This policy explains which personal data we process when you visit rysing.studio, contact us, book a call, subscribe to our newsletter, attend a masterclass or work with us, and what rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
Who is responsible
rysing is a brand of Content Fudge e.U. The controller responsible for your data is:
Content Fudge e.U.Anzhelika Tauber, Owner
Koflergasse 13/4/20, 1120 Vienna, Austria
hello@rysing.studio · +43 680 3096968
We have not appointed a data protection officer, as this is not required for a business of our size and type. For any privacy question, write to the email address above.
What we process and why
We only process the data we need for each purpose below, and we keep it only as long as stated.
| Purpose | Data | Legal basis (GDPR) | How long we keep it |
|---|---|---|---|
| Answering your enquiry by email, phone, form or social media | Name, email, phone, company, your message | Steps before a contract, Art. 6(1)(b); otherwise our legitimate interest in answering you, Art. 6(1)(f) | Up to 24 months after our last contact, unless a project follows |
| Booking and holding calls (brand audits, sales calls, workshops) | Name, email, phone, the date and the information you share in the call | Steps before a contract and performing the contract, Art. 6(1)(b) | Up to 24 months after our last contact, or for the duration of the project |
| Working with you as a client | Name, company, address, VAT ID, contact details, project materials, feedback | Performing the contract, Art. 6(1)(b) | For the duration of the project, then as long as claims can arise (generally 3 years) |
| Invoices and accounting | Name, company, address, VAT ID, payment details | Legal obligation, Art. 6(1)(c), under Austrian tax and commercial law (§ 132 BAO, § 212 UGB) | 7 years from the end of the calendar year |
| Newsletter and masterclass registrations | Name, email, your sign-up and opening behaviour | Your consent, Art. 6(1)(a) | Until you unsubscribe or withdraw consent; proof of consent is kept for 3 years |
| Website statistics and advertising (only with cookie consent) | IP address (shortened where possible), device and browser data, pages visited | Your consent, Art. 6(1)(a) and § 165(3) TKG 2021 | As set in the cookie settings, at most 24 months |
| Website operation and security | IP address, date and time of access, server logs | Our legitimate interest in a secure, working website, Art. 6(1)(f) | Up to 30 days |
Call recordings
With your permission, we record online calls and workshops so we can take accurate notes and build your strategy from your own words. We ask at the start of every recorded call, and you can say no or ask us to stop at any time. The legal basis is your consent, Art. 6(1)(a). Recordings and transcripts are kept for the duration of the project and deleted at the latest 24 months after our last contact.
AI tools
We use AI tools to support research, transcription, drafting and design. Data you share with us may be processed by these tools under data processing agreements, on business plans that do not use your data to train their models. All decisions and final work are made and reviewed by our team.
Do you have to provide your data?
You are not legally required to give us any personal data. Without the data marked above for client work and invoicing, however, we cannot enter into or perform a contract with you.
Who we share data with
We share personal data only with service providers who help us run our business, and only as far as needed. They process data on our behalf under data processing agreements (Art. 28 GDPR). We do not sell your data.
| Provider | What we use it for | Where data may be processed | Safeguard for transfers outside the EU |
|---|---|---|---|
| Google (Workspace, Analytics) | Email, documents, calendar, website statistics | EU and USA | EU–US Data Privacy Framework, standard contractual clauses |
| ActiveCampaign | Newsletter and email automation | USA | EU–US Data Privacy Framework, standard contractual clauses |
| Zoom | Online calls and workshops | EU and USA | EU–US Data Privacy Framework, standard contractual clauses |
| Fathom | Recording and transcribing calls | USA | Standard contractual clauses |
| Notion | Project management and notes | USA | EU–US Data Privacy Framework, standard contractual clauses |
| Canva | Design work and presentations | EU and Australia | Standard contractual clauses |
| Anthropic (Claude) | AI support for research and drafting | USA | EU–US Data Privacy Framework, standard contractual clauses |
| Meta (Pixel) | Measuring and targeting our ads, only with cookie consent | EU and USA | EU–US Data Privacy Framework |
| Freelance specialists | Design, web development, photography and video on client projects | EU and other countries | Contract with confidentiality and data protection terms; standard contractual clauses where needed |
| Tax adviser and bank | Accounting and payments | Austria | Not applicable |
We may also disclose data where the law requires it, for example to tax authorities or courts. If our business is sold or merged, client data may pass to the new owner, who remains bound by this policy.
Some providers are located in the USA. Where a provider is certified under the EU–US Data Privacy Framework, the European Commission considers its data protection adequate. Otherwise, we use the standard contractual clauses approved by the European Commission.
Cookies
Our website uses technically necessary cookies so that it works. Cookies for statistics and advertising are set only after you agree in the cookie banner. You can change or withdraw your choice at any time in the cookie settings. Details are in our Cookie Policy.
Security
We protect your data with appropriate technical and organisational measures, including encrypted connections, access limited to the people who need it, and two-factor authentication on our accounts. We review these measures regularly.
Your rights
Under the GDPR, you have the right to:
- Access: know which data we hold about you and receive a copy.
- Rectification: have incorrect data corrected.
- Erasure: have your data deleted, unless we must keep it by law.
- Restriction: have the processing of your data limited.
- Data portability: receive your data in a common format or have it passed to someone else.
- Objection: object to processing based on our legitimate interest, and to direct marketing at any time.
- Withdraw consent: withdraw any consent at any time, without affecting processing that took place before.
To use these rights, write to hello@rysing.studio. We may ask you to confirm your identity, so that we never share or delete the wrong person’s data. We reply within one month.
Complaints
If you believe we process your data unlawfully, you can complain to the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb.gv.at. We would appreciate the chance to resolve your concern first.
Links to other websites
Our website links to other websites and social media profiles. This policy does not apply to them; please read their own privacy policies.
Changes to this policy
We update this policy when our services or the law change. The current version is always available on this page, with the date of the last update at the top.
Contact
Content Fudge e.U. · rysingKoflergasse 13/4/20, 1120 Vienna, Austria
hello@rysing.studio · +43 680 3096968