Privacy Policy

The protection of your personal data is of particular importance to us.

We process your data exclusively on the basis of the General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG), and the Telecommunications Act (TKG 2021).

This privacy policy informs you about which personal data we process when you use our website, our chat function and other services, for what purposes this happens and what rights you are entitled to.

  1. Hosting & Server-Logfiles

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

When you visit our website, the following data is automatically processed and stored in server log files:

IP address of the end device

Date and time of access

accessed page/file

Browser type and version

Referrer URL

amount of data transferred

User's operating system

Purpose of processing:

Website operation and security, abuse detection, error analysis

Rechtsgrundlage: Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse)

7–14 days, at the latest until the aforementioned purposes have been achieved

This data will not be merged with other sources.

  1. Cookies & Consent Management

We use cookies to make our website user-friendly and to enable certain functions.

Some cookies are technically necessary and are set without your consent.

We only set cookies for analysis and marketing purposes if you have given us your prior consent (opt-in).

To manage your consents we use the tool CookieYes

This saves your selection (consent or refusal, time, pseudonymous ID) locally on your device.

You can revoke or change your consent at any time via the cookie banner.

Purpose/Legal basis:

Technically necessary cookies: Section 165 para. 3 TKG 2021

Analysis and marketing cookies: Art. 6 (1) (a) GDPR (consent)

  1. Embedded content & third-party providers

Our website integrates external content and services, the use of which involves transferring data such as IP addresses and device information to the respective providers.

This data processing only takes place after your express

Third-party providers used:

OpenAI, Inc., USA – Chat function Anthropic – Chat function

– YouTube, Google Analytics, Google Tag Manager

Meta Platforms Ireland Ltd. – Facebook Pixel, Instagram

TikTok Technology Limited – TikTok-Videos

LinkedIn Ireland Unlimited Company – LinkedIn-Inhalte

Google Fonts (lokal eingebunden) – keine Datenübertragung

Review widgets (e.g. Google Reviews)

Transfer to third countries:

Data transfers to the USA are carried out exclusively:

on base of the EU-US Data Privacy Frameworks (Art. 45 DSGVO) oder,

if not applicable, based on Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.

  1. 4. Google Analytics

We use Google Analytics to evaluate user behavior on our website and to optimize our offering.

Responsible provider:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Data processed:

IP address (shortened/anonymized)

Usage data such as pages visited, click paths, length of stay

Device type, browser information

Location data (approximate, based on IP)

Purpose/Legal basis:

Art. 6 (1) (a) GDPR (consent)

Storage period:

Data is stored for a maximum of 14 months and then automatically deleted.

We have concluded a data processing agreement with Google.

  1. Facebook Pixel

To optimise our marketing measures and to display personalised advertising, we use the Facebook Pixel.

Responsible provider:

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland.

Data processed:

IP address

To optimise our marketing measures and to display personalised advertising, we use the Facebook Pixel.

Nutzungsdaten

Device information

Facebook ID (if logged in)

Purpose/Legal basis:

Art. 6 (1) (a) GDPR (consent)

Meta may combine this data with other data of its own and use it for its own purposes.

For further information, please see the Meta Privacy Policy.

5. Contact

If you contact us via form or email, we will process your information (e.g. name, email address, message) to process your request.

Legal basis:

Art. 6 (1) (b) GDPR (pre-contractual communication)

Art. 6 (1) (f) GDPR (legitimate interest in customer communication)

Storage period:

Until your request has been fully answered and resolved, and thereafter only as long as statutory retention periods apply.

  1. 8. Chat function

Our chat function is provided via the OpenAI API or alternatives like Claude by Anthropic.

Data processed:

Content of your chat messages during the session

if applicable, metadata such as IP address, timestamp, technical error logs

do not permanently save chat content

The third party operator for AI services receives the content solely for the purpose of providing the chat function.

Where possible, the service is configured to allow chat content

Third country transfer:

Since OpenAI is based in the USA, the transfer is based on the EU-US Data Privacy Framework or Standard Contractual Clauses.

For further information, please visit the OpenAI Policy pages of the service providers.

Purpose/Legal basis:

For registered users: Art. 6 (1) (b) GDPR (performance of contract)

For other users: Art. 6 (1) (f) GDPR (legitimate interest)

  1. Payment processing (Stripe)

We use Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin for payment.

Data processed:

Name, email, billing address

Payment information (tokenized, we do not store complete card details)

Transaction and fraud prevention data

Legal basis:

Art. 6 (1) (b) GDPR (contract)

Art. 6 (1) (f) GDPR (legitimate interest in secure payment processing)

For further information, please see our privacy policy.

  1. 10. Storage & Deletion

We only store personal data for as long as necessary for the respective purposes or as long as statutory retention periods apply.

After these deadlines, the data will be irrevocably deleted.

  1. Minors

Our offer is not aimed at persons under 18 years of age.

If we become aware that we have personal data of minors, we will delete it immediately.

  1. Your rights

You have the following rights under the GDPR:

Information (Art. 15 GDPR)

Correction (Art. 16 GDPR)

Deletion (Art. 17 GDPR)

Restriction of processing (Art. 18 GDPR)

Data portability (Art. 20 GDPR)

Objection to certain processing (Art. 21 GDPR)

Revocation of consent (Art. 7 para. 3 GDPR)

To assert your rights, please contact hello@paulinagreen.com.

  1. Responsible body

Name Melanie Liebisch

Email: hello@paulinagreen.com

Contact form

Since I operate a sole proprietorship and am not required to appoint a data protection officer, I do not have an external data protection officer. For all data protection concerns, please contact the address provided above.

  1. 18. Right to complain

If you believe that your data is being processed unlawfully, you have the right to lodge a complaint with the competent supervisory authority:

Austrian Data Protection Authority

Barichgasse 40-42, 1030 Vienna

Web: www.dsb.gv.at

  1. Changes to this privacy policy

We reserve the right to adapt this privacy policy if this is necessary due to technical, legal or organizational changes.

We will actively inform you of any significant changes that affect your consent by email or notice on the website.

Status: Salzburg, 04.01.2026