Right to lodge a complaint
If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with a data protection supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna.
14. Changes to this Privacy Policy
We update this Privacy Policy if the services used, technical functions or legal requirements change. Before the shop is published, this version will be checked again against the final Ecwid, Stripe, newsletter, analytics and cookie configuration.