PRIVACY POLICY
Last updated: 31 October 2026
1. Controller
Lilli Franziska Sonnele Bree, trading as LILLI BRÉE™, Quellenweg 3, 6413 Wildermieming, Austria. Contact: lilli.bree@icloud.com.
2. Hosting and technical access
This website is hosted by Netlify. When you visit, technical data such as IP address, browser information, requested pages, timestamps and security or diagnostic information may be processed in server logs to deliver, maintain and secure the website. The legal basis is our legitimate interest in a reliable and secure website (Art. 6(1)(f) GDPR). Technical logs are retained according to the hosting provider’s applicable settings and retention policies.
Domain registration is managed through Porkbun and DNS resolution through Cloudflare. Depending on the services used, these providers may process technical connection data necessary for domain resolution, security and service provision.
3. Free ticket requests
When you submit a ticket request, we process the information you enter: name, optional company, postal address, email address, selected areas of interest and optional additional information. We use these details solely to review your enquiry, communicate with you and, where appropriate, develop and send a concept or ticket by post.
Requests are collected through Netlify Forms and notifications are delivered to our Apple iCloud Mail account. We do not use a separate customer database or advertising mailing list. The legal basis is Art. 6(1)(b) GDPR for steps taken at your request before a potential contract, and, where relevant, Art. 6(1)(f) GDPR for handling correspondence and preventing misuse.
Enquiries that do not result in a commission are generally deleted from Netlify and the email account within six months, unless further retention is required by law or justified by an ongoing matter. For commissioned projects, we retain necessary information for project delivery and contractual administration. Invoices and records subject to Austrian accounting or tax retention obligations are generally kept for seven years; longer retention may apply in individual cases.
Providing the information marked as required is necessary for us to process your ticket request. You are not legally required to submit an enquiry. Please avoid including sensitive personal data in the optional message field.
4. Email and direct contact
If you contact us by email or telephone, we process your contact details and the content of your message to respond to you and handle any resulting business relationship (Art. 6(1)(b) or (f) GDPR, as applicable). Email correspondence is handled through Apple iCloud Mail. Correspondence not resulting in a commission is generally deleted within six months unless a longer period is necessary.
5. Instagram reels and external links
Our Behind the Scenes galleries contain links to Instagram reels. Instagram content is intended to load only after you explicitly choose “PLAY VIDEO”. When you activate an embedded reel, your browser may contact Instagram/Meta, which can receive your IP address and device information and may use cookies or similar technologies. The legal basis for loading non-essential third-party content is your prior consent (Art. 6(1)(a) GDPR, and any applicable Austrian ePrivacy rules). You can avoid loading these embeds by not selecting Play. Opening an Instagram link transfers you to a third-party website under its own privacy terms.
For information about Meta’s processing, see Instagram’s Privacy Policy. Consent to an embed does not imply consent to unrelated marketing by us.
6. Fonts and external resources
The website currently loads the Urbanist typeface through Google Fonts. This may cause a connection to Google servers, involving transmission of technical data such as an IP address. We are reviewing local font hosting to reduce third-party requests. Google’s information is available at Google Privacy Policy.
7. Cookies and analytics
We do not intentionally deploy Google Analytics, Meta Pixel or advertising tracking. Technically necessary storage or cookies may be used by service providers. Third-party Instagram embeds may set cookies or use similar technologies after activation. The exact browser storage and third-party requests should be reviewed whenever website services change.
8. Processors and international transfers
Netlify, Apple, Cloudflare, Porkbun, Google (for fonts) and Meta (for activated Instagram content) may process personal or technical data under their respective roles and contractual terms. Some processing may take place outside the European Economic Area. Where required, appropriate GDPR transfer safeguards, such as adequacy decisions or standard contractual clauses, must apply. Provider agreements and actual transfer arrangements should be verified before relying on this notice as final legal compliance documentation.
9. Your rights
Subject to applicable conditions, you may request access, rectification, erasure, restriction, data portability or object to processing. Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing. Please contact lilli.bree@icloud.com.
You may also lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), www.dsb.gv.at.
10. Updates
We may update this notice when the website, service providers or legal requirements change. The current version is published on this page.