← Back to home

Privacy Policy

This policy explains how we handle personal data under the EU General Data Protection Regulation (GDPR / DSGVO) and the Austrian Data Protection Act (DSG).

1. Controller

The controller responsible for data processing on this website is:

nachtgold studio, an online business based in Vienna, Austria
Email: info@nachtgold.studio

2. What data we process, why, and on what legal basis

a) Purchases and order processing

When you buy a course, we process your name, email address and order details in order to conclude and fulfil the contract with you and to meet our legal (accounting/tax) obligations. Payment card details are entered directly with our payment provider and are not stored by us.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligation).

b) Support and communication

If you contact us by email, we process the data you provide in order to respond to and administer your request.

Legal basis: Art. 6(1)(b) and Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries).

c) Course access and delivery

After purchase we process your email address to give you access to the online course and course materials via the platform we use to deliver the course.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract).

d) Server log files

When you visit the website, our hosting provider automatically processes technical data (e.g. IP address, browser type, date and time of the request) to deliver the site securely and reliably.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website).

e) Local storage / offer timer

This website stores a timestamp in your browser (via a first-party cookie and local storage) so that a personal, time-limited offer displays consistently for you across visits. This entry contains only a date/time value and no directly identifying personal data, and it is not shared with third parties.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in presenting our offer consistently).

f) Advertising

We use the Meta Pixel, a tool provided by Meta Platforms Ireland Ltd., on this website. It helps us measure the performance of our advertising on Facebook and Instagram and show relevant ads. The Meta Pixel may collect information such as your IP address, browser data and the actions you take on this site, and shares this with Meta. You can manage your ad preferences in your Facebook and Instagram settings and through your browser.

Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in effective advertising).

3. Recipients and processors

We share personal data only where necessary, with providers that act as our processors under data processing agreements, in the following categories:

4. Transfers outside the EU/EEA

Some providers (for example Stripe) may process data in or transfer data to third countries such as the United States. In such cases, transfers are safeguarded by appropriate measures under the GDPR, in particular the European Commission’s Standard Contractual Clauses and/or an applicable adequacy decision.

5. Retention

We keep personal data only as long as necessary for the purposes described above. Data relating to purchases and invoices is retained for the statutory period (generally 7 years under § 132 of the Austrian Federal Fiscal Code, BAO). After that, data is deleted or anonymised.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise these rights, contact info@nachtgold.studio.

7. Changes to this policy

We may update this privacy policy to reflect changes to our services or legal requirements. The current version always applies.

Last updated: 07/2026