Privacy policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

SV Made-to-Measure GmbH
Gonzagagasse 9/1, 1010 Vienna, Austria
Tel: +43 676 88190816
Email: office@sartoriavienna.com
Last updated: 01 January 2026

1. Data collection when visiting our website

When using our website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Website visited

  • Date and time of access

  • Amount of data transferred in bytes

  • Source/referrer from which you accessed the page

  • Browser used

  • Operating system used

  • IP address used (if applicable, in anonymized form)

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

2. Contact

2.1 Use of Trafft

Our website uses the appointment booking software Trafft. Trafft is a service that enables online appointment booking. When using Trafft, personal data such as name, email address and telephone number are collected and stored. Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR for the performance of a contract or on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR. Further information on data processing by Trafft can be found here: Privacy Policy.

2.2

When contacting us (e.g. via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing this data is Art. 6 para. 1 lit. b GDPR (necessary for the implementation of pre-contractual measures). Your data will be deleted 3 years after your request has been fully processed.

3. Data processing for contract execution

Pursuant to Art. 6 para. 1 lit. b GDPR, personal data is collected and processed if you provide it to us for the purpose of performing a contract. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be requested by sending us a message. We store and use the data you provide for contract processing. After complete fulfillment of the contract or deletion of your customer account, your data will be deleted in compliance with tax and commercial retention periods (currently 7 years).

4. Use of your data for direct marketing

4.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. By registering, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When subscribing to the newsletter, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later time. The data collected during newsletter registration is used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending us a corresponding message. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list.

4.2 Sending email newsletters to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. In accordance with § 107 TKG, no separate consent is required for this. Data processing is based solely on our legitimate interest in personalized direct advertising pursuant to Art. 6 para. 1 lit. f GDPR and § 174 TKG. If you initially objected to the use of your email address for this purpose, no emails will be sent. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying us.

5. Data processing for order fulfillment

5.1 Transmission of image files for order processing via upload function

On our website, customers have the option to commission made-to-measure collections by uploading image files via an upload function. The submitted image motif is used as a template for the selected made-to-measure product.

Via the upload form on the website, the customer or their personal consultant can upload several image files directly from the storage of the device used to us via automated, encrypted data transmission. We collect, store and use the transmitted files exclusively for the production of the made-to-measure products as described in the respective service description on our website. If the transmitted image files are passed on to specialized service providers for the production and processing of the order, they are anonymized and cropped. No further transfer takes place. If the transmitted files or digital motifs contain personal data (in particular images of identifiable persons), all processing operations described above are carried out exclusively for the purpose of order processing pursuant to Art. 6 para. 1 lit. b GDPR. After completion of the order, the transmitted image files are automatically and completely deleted.

5.2

If necessary for contract fulfillment, production of the goods, or delivery and payment purposes, the personal data collected by us will be passed on in accordance with Art. 6 para. 1 lit. b GDPR to the commissioned transport company, the manufacturer of the goods in India, and the commissioned financial institution. If data is transferred to our contractual partner, the manufacturer in India, the transfer is necessary for the conclusion or fulfillment of a contract concluded by the controller with another natural or legal person in the interest of the data subject pursuant to Art. 49 para. 1 lit. c GDPR.

For order processing, we also cooperate with the following service providers who support us wholly or partially in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

5.3

To fulfill our contractual obligations towards our customers, we work with external shipping partners.
DHL – If goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), we transmit the recipient’s name and delivery address to DHL for the purpose of delivery pursuant to Art. 6 para. 1 lit. b GDPR.

5.4 Use of payment service providers

Stripe – If you choose a payment method from the payment service provider Stripe, payment processing is carried out via Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. We transmit your information provided during the ordering process along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) to Stripe pursuant to Art. 6 para. 1 lit. b GDPR. Further information on Stripe’s data protection can be found at: https://stripe.com/de/privacy#translation.

6. Rights of the data subject

6.1

Applicable data protection law grants you extensive rights as a data subject vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:

  • Right of access (Art. 15 GDPR): You have the right to obtain information about your personal data processed by us, processing purposes, categories of personal data, recipients or categories of recipients, planned storage period, rights to rectification, deletion, restriction of processing, objection, complaint to a supervisory authority, origin of data, existence of automated decision-making including profiling, and safeguards pursuant to Art. 46 GDPR for transfers to third countries.

  • Right to rectification (Art. 16 GDPR): You have the right to immediate rectification of incorrect personal data and/or completion of incomplete data stored by us.

  • Right to erasure (Art. 17 GDPR): You have the right to request deletion of your personal data if the requirements of Art. 17 para. 1 GDPR are met, unless processing is necessary for legal reasons.

  • Right to restriction of processing (Art. 18 GDPR).

  • Right to notification (Art. 19 GDPR).

  • Right to data portability (Art. 20 GDPR).

  • Right to withdraw consent (Art. 7 para. 3 GDPR).

  • Right to lodge a complaint (Art. 77 GDPR): You may lodge a complaint with a supervisory authority, in Austria with the Data Protection Authority.

6.2 Right to object

If your personal data is processed on the basis of our overriding legitimate interest, you have the right to object to this processing at any time with effect for the future. Further processing may still take place if compelling legitimate grounds exist.

7. Duration of storage of personal data

The storage duration of personal data is determined by the respective legal basis, processing purpose and applicable statutory retention periods. Data processed on the basis of consent is stored until consent is withdrawn. Data processed under Art. 6 para. 1 lit. b GDPR is deleted after expiration of statutory retention periods unless still required or legitimate interests exist. Data processed for direct marketing under Art. 6 para. 1 lit. f GDPR is stored until an objection is raised pursuant to Art. 21 para. 2 GDPR. Otherwise, personal data is deleted when no longer required for its original purpose.

8. Additional tools

8.1 Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies to analyze website usage. The information generated is usually transferred to a Google server in the USA. IP anonymization is active on this website. You can prevent cookie storage via browser settings and prevent data collection by Google by installing the browser plugin available at:
http://tools.google.com/dlpage/gaoptout?hl=de

8.2 Use of Meta social plugins

Our website uses social plugins from Facebook (Meta Platforms, Inc., Menlo Park, USA). When accessing a page containing such a plugin, a direct connection to Facebook servers is established. Facebook may associate the visit with your Facebook account if logged in. Further information can be found in Facebook’s privacy policy:
https://www.facebook.com/about/privacy/

You can block Facebook social plugins using browser add-ons such as the “Facebook Blocker”.