top of page
Umbra_logo.png

Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

OMBRA Cosmetics
Tanja Westphal
Steinbügelweg 71/1
1210 Wien, Österreich
E-Mail: tanja@ombra-cosmetics.at

2. Data We Collect

When you join the OMBRA waitlist, we collect the following personal data:

  • Your e-mail address

No additional personal data is collected unless voluntarily provided.

3. Purpose of Data Processing

Your e-mail address is processed for the purpose of:

  • Informing you about the launch of OMBRA products

  • Sending product updates and release notifications

  • Providing exclusive early access information

Your data will not be used for unrelated marketing purposes.

4. Legal Basis

The processing of your data is based on your consent in accordance with Art. 6 Abs. 1 lit. a DSGVO.

  • You may withdraw your consent at any time by:

  • Clicking the unsubscribe link in any email, or

  • Contacting us directly

5. Storage & Retention

Your data will be stored:

  • Until you withdraw your consent, or

  • Until the waitlist is dissolved

After that, your data will be securely deleted.

6. Third-Party Services

We may use third-party email service providers (e.g., Brevo, Mailchimp, Klaviyo) to manage and send communications.

These providers process your data on our behalf and are contractually bound to comply with GDPR requirements.

Example:
We use Brevo (Sendinblue), a GDPR-compliant email service provider based in the EU.

5. Storage & Retention

Your data will be stored:

  • Until you withdraw your consent

  • Or until the waitlist is dissolved

After that, your data will be securely deleted.

7. Your Rights

Under the DSGVO, you have the right to:

  • Access your stored data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict processing

  • Data portability

  • Withdraw your consent at any time

To exercise your rights, please contact:
tanja@ombra-cosmetics.at

You also have the right to lodge a complaint with your local data protection authority.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

9. Changes to This Privacy Policy

We may update this Privacy Policy if required by legal or operational changes.

bottom of page