We process your data exclusively on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Telecommunications Act (TKG 2021).
This privacy policy informs you about which personal data we process when you use our website, our chat function, and other services, for what purposes this is done, and what rights you have.
Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.
When you access our website, the following data is automatically processed and stored in server log files:
IP address of the device
Date and time of access
Page/file accessed
Browser type and version
Referrer URL
Amount of data transferred
User’s operating system
Purpose of processing:
Operation and security of the website, misuse detection, error analysis
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)
Storage period: 7–14 days, at the latest until the aforementioned purposes are achieved
This data is not combined with other data sources.
We use cookies to make our website user-friendly and to enable certain functions.
Some cookies are technically necessary and are set without your consent.
We only set cookies for analysis and marketing purposes if you have given us your prior consent (opt-in).
At the point given, we use the CookieYes cookie consent tool to manage your consent. We reserve ourselves the right to change to another cookie consent tool if necessary.
This tool stores your selection (consent or refusal, time, pseudonymous ID) locally on your device.
You can withdraw or change your consent at any time via the cookie banner.
Legal basis:
Technically necessary cookies: Section 165 Paragraph 3 of the Austrian Telecommunications Act 2021 (TKG 2021)
Analytics and marketing cookies: Article 6 Paragraph 1 Letter a of the GDPR (consent)
Our website integrates external content and services. When you use these, data such as your IP address and device information is transferred to the respective provider.
This data processing only occurs after you have given your explicit consent via the cookie banner (prior blocking).
Third-party providers used:
OpenAI, Inc., USA – Chat function
Google Ireland Limited – YouTube, Google Analytics, Google Tag Manager
Meta Platforms Ireland Ltd. – Facebook Pixel, Instagram
TikTok Technology Limited – TikTok videos
LinkedIn Ireland Unlimited Company – LinkedIn content
Google Fonts (locally embedded) – no data transfer
Review widgets (e.g., Google Reviews)
Transfer to third countries:
Data transfers to the USA are carried out exclusively:
based on the EU-US Data Privacy Framework (Art. 45 GDPR) or,
if not applicable, based on Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.
We use Google Analytics to analyze user behavior on our website and optimize our services.
Responsible provider:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Data processed:
IP address (truncated/anonymized)
Usage data such as pages visited, click paths, and time spent on the site
Device type, browser information
Location data (approximate, based on IP address)
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent)
Storage period:
Data is stored for a maximum of 14 months and then automatically deleted.
We have concluded a data processing agreement with Google.
5. Pixel use
We use the Facebook Pixel to optimize our marketing efforts and deliver personalized advertising.
Responsible provider:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.
Data processed:
IP address
Usage data (pages visited, clicks)
Device information
Facebook ID (if logged in)
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent)
Meta may combine this data with other data it holds and use it for its own purposes.
Further information can be found in the Meta Privacy Policy.
When you contact us via form or email, we process your information (e.g., name, email address, message) to handle your request.
Legal basis:
Art. 6 para. 1 lit. b GDPR (pre-contractual communication)
Art. 6 para. 1 lit. f GDPR (legitimate interest in customer communication)
Storage period:
Until your request has been fully answered and resolved, and thereafter only as long as statutory retention obligations apply.
Our chat function is provided via the OpenAI API.
Data processed:
Content of your chat messages during the session
Possibly metadata such as IP address, timestamp, and technical error logs
We do not permanently store chat content.
OpenAI receives the content solely for the purpose of providing the chat function.
Where possible, the service is configured so that chat content is not used for training purposes.
We reserve ourselves the right to change to an other AI API services provider to maintain our services or develop our products if necessary.
Transfer to third countries:
Since OpenAI is based in the USA, the transfer is based on the EU-US Data Privacy Framework or Standard Contractual Clauses.
Further information can be found in the OpenAI Policies.
Legal basis:
For registered users: Art. 6 para. 1 lit. b GDPR (performance of a contract)
For other users: Art. 6 para. 1 lit. f GDPR (legitimate interest)
We use Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland, for payments.
Data processed:
Name, email address, billing address
Payment information (tokenized; we do not store complete card details)
Transaction and fraud prevention data
Legal basis:
Art. 6 para. 1 lit. b GDPR (contract)
Art. 6 para. 1 lit. f GDPR (legitimate interest in secure payment processing)
Further information can be found in the Stripe Privacy Policy.
We only store personal data for as long as necessary for the respective purposes or as required by statutory retention periods.
Ephemeral storing on paulinagreen.com:
Chat histories, user uploads, and downloads are deleted after a session ends. (ephemeral) In addition to that, a deletion of cache is also performed once daily. We do not save, train or sell any content of our users.
After these periods expire, the data is permanently deleted.
Our services are not intended for individuals under the age of 18.
If we become aware that we hold personal data of minors, we will delete it immediately.
Under the GDPR, you have the following rights:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to certain processing (Art. 21 GDPR)
Right to withdraw consent (Art. 7 para. 3 GDPR)
To exercise your rights, please contact hello@paulinagreen.com.
Name: Melanie Liebisch
Email: hello@paulinagreen.com
Contact Form
As I operate a sole proprietorship and am not required to appoint a data protection officer, there is no external data protection officer. For all data protection matters, please contact me directly at the address provided above.
If you believe that your data is being processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority
Barichgasse 40-42, 1030 Vienna
Website: www.dsb.gv.at
We reserve the right to amend this privacy policy if necessary due to technical, legal, or organizational changes.
We will actively inform you of any significant changes affecting your consents via email or a notice on the website.
Last updated: Salzburg, January 4, 2026