Pasch Fine Violins GmbH
Last updated: 16 October 2026
This Privacy Policy explains how we process personal data when you visit our website, www.paschviolins.com, or contact us. It outlines the purposes and legal bases of data processing, the service providers we use, data retention periods, and your rights under the General Data Protection Regulation (GDPR).
The controller responsible for the processing of your personal data is:
Pasch Fine Violins GmbH
Hadikgasse 72
1140 Vienna
Austria
Telephone: +43 676 451 4713
Email: mail@paschviolins.com
Website: www.paschviolins.com
If you have any questions regarding data protection or wish to exercise your rights, please contact us using the details provided above.
When you visit our website, technically necessary connection data is processed to deliver the requested content to your device and ensure the secure operation of the website.
This may include, in particular, the following data:
- IP address of the accessing device
- Date and time of access
- Pages visited and files requested
- Information about the browser and operating system used
- Technical information relating to the connection and data transmission
This processing is carried out to ensure the availability, stability, and security of our website.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a reliable and secure website.
We use the services of the following provider for hosting and the technical operation of our website:
Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723
USA
As part of these services, Vercel may process personal data relating to website visitors. Contractually engaged subprocessors may also be involved.
Where Vercel processes personal data on our behalf, such processing is governed by the applicable data processing agreements in accordance with Article 28 GDPR.
Further information can be found in Vercel's Privacy Notice:
https://vercel.com/legal/privacy-notice (opens in new window)
Information regarding possible international data transfers is provided in Section 6 of this Privacy Policy.
To ensure the technical security and functionality of our website, our hosting provider may process and store technical connection, access, and security data in server logs.
Such data may include IP addresses, access times, requested resources, technical device and browser information, and information relating to connection errors.
This processing serves, in particular, to identify and resolve technical issues, maintain system security, and prevent unauthorized access and misuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in maintaining the security, stability, and reliability of our website.
The retention period for technical log data depends on the respective processing activities, enabled features, and the applicable technical and organizational policies of the hosting provider. Where we have control over storage, personal log data is not retained for longer than necessary for the purposes described above.
Where individual data records are required to investigate specific security incidents or to establish, exercise, or defend legal claims, they may be retained for a longer period to the extent permitted by law.
We provide a custom-developed contact form on our website.
If you contact us through this form or by email, we process the personal data you provide insofar as necessary to handle your enquiry and communicate with you.
This includes, in particular, the contact details you provide and the content of your message. Depending on the technical implementation, information relating to the time of submission and technically necessary connection data may also be processed.
Please provide only the information necessary for us to handle your enquiry.
Purposes and Legal Bases
Your information is processed for the purpose of handling your enquiry and communicating with you.
Where your enquiry relates to the performance of a contract or to steps taken at your request prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR.
For other enquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in responding to enquiries and communicating with prospective customers, clients, and business partners.
Where statutory retention obligations apply, the relevant processing is based on Article 6(1)(c) GDPR.
Technical Transmission
Information submitted through the contact form is transmitted to our business email inbox, which is operated through Google Workspace, for further processing.
During the technical transmission of messages, service providers necessary for operating the contact form and delivering the message may process personal data.
Data Retention
General enquiries that do not result in a contractual relationship and are not subject to statutory retention obligations are generally deleted six months after the enquiry has been fully processed.
If an enquiry results in a contractual relationship, the data necessary for performing and administering the contract will continue to be processed.
Business and accounting records subject to statutory retention requirements are retained for the periods prescribed by applicable tax and commercial law, generally seven years. Any different or longer statutory retention obligations remain unaffected.
Where data is required to establish, exercise, or defend specific legal claims, it may be retained for a longer period to the extent permitted by law.
Once the relevant purposes and retention requirements no longer apply, the data will be deleted.
We use Google Workspace, including Gmail, for our business email communications.
The service provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
In connection with our email communications, the following personal data may be processed:
- Names and email addresses of senders and recipients
- Email subject lines and message content
- Attached files
- Dates and times of communication
- Technical transmission and security data
Processing takes place for the purpose of receiving, handling, sending, and retaining our business correspondence.
The applicable legal bases depend on the purpose of the communication and correspond to those described in Section 4.
Where Google processes personal data on our behalf, the relevant contractual data processing arrangements apply in accordance with Article 28 GDPR.
Further information about Google's processing of personal data can be found at:
https://policies.google.com/privacy?hl=en (opens in new window)
Information regarding possible international data transfers is provided in the following section.
Within our company, access to personal data is restricted to those individuals who require it to perform their respective duties.
To operate our website and manage our communications, we use technical service providers, particularly Vercel for website hosting and related technical services, and Google Workspace for business email communications.
Where these service providers process personal data on our behalf, such processing is governed by the applicable data processing agreements in accordance with Article 28 GDPR.
Personal data may also be disclosed to public authorities, courts, or legal advisers where required by law or where necessary to establish, exercise, or defend legal claims.
International Data Transfers
The use of our technical service providers may involve the processing or transfer of personal data outside the European Economic Area (EEA).
Vercel is based in the United States of America. In connection with providing and securing our website, personal data may be processed in the United States and other countries where Vercel or its subprocessors operate.
International data transfers may also take place when using Google Workspace.
Where personal data is transferred to countries outside the EEA, the requirements of Articles 44 et seq. GDPR must be observed.
Possible legal mechanisms for such transfers include adequacy decisions adopted by the European Commission under Article 45 GDPR or appropriate safeguards under Article 46 GDPR. Such safeguards include, in particular, Standard Contractual Clauses approved by the European Commission, supplemented by additional protective measures where necessary.
For transfers to appropriately certified companies in the United States, the European Commission's adequacy decision concerning the EU–US Data Privacy Framework may apply.
You may request information about the safeguards applicable to a specific transfer, including how to obtain or access a copy of them, by contacting mail@paschviolins.com.
Our website may use technically necessary cookies and similar technologies to ensure essential functionality, security, and stability.
These may include technologies used for session management, technical security, and protection against unauthorized or abusive access.
Where storing information on your device or accessing information already stored on it is strictly necessary for transmitting a communication or providing a service explicitly requested by you, consent is not required under Section 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).
Any associated processing of personal data is carried out on the applicable legal basis under the GDPR, particularly Article 6(1)(f) GDPR.
Our legitimate interest lies in ensuring the secure and functional operation of our website.
Under our intended website configuration, we do not use our own services for visitor analytics, personalized advertising, or marketing tracking.
If additional technologies requiring consent under applicable law are used, they will only be activated after the necessary consent has been obtained. Any consent given may be withdrawn at any time with effect for the future.
Subject to the applicable legal requirements, you have the following rights regarding your personal data:
Right of Access (Article 15 GDPR)
You have the right to request information about whether we process your personal data and, if so, which personal data we process.
Right to Rectification (Article 16 GDPR)
You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.
Right to Erasure (Article 17 GDPR)
You have the right to request the deletion of your personal data under the conditions provided by law.
Right to Restriction of Processing (Article 18 GDPR)
Under certain circumstances, you have the right to request that the processing of your personal data be restricted.
Right to Data Portability (Article 20 GDPR)
Where the legal requirements are met, you have the right to receive personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transfer to another controller.
Right to Object (Article 21 GDPR)
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
You may object to the processing of your personal data for direct marketing purposes at any time without having to provide specific reasons.
Withdrawal of Consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact us at mail@paschviolins.com or at the postal address provided above.
If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a competent data protection supervisory authority.
In particular, you may contact the supervisory authority in the EU Member State of your habitual residence, your place of work, or the place where the alleged infringement occurred.
In Austria, the competent authority is:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Current contact details and information on how to lodge a complaint are available at:
https://www.dsb.gv.at (opens in new window)
You are not required to provide personal contact information merely to visit our website. However, technically necessary connection data is processed when you access the website.
Providing personal data through our contact form is generally voluntary. Certain information may nevertheless be necessary for us to process and respond to your enquiry. Required fields are identified accordingly in the form.
In connection with entering into or performing a contract, it may be necessary for you to provide additional personal data. Where applicable, we will inform you of such requirements in the relevant context.
No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place in connection with our intended data processing activities.
We regularly review this Privacy Policy and update it where necessary, particularly if the technical services we use, our data processing activities, or the applicable legal requirements change.
The most recent version of this Privacy Policy is available on our website.
