PRIVACY POLICY

Last updated: August 20, 2026

1. General Information

This Privacy Policy explains how personal data is processed when you visit https://swanprints.art, subscribe to the newsletter, or contact us by email.

The website is an artwork presentation platform. It does not provide customer accounts, online ordering, payment processing, shipping, or checkout services.

Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian data protection law.

2. Data Controller

The controller responsible for processing personal data is:

Nicola Hackl-Haslinger
Leitnergasse 4
4040 Gramastetten
Austria

Email: photography@nhh.art

Please use this address for any questions or requests concerning your personal data.

3. Hosting and Server Logs

This website and the associated Directus content management system are hosted by:

netcup GmbH
Emmy-Noether-Straße 10
76131 Karlsruhe
Germany

The server is physically located in Manassas, Virginia, USA.

When you access this website, technical information may be processed automatically, including:

IP address
date and time of access
requested page or resource
browser and operating system information
referring website
technical error and security information

This processing is necessary to deliver the website, maintain its technical operation and security, and investigate errors or misuse.

The legal basis is our legitimate interest under Article 6(1)(f) GDPR.

netcup processes this information on our behalf as a processor under an agreement pursuant to Article 28 GDPR.

Server logs are retained only for as long as they are required for technical operation, security, error analysis, or the investigation of incidents. They are deleted or anonymised when they are no longer required. A specific retention period cannot be guaranteed in every case. Information may be retained for longer where this is necessary to comply with legal obligations or to establish, exercise, or defend legal claims.

4. Directus Content Management System

Website content, newsletter subscription data, and media files are managed through a self-hosted Directus content management system located on server infrastructure in the United States.

When your browser loads media from the Directus server, technical connection data such as your IP address, browser information, requested file, and time of access may be transmitted to and processed in the United States.

The Directus database also stores the newsletter information described in Section 5.

This processing is necessary to provide the website, display its artworks, and manage newsletter subscriptions. The applicable legal bases are Article 6(1)(f) GDPR for website operation and Article 6(1)(a) GDPR for newsletter subscriptions.

5. Newsletter Subscription

If you subscribe to the newsletter, we process the information you provide, in particular:

your email address
your selected language or locale
the date and time of subscription
the source of the subscription

The information is stored in our Directus system on the server described above and is therefore processed at the server location in the United States.

The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, for example by contacting us by email.

Your newsletter information is retained until you withdraw your consent or request its deletion, unless continued retention is required by law.

You can unsubscribe using the unsubscribe link included in newsletter emails or by contacting photography@nhh.art.

Newsletter subscription data is retained until you unsubscribe or otherwise withdraw your consent. It will then be deleted unless retention is required by law.

The newsletter does not currently use open or click tracking.

6. Artwork Inquiries and Email Contact

Artwork inquiries are made exclusively through your own email application.

When you select the “Inquire by email” button, the website creates a pre-filled email containing information about the selected artwork, such as:

Artwork title
Artwork reference
Selected edition or format
Link to the artwork page

Opening this link does not automatically transmit personal data to us. Data is only transmitted when you choose to send the email through your email provider.

If you contact us, we process your email address, name, message, and any other information you voluntarily provide in order to respond to your inquiry.

Depending on the nature of the inquiry, the legal basis is:

Article 6(1)(b) GDPR for steps taken at your request before entering into a possible agreement; or
Article 6(1)(f) GDPR for general communication and responding to inquiries.

Email correspondence is retained for as long as necessary to handle the inquiry. It may be retained longer where required to establish, exercise, or defend legal claims or comply with legal obligations.

Please note that your chosen email provider processes your email according to its own privacy policy.

7. Local Browser Storage and Cookies

This website does not use advertising or analytics cookies.

When you select an edition or format on an artwork page, this preference is stored locally in your browser using localStorage. This allows the website to remember your selection when you return to the page.

The stored preference:

remains on your device
does not contain your name or email address
is not transmitted to our server
can be removed by clearing your browser’s website data

No profiling or cross-site tracking is performed.

8. Processing in the United States

Our hosting infrastructure is physically located in Manassas, Virginia, USA. Technical access data and information stored in our Directus system may therefore be processed in the United States.

The hosting provider is netcup GmbH, Germany, which processes personal data on our behalf under an agreement pursuant to Article 28 GDPR.

Further information about the processing of personal data by our hosting provider is available in netcup's privacy policy: https://www.netcup.com/en/contact/data-privacy

9. Data Security

Appropriate technical and organisational measures are used to protect personal data, including:

Encrypted transmission using HTTPS/TLS
Restricted access to administrative systems
Access-controlled CMS infrastructure
Regular software maintenance and security updates

Although reasonable safeguards are used, no internet transmission or storage system can be guaranteed to be completely secure.

10. Your Rights

Subject to the conditions of the GDPR, you may have the right to:

Access your personal data under Article 15 GDPR
Correct inaccurate data under Article 16 GDPR
Request deletion under Article 17 GDPR
Restrict processing under Article 18 GDPR
Receive applicable data in a portable format under Article 20 GDPR
Object to processing based on legitimate interests under Article 21 GDPR
Withdraw consent at any time under Article 7(3) GDPR

To exercise these rights, contact photography@nhh.art.

Providing data through the newsletter form or by email is voluntary. Without an email address, however, we cannot provide the newsletter or respond by email.

No automated decision-making or profiling is performed.

11. Right to Lodge a Complaint

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with a data protection authority.

The competent Austrian authority is:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria

Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at

12. Changes to This Privacy Policy

This Privacy Policy may be updated when the website, its data processing activities, or applicable legal requirements change.

The current version is always available at:

https://swanprints.art/privacypolicy

13. Privacy Contact

For privacy-related questions or requests, please contact:

Nicola Hackl-Haslinger
Leitnergasse 4
4040 Gramastetten
Austria

Email: photography@nhh.art