Privacy Policy

The German version of the legal pages is legally binding. This English version is provided for convenience.

1. Controller

2. General

We process personal data only as far as necessary to provide the website, to handle orders or due to legal obligations. The legal basis is the GDPR and the Austrian Data Protection Act (DSG).

3. Hosting and server log data

This website is hosted by Vercel Inc. (USA). When you visit the site, technically necessary data such as IP address, date and time, requested page and browser information is processed in order to deliver the website securely and reliably (Art. 6(1)(f) GDPR). Transfers to the USA rely on Standard Contractual Clauses or the EU-US Data Privacy Framework.

4. Cookies and local storage

We do not use tracking or marketing cookies. Your cart is stored exclusively locally in your browser (localStorage) and is not transmitted to us unless you place an order.

5. Orders and payment

When you pay, you are redirected to Stripe. There you enter your email address, name, billing and shipping address, phone number and payment details. Stripe processes this data for payment processing and fraud prevention as an independent controller or processor (Stripe Payments Europe Ltd., Ireland; stripe.com/privacy). We receive the data necessary to fulfil the contract and ship your order (Art. 6(1)(b) GDPR) and retain order and invoice data in accordance with statutory retention periods (generally seven years, § 132 BAO) (Art. 6(1)(c) GDPR).

6. Communication

If you contact us by email or via social media, we process your details to answer your enquiry (Art. 6(1)(b) or (f) GDPR). Order confirmations and internal order notifications are sent by email.

7. Product content (Sanity)

Product texts and images are delivered via the content delivery network of Sanity (Sanity AS, Norway). Your IP address is technically transmitted to Sanity in the process (Art. 6(1)(f) GDPR).

8. Fonts

For display purposes we use fonts from Google Fonts, which are loaded from servers of Google Ireland Ltd. when you visit a page. Your IP address is transmitted to Google in the process (Art. 6(1)(f) GDPR, interest in a consistent presentation).

9. Retention

We store data only as long as necessary for the respective purpose or as long as statutory retention obligations apply. Server log data is deleted after a short time.

10. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw any consent at any time with effect for the future. Please contact us at the address above.

You also have the right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

11. Changes

We will update this policy if our offerings or the legal situation change. The version published here applies.

Last updated: September 29, 2026