Klavieratelier Nord

Privacy Policy

Last updated: 29 July 2026

This Privacy Policy explains how Klavieratelier Nord (“we”, “us”, “our”) processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR” / “DSGVO”), the Austrian Data Protection Act (Datenschutzgesetz, DSG), and guidance from the Österreichische Datenschutzbehörde (DSB).

1. Data controller

Business name: Klavieratelier Nord
Address: Alser Straße 41, 1080 Vienna, Austria
Email: [email protected]
Phone: +43 1 406 82 15
Website: alluscaseo.hair

For data protection enquiries or to exercise your rights, contact us using the details above. We respond within one month, or inform you if an extension is required under Art. 12 GDPR.

2. Scope

This policy applies to personal data collected through our website, enquiry forms, email, phone, and in-studio lesson administration relating to adult students and website visitors.

3. Categories of personal data

  • Identity and contact data: name, email, phone number, postal address where provided.
  • Lesson data: experience level, repertoire notes, attendance, practice guidance.
  • Financial data: invoice details and payment references (we do not store full card numbers).
  • Technical data: IP address, browser type, device information, pages visited, cookie identifiers (see our Cookie Policy).
  • Communications: messages and call notes related to enquiries and lessons.

4. Purposes and legal bases

  • Contract performance (Art. 6(1)(b) GDPR): handling enquiries, booking trial and regular lessons, delivering tuition, invoicing.
  • Legal obligation (Art. 6(1)(c)): tax and accounting records; responding to lawful authority requests.
  • Legitimate interests (Art. 6(1)(f)): studio safety, service improvement, and limited operational messages about schedule changes — balanced against your rights.
  • Consent (Art. 6(1)(a)): optional analytics cookies. You may withdraw consent at any time.

5. Recipients and processors

We may share personal data with IT/hosting and email providers under Art. 28 GDPR processing agreements, professional advisers under confidentiality, and public authorities where required by law. We do not sell personal data. Transfers outside the EEA use appropriate safeguards such as Standard Contractual Clauses.

6. Retention

  • Active student records: duration of enrolment plus up to 7 years for tax and legal purposes.
  • Enquiry records not converted to enrolment: up to 12 months.
  • Website analytics (if consented): generally up to 26 months.
  • Financial records: minimum 7 years under Austrian tax law (Bundesabgabenordnung).

7. Your rights

Under GDPR and DSG, you have the right to access, rectification, erasure, restriction, portability (where applicable), objection to processing based on legitimate interests or direct marketing, and withdrawal of consent. You may lodge a complaint with:

  • Authority: Österreichische Datenschutzbehörde (DSB)
  • Address: Barichgasse 40–42, 1030 Vienna, Austria
  • Website: www.dsb.gv.at

8. Security

We implement appropriate technical and organisational measures including access controls and careful handling of physical lesson notes. No Internet transmission is completely secure.

9. Adult students

Our studio offers tuition for adults. We do not knowingly collect children’s data for marketing. If you believe we have received a minor’s data in error, contact us for deletion.

10. Changes

We may update this policy from time to time. The current version is always published on this page with the date above.