Privacy policy

Responsible for the processing

Pakize Beyhan
Blumen Aromatische Welt
Landstraßer Hauptstraße 74/1, 1030 Wien, Österreich

Your order data

When you place an order, we process:

• your name, your email address and your phone number
• whether you collect or have the order delivered, the date you want and any preferred time
• the delivery address in Vienna, for deliveries
• the text of a gift card, if you add one
• the items you ordered, with colour, size and notes
• order number, amount and payment status

The purpose is to fulfil your order. The legal basis is the performance of our contract with you (Art. 6(1)(b) GDPR) and, where we are required to keep records, compliance with a legal obligation (Art. 6(1)(c) GDPR).

We keep order data for as long as we need it to fulfil the order, to answer questions, to handle warranty claims and to meet statutory record-keeping obligations. After that we delete it.

Services involved

We do not run the shop entirely ourselves. The following services process data as part of it:

Database: Your order is stored in a database with the service Supabase. The order data listed above is held there.

Payment: Payment takes place on a page provided by the payment service Stripe. Stripe receives the data needed for the payment, such as your email address and the amount. You enter your card or account details directly with Stripe, and they never reach us. Stripe privacy policy.

Emails about your order: We send the emails about your order through the service Resend. Your name, your email address and the contents of your order are transmitted for that purpose. We do not send advertising or newsletter emails.

Protection of the withdrawal form: To keep the withdrawal form from being abused automatically, we check submissions with Cloudflare Turnstile. Cloudflare processes technical connection data such as your IP address and details about your browser in order to tell automated submissions from genuine ones (legitimate interest, Art. 6(1)(f) GDPR). No cookies are set for this, and we do not build a profile from it.

Domain and email forwarding: We use Cloudflare for our domain and for forwarding our email address.

Hosting

This website is hosted with Vercel. The usual technical access data arises in the process.

Basket and storage in your browser

Your basket is stored only locally in your browser (localStorage). We cannot see it. Its contents reach us only once you submit your order.

We do not use analytics or marketing cookies. This website embeds no tracking services: no web analytics, no Meta Pixel, no Google Analytics and no embedded social media content.

Sign-in for our team

Our team signs in to the internal area where we work on orders. Cookies are set for that purpose only, and only in the browser of the person signed in. As a customer you never come into contact with them.

Technical logs

When the website is called up, technical data arises of the kind every web server processes: IP address, time, page requested, and browser and device type. It serves the secure and stable operation of the site and the prevention of misuse (legitimate interest, Art. 6(1)(f) GDPR). We do not use it to recognise you as a person.

Your rights

You have the right to access your data and the rights to rectification, erasure, restriction of processing, data portability and objection. Simply write to us at info@aromatischewelt.at.

If you believe we are not processing your data correctly, you can lodge a complaint with the supervisory authority: Austrian Data Protection Authority (Datenschutzbehörde).