Privacy policy

Last updated: Aug 10, 2026

Controller & Contact

Lareen Mohammad (Owner, Lareen Atelier) Ferdinand-Platzer-Gasse, 1210 Vienna, Austria. 
Email: contact@lareenatelier.com
Website: www.lareenatelier.com

The protection of your personal data is important to us. We process your data exclusively on the basis of applicable legal provisions (GDPR, Austrian DSG, TKG 2021).

Lareen Atelier operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Lareen Atelier is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

1. Legal Basis for Data Processing

We process your personal data on the following legal bases pursuant to Art. 6 GDPR and § 165(3) TKG 2021:

  • Contract fulfillment (Art. 6(1)(b) GDPR): Processing necessary to fulfill your order
  • Legal obligation (Art. 6(1)(c) GDPR): Processing required by Austrian tax and commercial law
  • Legitimate interest (Art. 6(1)(f) GDPR): Technical operation of the website, fraud prevention, security
  • Consent (Art. 6(1)(a) GDPR): Analytics, marketing cookies — only when you actively give consent via our cookie banner

2. Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. We may collect or process the following categories of personal information depending on how you interact with the Services:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address
  • Financial information including credit card, debit card, payment card information, transaction details and payment confirmation
  • Account information including your username, password, security questions, preferences and settings
  • Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel
  • Communications with us including information you include when sending a customer support inquiry
  • Device information including information about your device, browser, network connection, IP address, and other unique identifiers
  • Usage information including information regarding your interaction with the Services

When you visit our website, your IP address, session start and end time are automatically recorded for technical reasons, constituting a legitimate interest pursuant to Art. 6(1)(f) GDPR.

3. Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you when you create an account, visit or use the Services, or communicate with us
  • Automatically through the Services from your device when you use our products or visit our website, and through the use of cookies and similar technologies
  • From our service providers when we engage them to enable certain technology
  • From our partners or other third parties

4. How We Use Your Personal Information

Depending on how you interact with us, we may use personal information for the following purposes:

Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to process your payments, fulfill your orders, send notifications related to your account, process purchases, returns and exchanges, create and manage your account, arrange for shipping, and create a customized shopping experience for you.

Marketing and Advertising. We use your personal information for marketing and promotional purposes, such as to send marketing communications by email. You may opt out of receiving these at any time by using the unsubscribe option in our emails.

Security and Fraud Prevention. We use your personal information to authenticate your account, provide a secure payment and shopping experience, and detect or take action regarding possible fraudulent or illegal activity.

Communicating with You. We use your personal information to provide customer support and maintain our business relationship with you.

Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process.

5. Cookies

Our website uses cookies – small text files stored on your device by your browser. They cause no harm.

We use technically necessary cookies to operate our shop (e.g. shopping cart, session management). These are based on our legitimate interest pursuant to Art. 6(1)(f) GDPR and § 165(3) TKG 2021 and do not require your consent.

For non-essential cookies (analytics, marketing), we request your consent via our cookie banner. Data is only processed if you actively give your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time via our cookie settings.

To update your cookie preferences, please clear your browser cookies and revisit our website, where you will be prompted to make your selection again. You can do this via your browser settings (Chrome: Settings → Privacy and Security → Clear browsing data; Safari: Settings → Privacy → Manage Website Data; Firefox: Settings → Privacy & Security → Clear Data). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

If you deactivate cookies, some functions of our website may be limited.

6. How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes:

  • Shopify Inc., 151 O'Connor Street, Ottawa, Ontario, K2P 2L8, Canada (shop platform & hosting)
  • PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg (payment processing)
  • Klarna Bank AB, Stockholm, Sweden (payment processing)
  • Post Austria AG, Vienna, Austria (shipping)
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (analytics & tag management)
  • With business and marketing partners to provide marketing services, in accordance with their own privacy notices
  • When required by law, including to respond to subpoenas, search warrants and similar requests

7. Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy at https://privacy.shopify.com/en.

8. Google Services

Google Analytics: Our website uses Google Analytics to analyze website usage. Google Analytics uses cookies to collect anonymized usage data. Your IP address is anonymized before transmission. Legal basis: your consent (Art. 6(1)(a) GDPR). You can opt out at: https://tools.google.com/dlpage/gaoptout

Google Tag Manager: We use Google Tag Manager to manage website tags. It does not collect personal data itself but may trigger other tags that do — only with your consent.

Google Search Console: We use Google Search Console to monitor our website's visibility in Google Search. This service processes anonymized, aggregated data only.

Google LLC is based in the USA. Data transfers are based on the EU-US Data Privacy Framework, which provides an adequate level of data protection.

9. International Data Transfers

Some of our service providers (Shopify, Google, PayPal, Klarna) are based outside the European Economic Area. Data transfers to these providers are based on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. If we transfer your personal information out of the EEA or the UK, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses.

10. Children's Data

The Services are not intended to be used by children. We do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us at contact@lareenatelier.com to request that it be deleted.

11. Data Retention

  • Order data: retained for 7 years pursuant to Austrian tax law (Art. 6(1)(c) GDPR)
  • Product liability data (name, address, purchased items, purchase date): retained for 10 years
  • Contact form inquiries: retained for 6 months
  • Analytics data: retained for the duration specified by the respective service provider
  • If you abandon your shopping cart without completing a purchase, your data is deleted

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, provide you with Services, comply with legal obligations, or resolve disputes.

12. Security

We implement appropriate technical and organizational measures to protect your personal data. Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee perfect security. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

13. Your Rights

Depending on where you live, you have the following rights regarding your personal data:

  • Right to access your personal data (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent at any time
  • Right to opt out of sale or sharing for targeted advertising

To exercise any of these rights, contact us at: contact@lareenatelier.com

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before processing your request.

14. Right to Lodge a Complaint

If you believe that the processing of your data violates data protection law, you have the right to lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde Barichgasse 40-42, 1030 Vienna, Austria dsb.gv.at

For the EEA, you can find a list of all responsible data protection supervisory authorities here: https://edpb.europa.eu/about-edpb/about-edpb/members_en

15. Third Party Websites and Links

The Services may contain links to websites operated by third parties. We are not responsible for the privacy or security of such sites. Please review their privacy policies before engaging with them.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or regulatory reasons. We will post the revised Privacy Policy on this page and update the "Last updated" date. Your continued use of the Services following any changes constitutes acceptance of those changes.

17. Contact

For any questions about this Privacy Policy or to exercise your rights, please refer to the contact details provided at the beginning of this Privacy Policy or reach us directly at contact@lareenatelier.com