Privacy Policy
Privacy Policy
Status: January 3, 2026
The protection of your personal data is very important to us. In this privacy policy, we inform you about what personal data we collect, how we use it, and what rights you have.
1. Controller
The data controller for this website is:
RGNCY® | HEADSHOT®
Gordana Dragutinovic
Linzerstrasse 126
3003 Gablitz
Austria
Email: office@rgncy.eu
Phone: +43 660 1629330
2. Collection and Storage of Personal Data
2.1 When visiting our website
When you access our website, information is automatically sent to our website's server by the browser used on your device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
The aforementioned data is processed by us for the following purposes:
- Ensuring a smooth connection to the website
- Ensuring comfortable use of our website
- Evaluation of system security and stability
- For further administrative purposes
The legal basis for data processing is Art. 6 para. 1 lit. f GDPR (legitimate interest).
2.2 For orders
When you place an order in our online shop, we collect the following data:
- Name and address
- Email address
- Phone number (optional)
- Payment information
- Order data (products, quantities, prices)
We need this data for contract fulfillment (Art. 6 para. 1 lit. b GDPR) and to comply with tax retention obligations (Art. 6 para. 1 lit. c GDPR).
2.3 For contact
If you contact us by email or contact form, your details will be stored by us for processing the inquiry and for any follow-up questions. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest).
3. Disclosure of Data
Your personal data will not be transmitted to third parties for purposes other than those listed below.
We will only disclose your personal data to third parties if:
- you have given your explicit consent (Art. 6 para. 1 lit. a GDPR)
- the disclosure is necessary for contract fulfillment (e.g., to shipping service providers) (Art. 6 para. 1 lit. b GDPR)
- there is a legal obligation to disclose (Art. 6 para. 1 lit. c GDPR)
4. Shopify as E-commerce Platform
Our online shop is operated via the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
Shopify also processes your data on servers in the USA and other countries. Shopify is certified under the EU-US Data Privacy Framework. Further information can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy
When you visit our online shop and make purchases, Shopify processes your data to provide you with services, including those based on your interactions with other merchants and with Shopify. For more information, please see the Shopify Privacy Policy for Consumers.
5. Cookies and Similar Technologies
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. Some cookies are technically necessary, while others serve marketing and analysis purposes.
You can adjust your cookie settings at any time via our cookie banner. Technically necessary cookies cannot be deactivated, as they are required for the operation of the website.
6. Your Rights
You have the following rights regarding your personal data:
Right of access (Art. 15 GDPR): You have the right to request information about your personal data processed by us.
Right to rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate data or the completion of incomplete data.
Right to erasure (Art. 17 GDPR): You have the right to request the erasure of your personal data, provided that no legal retention obligations prevent this.
Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your data.
Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format.
Right to object (Art. 21 GDPR): You have the right to object to the processing of your data on grounds relating to your particular situation.
Right to withdraw consent (Art. 7 para. 3 GDPR): If processing is based on consent, you can withdraw it at any time.
Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The Austrian Data Protection Authority is responsible: www.dsb.gv.at
7. Data Security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.
8. Storage Duration
We store personal data only as long as necessary to fulfill the respective purposes or if legal retention periods exist (e.g., 7 years for tax documents according to the BAO).
9. Opt-out of data sale and sharing
You have the right to object to the sharing or "sale" of your personal data. Further information can be found on our Data Privacy Settings page.
10. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply to your next visit.
Contact
If you have any questions about data protection, you can reach us at:
Email: office@rgncy.eu
Phone: +43 660 1629330
