Privacy Policy

Last updated: 2 October 2026

1. Who is responsible?

Daniela Kemmer, Graphics by Dany, 6850 Dornbirn, Austria, is responsible for the customer information she uses to manage this shop and answer enquiries. For privacy enquiries, email graphicsbydany78@gmail.com or use the shop contact form (https://payhip.com/GraphicsByDany/contact).

This notice concerns Graphics by Dany on Payhip (https://payhip.com/GraphicsByDany). The applicable framework is the EU General Data Protection Regulation (GDPR), the Austrian Data Protection Act (DSG) and, for cookies and similar technologies, Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).

2. Orders and downloads

When you buy a product or request a free download, Payhip collects the information needed for checkout and delivery. Depending on the transaction, this includes your name, email address, billing and tax information, selected products, order number, payment status and purchase date. Payhip shares relevant customer and order information with me.

I use this information to supply downloads, answer order-related questions and maintain required transaction records. Contract-related processing is based on Article 6(1)(b) GDPR; legally required accounting and tax processing is based on Article 6(1)(c) GDPR. Without the necessary checkout information, the order or email delivery cannot be completed.

3. Contact enquiries

If you contact me, I use your email address, message and any relevant order details to answer you. Purchase-related enquiries are processed under Article 6(1)(b) GDPR. For other enquiries, Article 6(1)(f) GDPR applies: my legitimate interest in responding to messages addressed to the shop.

Emails sent to the stated Gmail address are handled through Google's email service. This involves processing sender and recipient details and message content. See Google's Privacy Policy (https://policies.google.com/privacy?hl=en). Please do not include unnecessary sensitive information in your message.

4. Shop and payment providers

Payhip Limited provides the storefront, checkout and download delivery. It also handles technical information such as IP addresses, browser information and access data to operate and secure its platform. For its own platform processing, Payhip identifies itself as a controller. See Payhip's Privacy and Cookies Policy (https://payhip.com/privacy).

Paid checkout uses Stripe. Stripe handles payment details and processes transaction and security information, including for fraud prevention and legal obligations. I receive the order and payment information needed to administer your purchase, rather than your full payment-card details. Depending on the processing activity, Stripe acts as a processor or an independent controller. See Stripe's Privacy Policy (https://stripe.com/privacy) and Privacy Center (https://stripe.com/at/legal/privacy-center).

These providers' notices supplement this notice; they do not replace information about my own use of customer data. PayPal payments are not accepted in this shop.

5. Cookies and technical data

Payhip's optional analytics tracking is disabled for this shop, including after cookie acceptance. Necessary cookies and technical processing can still support the shopping cart, checkout, download access and platform security.

Cookies that are strictly necessary for a service you request fall under the exception in Section 165(3) TKG 2021. Associated personal-data processing must also have an appropriate GDPR basis, such as Article 6(1)(b) for the requested service or Article 6(1)(f) for the legitimate interest in platform security. You can manage stored cookies through your browser; blocking necessary cookies may affect checkout or downloads. Payhip's policy describes its platform cookies.

6. How long is information kept?

Order and accounting records subject to Austrian tax retention duties are normally retained for seven years from the end of the relevant calendar year, and longer where necessary for pending proceedings. Other enquiry and support information is retained only as long as needed to handle the matter and associated obligations or claims. Providers apply their own retention rules to data for which they are independently responsible.

7. International processing and external links

Payhip is based in the United Kingdom. Transfers covered by the European Commission's UK adequacy decision may rely on Article 45 GDPR. Stripe and Google operate internationally and may process information outside the European Economic Area, including in the United States. Their published notices describe applicable adequacy arrangements and safeguards, including EU Standard Contractual Clauses where relevant. You can request information or a copy of relevant safeguards through the contacts provided in their notices.

Links to the blog, Facebook and Discord lead to other services. When you follow a link, the destination may receive technical information about your visit and processes it under its own privacy notice.

8. Your rights

Subject to the GDPR's conditions, you may request access, correction, erasure, restriction and portability of your personal data. You may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent for the future without affecting earlier lawful processing.

Contact graphicsbydany78@gmail.com to exercise rights relating to my processing. For processing independently carried out by Payhip, Stripe or Google, you can also contact the relevant provider.

You may complain to a data protection supervisory authority, including the Austrian Data Protection Authority (https://dsb.gv.at/).