Privacy policy

Template – legal review required. This text is a non-binding template and must be reviewed and completed by qualified legal counsel before publication.

Controller

[Company name, address, e-mail]

Data we process

• Orders: name, address, e-mail, phone (optional), order data — to perform the contract (Art. 6(1)(b) GDPR).
• Customer account: credentials, saved addresses, wishlist.
• Payment: processed by Stripe. Card data is processed exclusively by Stripe and never stored on our servers.
• Newsletter: e-mail address with consent (Art. 6(1)(a) GDPR), double opt-in, revocable at any time.
• Cookies: necessary cookies (bag, sign-in, security). Analytics and marketing cookies only with consent.
• Search: search terms are evaluated anonymously without personal reference.

Retention

Order and invoice data are retained according to statutory retention obligations (e.g. § 132 BAO: 7 years).

Your rights

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent. You can request a data export and deletion directly in your account. Complaints may be lodged with the Austrian Data Protection Authority.

Processors

[Hosting, payment provider, e-mail delivery, media storage — complete the list.]