Privacy Policy
Last updated: 15 October 2026. This policy describes the currently implemented static website and email-based contact process. It must be reviewed when direct form submissions, analytics, or additional tracking services are activated.
1. Controller
E&A Cosmetics GmbH, trading as Boutique Vienna, Rudolfinergasse 22/1, 1190 Wien, Austria (UID ATU68582367). Contact: adam.nada@rockinvestments.eu.
2. Information processed
When you visit this site, the hosting provider may process technical connection data such as IP address, browser information, requested pages and access times to provide and secure the website. When you contact us using an email link or prepared email draft, your email provider sends the details you choose to include to the indicated recipient.
3. Contact and purposes
Customer enquiries are directed to Customer.service@rockinvestments.eu; partnership enquiries to adam.nada@rockinvestments.eu. We use this information to respond to enquiries and consider commercial relationships. Depending on the enquiry, the legal basis is Article 6(1)(b) GDPR (pre-contractual steps) or Article 6(1)(f) GDPR (legitimate interests). Necessary technical processing relies on Article 6(1)(f) GDPR.
4. Forms and tracking
The current contact pages open an email draft; they do not send data directly to the website. Outbound brand links may include UTM referral parameters that identify Boutique Vienna as the referring site. The site does not intentionally install advertising or analytics cookies through its own code. Wix hosting may use strictly necessary technologies. If optional analytics, embedded third-party media or a form backend is enabled, this notice and any necessary consent mechanism must be updated before activation.
5. Third parties and links
The site is hosted on Wix infrastructure. Links to brands, Instagram and Rock Investments lead to independent sites with their own privacy practices. Clicking an external link may transmit standard browser connection information to the destination.
6. Retention and sharing
Email correspondence is retained for the period necessary to respond and to meet applicable business and legal requirements. Hosting logs are retained under the hosting provider's applicable policies. Authorized staff and technical service providers may access information as required for these purposes.
7. Your rights
Subject to the GDPR, you may request access, rectification, erasure, restriction, data portability or object to processing, as applicable. You may contact us at the address above. You may also complain to the Austrian Data Protection Authority (Datenschutzbehörde).
8. Updates
This notice will be updated when website functionality or data processing changes. The full company address and any applicable transfer/retention particulars require verification prior to final legal sign-off.