Last updated: October 2026
Here you can find out which personal data we process when you visit this website, why we need it and which rights you have (Art 13 and 14 GDPR, § 165 (3) of the Austrian Telecommunications Act).
1. Controller
The controller within the meaning of Art 4 (7) GDPR is:
Heritsch Media GmbH
Doblerstraße 18, 8501 Lieboch, Austria
Email: impressum@theschoolofrituals.com
2. When you visit this website
Each visit involves processing technically necessary data so that the website can be displayed and run securely:
- IP address
- date and time of access
- pages visited
- browser type and operating system
The legal basis is our legitimate interest in operating the website securely (Art 6 (1) (f) GDPR). We do not use this data to identify you personally and do not combine it with other data.
3. Cookies
We only use one technically necessary cookie (§ 165 (3) of the Austrian Telecommunications Act). We do not use statistics or advertising cookies.
- NEXT_LOCALE: remembers whether you want to read the website in German or English. Storage period: 1 year. It is only stored on your device.
You can delete or block cookies in your browser at any time. The website will then show you the language based on your browser settings.
4. Hosting
We work with the following service provider to run this website. It only processes data on our behalf (data processing under Art 28 GDPR).
- Vercel Inc., USA: hosting of the website. Purpose: delivering the pages, security. Legal basis: legitimate interest (Art 6 (1) (f) GDPR). Transfer to the USA based on the EU-US Data Privacy Framework (Art 45 GDPR) and standard contractual clauses (Art 46 (2) (c) GDPR).
5. Fonts
This website does not load fonts from Google or other providers, so no data is transferred to third parties for this purpose.
6. Links to Instagram
This website contains a link to our Instagram profile. Only when you click it are you redirected to Instagram, a service of Meta Platforms Ireland Limited. From then on, Instagram's privacy policy applies: privacycenter.instagram.com/policy. No Instagram content is embedded on this website itself.
7. When you write to us
If you contact us by email, we process your details in order to answer your request (Art 6 (1) (b) and (f) GDPR). We do not pass them on to third parties, except in the case described in section 8.
8. If Stephanie Heritsch takes over sales
The School of Rituals is a brand of Stephanie Heritsch. Heritsch Media GmbH currently operates the website and sells the products. If this cooperation ends, Stephanie Heritsch will continue the brand herself or through her own company.
In that case, we will hand over the data of customers and newsletter subscribers to her. This way you keep access to the products you bought, your questions about them can still be answered, and you continue to receive the newsletter if you subscribed to it. Only the data needed for this is handed over, for example name, email address, purchased products and your language.
The legal basis is the performance of your purchase contract, as far as access to your products is concerned (Art 6 (1) (b) GDPR), and our legitimate interest in the brand being continued with its customers (Art 6 (1) (f) GDPR). For the newsletter, your consent continues to apply. You can withdraw it at any time.
We will inform you by email before the handover. You can object to the handover (Art 21 GDPR), in which case your data will not be handed over. From the handover onwards, Stephanie Heritsch or her company is responsible for your data.
9. How long we store data
We only store your data for as long as necessary for the respective purpose. Statutory retention obligations remain unaffected, for example seven years for invoices and contracts (§ 132 of the Austrian Federal Fiscal Code, § 212 of the Austrian Commercial Code). We store data from enquiries for up to three years after the last contact.
10. Automated decisions
There is no automated decision-making or profiling (Art 13 (2) (f) GDPR).
11. Your rights
If the legal requirements are met, you have the right to:
- access the data stored about you (Art 15 GDPR)
- rectification of inaccurate data (Art 16 GDPR)
- erasure of your data (Art 17 GDPR)
- restriction of processing (Art 18 GDPR)
- data portability (Art 20 GDPR)
- object to processing based on our legitimate interest (Art 21 GDPR)
- withdraw consent at any time with effect for the future (Art 7 (3) GDPR)
Simply write to us at impressum@theschoolofrituals.com.
12. Complaints
If you believe that we are not processing your data lawfully, please contact us first. You also have the right to lodge a complaint with the data protection authority:
Austrian Data Protection Authority (Datenschutzbehörde)
Barichgasse 40–42, 1030 Vienna, Austria