Privacy Policy

1. Data Controller
Lisa Schmirl
Gneiserstraße 52, 5020 Salzburg, Austria
Email: teampranacollective@outlook.com
Phone: +43 665 67220673

2. Hosting and Server Log Files (Squarespace)
This website is hosted by Squarespace Inc. (USA). When you visit the site, Squarespace automatically collects technical data (server log files), e.g. IP address, date/time of access, browser used, and referrer URL. This processing is based on our legitimate interest in a technically functional and secure website (Art. 6 (1)(f) GDPR). A data processing agreement is in place with Squarespace.

Since Squarespace Inc. is based in the USA, personal data may be transferred to a third country. Squarespace is certified under the EU-US Data Privacy Framework and/or uses EU Standard Contractual Clauses as an additional safeguard. (Please verify the current status on Squarespace's own privacy page.)

3. Cookies and Squarespace Analytics
This website uses technically necessary cookies (e.g. for the shopping cart, language settings). We also use Squarespace Analytics to evaluate website usage (e.g. page views, time on site, devices used). This processing is based on our legitimate interest in optimizing our offering (Art. 6 (1)(f) GDPR). The resulting data is processed by Squarespace as a data processor under the existing data processing agreement; the same notes on data transfer to the USA as under point 2 apply.

4. Contact
If you contact us by email or contact form, we process the data you provide (name, email address, message content) to handle your inquiry (Art. 6 (1)(b) or (f) GDPR).

Our email correspondence is handled via Microsoft Outlook/Microsoft 365 (Microsoft, USA) and Google Gmail/Google Workspace (Google LLC, USA). This may result in data being transferred to the USA. Both providers are certified under the EU-US Data Privacy Framework.

5. Order Processing in the Online Shop
When you purchase a book through our shop, we process the data necessary for fulfilling the contract (name, delivery address, email, payment data) based on Art. 6 (1)(b) GDPR.

Payment processing: Payments are processed via Squarespace's integrated payment processing (Squarespace Payments, powered by Stripe). We offer credit/debit cards (Visa, Mastercard, American Express, Discover, Diners Club, JCB, UnionPay, Carte Bancaire) as well as Google Pay, Apple Pay, Klarna, and Bancontact/Wero. Depending on the payment method chosen, data is additionally transferred to the respective provider:

The privacy policy of the selected payment provider applies in addition to this policy.

6. Shipping
To deliver your order, we share the necessary data (name, address) with our contracted shipping provider.

7. Newsletter
If you sign up for our newsletter, we use your email address to send you regular information about Prana Collective’ offering. Sign-up uses a double opt-in process: after signing up, you'll receive a confirmation email and must actively confirm your subscription before any emails are sent. The legal basis is your consent (Art. 6 (1)(a) GDPR in conjunction with § 174 of the Austrian Telecommunications Act (TKG) 2021). You may withdraw consent at any time with effect for the future, e.g. via the unsubscribe link in every email or by writing to teampranacollective@outlook.com. Newsletters are sent via Squarespace.

8. Storage Period
We store personal data only as long as necessary for the purposes described above, or as required by statutory retention periods (in particular the 7-year retention period for invoice data under Austrian tax law).

9. Your Rights
You have the right to access, rectify, erase, restrict processing of, and port your data, as well as to object to its processing. You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

Contact for privacy inquiries: teampranacollective@outlook.com