Privacy notice

Updated 23 October 2026. This notice describes the website, Study Pack payments, buyer access and transactional access-link emails.

Who is responsible

Manuela Prieth · Vienna Wine School
viennawineschool@outlook.com

The postal contact is in the Impressum.

Visiting the website

The website is hosted with OpenAI Sites using Cloudflare infrastructure. Serving pages and protecting the service involves technical request information such as IP address, browser information, requested page and request time. The purpose is reliable delivery and security, based on legitimate interests under Article 6(1)(f) GDPR. The site itself adds no advertising pixels, visitor analytics or third-party video embeds. Videos and fonts are served with the website.

Study Pack payments and access

Payment takes place in Stripe-hosted checkout using Managed Payments. Stripe and Link handle payment details, receipts and transaction support under their own notices. Vienna Wine School does not receive your full card number. See Stripe’s privacy notice.

For access, the website stores the checkout reference, payment reference, verification date and access or revocation status received from signed Stripe notifications. The checkout email address, delivery attempts and delivery confirmation reference are also stored to send and maintain the personal access link. These records provide the purchased material and prevent unauthorised access, under Article 6(1)(b) GDPR and the security interests in Article 6(1)(f). Records are retained for the period needed to maintain and verify access; legal obligations or an unresolved dispute can require longer retention.

Cookies and learning progress

After verified access, an essential, secure cookie remembers the purchase on that device for up to 30 days. It is not used for advertising. Deleting it removes that device’s remembered access; the personal access link can reopen a valid purchase. Flashcard answers and the current learning order stay in page memory and reset when the page is closed.

Email enquiries

If you contact us, your email address, message and any information you supply are used to answer your enquiry or support your purchase. This is based on Article 6(1)(b) GDPR for contract-related enquiries and Article 6(1)(f) for other correspondence. Keep payment-card details out of support emails. Messages are handled through Microsoft Outlook and retained while needed for the enquiry or applicable obligations.

Access-link emails

Resend (Plus Five Five, Inc.) sends transactional Study Pack emails on our behalf. It processes the recipient address, message content, personal access link and delivery records. Resend stores this data in the United States; email and log data on our current plan is retained for 30 days. Its data processing agreement includes EU Standard Contractual Clauses for international transfers. See Resend’s data-processing information.

Service providers and international processing

We use OpenAI Sites with Cloudflare infrastructure for hosting, Microsoft Outlook for correspondence, Stripe and Link for payments, and Resend for access-link emails. Each receives the information needed for its service. Processing may take place outside the European Economic Area. The providers explain their processing, retention and international transfer safeguards in their privacy information: OpenAI, Cloudflare, Microsoft, Stripe and Resend.

Your rights

You can request access, correction, erasure, restriction and, where applicable, portability of your personal data. You can object to processing based on legitimate interests. Email the contact above; we may need to verify your identity. You may complain to the Austrian Data Protection Authority. See its information about data-subject rights.