Last updated: September 2026

The protection of your personal data is important to me. This privacy policy explains what personal data is processed when you visit this website, contact me, or subscribe to the KatjArt newsletter.

1. Controller

The controller responsible for data processing on this website is:

Katja Reichert
KatjArt
Hauptstrasse 48
2641 Schottwien
Austria

Email: [email protected]

2. Visiting this website

When you visit this website, technical information may be processed automatically in order to display the website correctly and securely. This can include, for example, your IP address, browser and device information, date and time of access, and requested pages or files.

This processing is necessary for the technical operation, security and stability of the website and is based on my legitimate interest pursuant to Art. 6(1)(f) GDPR.

The website is operated using the HighLevel platform. HighLevel processes data on my behalf as a data processor. Depending on the technical service involved, data may also be processed by HighLevel's subprocessors outside the European Economic Area. HighLevel provides safeguards for international data transfers, including the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

3. Contact form

If you contact me using the contact form, the information you provide — in particular your name, email address and message — is processed so that I can respond to your enquiry.

Where your enquiry relates to a possible contract or purchase, processing is based on Art. 6(1)(b) GDPR. For other enquiries, processing is based on my legitimate interest in responding to correspondence pursuant to Art. 6(1)(f) GDPR.

The contact form is provided through the HighLevel platform. The information submitted through the form is therefore processed and stored within that system on my behalf.

I retain correspondence only for as long as necessary for the purpose for which it was submitted, unless statutory retention obligations require longer storage.

4. Newsletter

You can voluntarily subscribe to the KatjArt newsletter. For this purpose, your email address is required; providing your first name is optional.

The newsletter is sent using Brevo, an email marketing service. The information entered in the subscription form is transferred to and processed by Brevo for the purpose of managing subscriptions and sending the newsletter.

Subscription uses a double opt-in procedure. After signing up, you receive an email asking you to confirm your subscription. This helps ensure that nobody can subscribe using someone else's email address and provides evidence of consent.

Newsletter processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time by using the unsubscribe link contained in every newsletter or by contacting me. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Brevo processes and stores its databases on servers within the European Union.

5. Protection against misuse (Cloudflare Turnstile)

To protect the newsletter sign-up form against automated submissions and misuse, this website uses Cloudflare Turnstile, a service provided by Cloudflare, Inc.

Turnstile performs security checks in the visitor’s browser in order to distinguish human users from automated access. In doing so, Cloudflare may process technical information such as the IP address, browser and device characteristics, user-agent information, and other security-related signals. Turnstile does not access or transmit the contents entered into the newsletter form.

The processing is carried out for the purpose of protecting the website and its forms against spam, bots and other misuse. The legal basis is our legitimate interest in the security and reliable operation of our website and forms pursuant to Art. 6(1)(f) GDPR.

Cloudflare may process data outside the European Economic Area. Further information about the processing of data by Cloudflare Turnstile can be found in Cloudflare’s Turnstile Privacy Addendum and Privacy Policy.

6. Cookies and similar technologies

This website uses technically necessary cookies or similar technologies where required for the operation and security of the website.

Additional technologies associated with embedded third-party services are used only in accordance with the applicable consent requirements.

You can make or change your choices using the cookie settings provided on the website. Consent, where given, can be withdrawn at any time through those settings.

I do not currently use Google Analytics, Meta/Facebook Pixel or comparable advertising or behavioural tracking tools on this website.

7. Recipients and processors

Personal data is only shared where this is necessary for the operation of the website and the services described above, where I am legally required to do so, or where another legal basis permits it.

Service providers used in connection with this website include in particular:

HighLevel — website platform, hosting infrastructure and contact-form processing
Brevo — newsletter subscription management and email delivery

These service providers process personal data in accordance with their respective contractual and data-protection obligations.

8. Storage period

Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention obligations.

Newsletter data is generally stored until you unsubscribe or withdraw your consent. Certain information may subsequently be retained where necessary to document previously given consent or to comply with legal obligations.

9. Your rights

Under the GDPR, you have the right, subject to the applicable legal requirements, to:

request access to your personal data;

request correction of inaccurate data;

request deletion of your data;

request restriction of processing;

object to processing based on legitimate interests;

receive data you have provided in a portable format where the requirements for data portability are met; and

withdraw consent at any time where processing is based on consent.

To exercise these rights, you can contact me at [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority. In Austria, the competent authority is the Österreichische Datenschutzbehörde.

10. Changes to this Privacy Policy

This privacy policy may be updated if the website, the services used on it, or the applicable legal requirements change. The current version is always available on this website.