Privacy Policy
Last updated: 27 May 2026
1. Who is responsible
The data controller for this website is:
Ernesto Piovesan (trading as Huks)
Kaiserstrasse 105/01/21
1070 Wien, Austria
Email: hello@huks.studio
No Data Protection Officer is required or appointed. For
any privacy questions or to exercise your rights, contact
2. What I collect and why
2.1 When you browse the shop
- Data: browser, network, device, referring page, IP
address, pages viewed, clicks, scrolling, searches,
timestamps
- Purpose: run the site, prevent abuse, understand
traffic
- Legal basis: legitimate interest (Art. 6(1)(f) GDPR)
for the site running; consent (Art. 6(1)(a)) for
analytics
- Shared with: Squarespace (my hosting platform)
2.2 When you place an order
- Data: name, email, phone, billing and shipping
address, order details (size, product), payment
confirmation (I never see full card details)
- Purpose: fulfill your order, invoice, tax record
keeping, support
- Legal basis: performance of contract (Art. 6(1)(b));
legal obligation for tax records (Art. 6(1)(c))
- Shared with: Squarespace (checkout/hosting), Printful
(production and shipping), PayPal or Stripe (payment
processing), and shipping carriers (delivery)
2.3 When you use address autocomplete at checkout
- Data: partial address text you type
- Purpose: suggest completed addresses
- Legal basis: legitimate interest
- Shared with: Google Places API (US)
2.4 When you create a customer account
- Data: name, email, address, order history
- Purpose: faster checkout, order history, support
- Legal basis: performance of contract
- Shared with: Squarespace
2.5 When you send a message via the contact form
- Data: whatever you fill in (name, email, message)
- Purpose: respond to your inquiry
- Legal basis: legitimate interest, or contract if it
relates to a purchase
- Shared with: Squarespace (form storage), my email
provider
2.6 When you subscribe to marketing emails
- Data: email address
- Purpose: send occasional shop updates and drop
announcements
- Legal basis: consent (Art. 6(1)(a))
- You can unsubscribe from any marketing email via the
link at the bottom
- Shared with: Squarespace (email delivery)
2.7 Abandoned cart emails
If you enter your email at checkout and don't complete
your purchase, I may send one automated reminder within
24 hours. This is limited to existing customers or
customers who explicitly consented at checkout. You can
unsubscribe via the link in the email.
2.8 Transactional emails
Order confirmations, shipping notices, account emails.
You can't unsubscribe from these because they document
your transaction. Legal basis: performance of contract.
2.9 Fonts
The site loads fonts from Google Fonts and Adobe Fonts.
Font servers receive your IP address as a technical
requirement for delivering the fonts. Legal basis:
legitimate interest.
3. How long I keep your data
- Order and invoice data: 7 years (Austrian tax law,
§132 BAO)
- Account data: until you delete your account, then up
to 7 years for order-linked records
- Marketing subscription: until you unsubscribe
- Analytics data: as retained by Squarespace (see their
policy)
- Contact form messages: up to 3 years or until
resolved
- Abandoned cart data: 30 days
4. International data transfers
Some processors are based in the United States:
Squarespace Inc., Google (Google Places API and Google
Fonts), Adobe (Adobe Fonts), and any payment processor
you choose. When data goes to these providers, it may
be transferred to the US. The transfer basis is:
- EU-US Data Privacy Framework (where the recipient is
certified), and/or
- Standard Contractual Clauses (Art. 46 GDPR)
You can request a copy of the safeguards by emailing
5. Automated decision-making
I don't use automated decision-making or profiling that
produces legal or similarly significant effects on you.
6. Your rights under GDPR
You have the right to:
- Access the personal data I hold about you
- Receive a portable copy (data portability)
- Correct inaccurate data
- Ask for deletion (subject to my legal retention
obligations, e.g. tax records)
- Restrict or object to certain processing
- Withdraw consent at any time (this doesn't affect
processing done before withdrawal)
Send requests to hello@huks.studio. I respond within 30
days.
7. Right to complain
You can lodge a complaint with the Austrian Data
Protection Authority:
Datenschutzbehörde (DSB)
Barichgasse 40-42, 1030 Wien
Email: dsb@dsb.gv.at
Website: https://www.dsb.gv.at
If you live in another EU country, you can also complain
to your local supervisory authority.
8. Consequences of not providing data
Data marked as required at checkout is necessary to
fulfill your order. Without it, I can't process the
purchase. Analytics and marketing consent are optional
and you can decline without losing shop access.
9. Changes to this policy
I may update this policy. Significant changes will be
announced on the site. The "last updated" date at the
top tells you when the current version took effect.
10. Related pages
- Cookie Policy: /cookies (or your Squarespace URL)
- Impressum: /impressum
- Terms and Conditions: /terms