Privacy policy
Legal basis: Art. 13 GDPR, DSG
Controller
[Company name, address, email]
Data protection contact: [email]
Data we process
Orders: email address, name, shipping address, ordered items, payment status.
Customer accounts (optional): login data managed in our identity service (Keycloak).
Technical data: [server logs, retention period].
Purposes and legal bases
Processing and delivering orders: Art. 6(1)(b) GDPR.
Retention required by tax and commercial law (e.g. 7 years under § 132 BAO): Art. 6(1)(c) GDPR.
[Other purposes, if any]
Recipients and processors
Payment processing: Mollie B.V., Netherlands. [link to Mollie privacy statement]
Hosting: [provider, location in the EU]
Shipping: [carrier], to deliver your order.
Storage duration
[Per data category, e.g. order data for the statutory retention period]
Cookies and local storage
We only use strictly necessary storage: login session cookies (Keycloak) and the shopping cart in your browser's local storage. No tracking or analytics.
Your rights
Access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR). Contact: [email].
Complaints: Austrian Data Protection Authority (Datenschutzbehörde), www.dsb.gv.at.