Privacy Policy
Last updated: 24 July 2026

1. Controller and contact

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Denise Schellmann
Ulmenstrasse 141
1140 Vienna
Austria
Email: office@deniseschellmann.com

If you have any questions about data protection or wish to exercise your rights, you may contact this address at any time. Appointing a data protection officer is not legally required, as neither the scope nor the nature of the processing makes this necessary.

2. General information on data processing

Protecting your personal data is important to us. Personal data is processed only to the extent technically necessary and within the framework of the applicable legal provisions. This policy explains which data is collected when you visit this website, the purposes for which it is used, and the legal basis on which this takes place.
The legal bases for processing follow from Article 6 GDPR. Depending on the case, processing is carried out on the basis of your consent (Art. 6 (1) (a)), for the performance or initiation of a contract or an enquiry (Art. 6 (1) (b)), to comply with a legal obligation (Art. 6 (1) (c)) or on the basis of a legitimate interest (Art. 6 (1) (f)). The applicable basis is stated with each individual processing activity.

3. Hosting and provision of the website

This website is hosted by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. In this context, Wix processes personal data on our behalf as a processor on the basis of a data processing agreement pursuant to Article 28 GDPR.
When you access the website, data is automatically collected for technical reasons and stored in what are known as server log files. This includes in particular the IP address of the accessing device, the date and time of access, the browser type and version, the operating system used and the previously visited page (referrer). This processing is necessary in order to provide the website technically, to ensure its stability and security, and to prevent misuse. The legal basis is our legitimate interest in a secure and functional website pursuant to Art. 6 (1) (f) GDPR. Log files are stored only for as long as required for these purposes and are then deleted or anonymised.
Further information on data processing by Wix is available in the Wix privacy policy at https://www.wix.com/about/privacy.

 

4. Cookies and consent management

This website uses cookies and comparable technologies. Cookies are small text files stored on your device. Technically necessary cookies are required for the website to function and are set on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
Cookies that are not technically necessary, in particular those used for audience measurement, are only used with your prior consent. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Section 165 (3) of the Austrian Telecommunications Act 2021 (TKG 2021). Using the cookie banner shown when you first access the website, you can decide for yourself which categories to allow. You can change or withdraw your choice at any time with effect for the future via the cookie settings on this website.
You can also manage, block or delete cookies through your browser settings. If cookies are fully disabled, some functions of the website may not be available.

5. Visitor statistics

To improve our offering, we analyse the use of this website in pseudonymised form. For this purpose we use exclusively the visitor statistics integrated into the Wix platform. This records information such as the pages accessed, the approximate regional origin, the type of device used, and the date and time of access. The analysis is carried out in pseudonymised form and serves statistical purposes only. No merging with other data sources and no cross-site tracking takes place. Google Analytics is not used.
Where cookies that are not necessary are set for this purpose, this is done only with your consent pursuant to Art. 6 (1) (a) GDPR. Otherwise, the pseudonymised analysis is based on our legitimate interest in designing the website to meet user needs pursuant to Art. 6 (1) (f) GDPR. You may object to this processing or withdraw your consent at any time.

 

6. Newsletter

On this website you can subscribe to a newsletter with which we inform you about exhibitions, events, new works and editions. The newsletter is sent using the Wix newsletter function (Wix Email Marketing), provided by Wix.com Ltd. as a processor.
We use the double opt-in procedure for registration. After you sign up, you receive an email asking you to confirm your registration. Only after confirmation do we add your address to the mailing list. Your email address is required for this; providing a name is voluntary. To document your consent, we store the registration, the time of confirmation and the IP address used.
The legal basis for the processing is your consent pursuant to Art. 6 (1) (a) GDPR. You can unsubscribe from the newsletter and withdraw your consent at any time, for example via the unsubscribe link at the end of each newsletter email or by sending a message to office@deniseschellmann.com. After you unsubscribe, your data is deleted from the mailing list, unless retention is required to prove the original consent.

7. Contact by form and email

If you contact us via the contact form or by email, we process the data you provide, in particular your name, your email address and the content of your message, in order to handle and respond to your enquiry. Enquiries about works are handled individually by email only; no purchase or payment processing takes place through this website.
The legal basis is Art. 6 (1) (b) GDPR where your enquiry is directed at concluding or initiating a contract, and otherwise our legitimate interest in responding to enquiries pursuant to Art. 6 (1) (f) GDPR. We store your details until your enquiry has been fully dealt with and then delete them, unless statutory retention obligations apply.

8. Embedded video content (YouTube and Vimeo)

Individual pages of this website may contain videos hosted by the providers YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) or Vimeo (Vimeo Inc., 330 West 34th Street, New York, New York 10001, USA). When you play such a video, a connection is established to the provider’s servers, through which the provider receives your IP address and information about the page accessed. We have no influence over the further processing carried out by these providers.
Where cookies are set or data is transferred in this context, this is done on the basis of your consent pursuant to Art. 6 (1) (a) GDPR. Further information is available in the providers’ privacy policies at https://policies.google.com/privacy and https://vimeo.com/privacy.

9. Links to social media profiles

This website contains links to our profiles on social networks, in particular Instagram and Facebook (Meta Platforms Ireland Limited), LinkedIn (LinkedIn Ireland Unlimited Company), TikTok (TikTok Technology Limited) and Vimeo (Vimeo Inc.). These are simple links, not embedded content. A transfer of data to the networks therefore takes place only once you actively click one of these links and access the respective platform. The respective providers are responsible for processing your data on these platforms. Please consult their privacy policies for information on the nature, scope and purpose of the processing.

 

10. Recipients and transfers to third countries

We only disclose personal data to recipients who support us in providing the website and our communications, in particular to our processor Wix.com Ltd. This processor was selected with care and is contractually bound.
Wix.com Ltd. is based in Israel. An adequacy decision of the European Commission exists for Israel, recognising an adequate level of data protection. Where data is transferred to service providers in the United States or other third countries as part of the processing, this is done on the basis of appropriate safeguards, in particular the European Commission’s standard contractual clauses or certification under the EU-US Data Privacy Framework. Beyond this, your data is not passed on to third parties unless we are legally obliged to do so.

11. Storage period

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations. After that, the data is deleted or anonymised. Where processing is based on consent, we store the data until that consent is withdrawn.

12. Your rights as a data subject

Under the GDPR you have the following rights: the right of access to the data stored about you (Art. 15), the right to rectification of inaccurate data (Art. 16), the right to erasure (Art. 17), the right to restriction of processing (Art. 18), the right to data portability (Art. 20) and the right to object to certain processing (Art. 21). Where you have given consent to processing, you may withdraw that consent at any time with effect for the future (Art. 7 (3)). The lawfulness of processing carried out before the withdrawal remains unaffected.
To exercise your rights, an informal message to office@deniseschellmann.com is sufficient.

13. Right to lodge a complaint with a supervisory authority

If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with a supervisory authority. The authority responsible for Austria is:
Austrian Data Protection Authority (Österreichische Datenschutzbehörde)
Barichgasse 40-42
1030 Vienna
Phone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Web: https://www.dsb.gv.at

14. Data security

This website uses SSL or TLS encryption to protect the transmission of your data. You can recognise an encrypted connection by the lock symbol in your browser’s address bar and by the "https" in the address.

15. No automated decision-making

Automated decision-making, including profiling within the meaning of Article 22 GDPR, does not take place.

 

16. Currency and amendment of this privacy policy

This privacy policy is dated 24 July 2026. As the website develops or in response to changes in legal requirements, it may become necessary to amend this policy. The current version is always available on this website.