Privacy Policy
Introduction
The protection of your personal data is of particular importance to us.
We process your data exclusively on the basis of the applicable legal provisions – in particular the General Data Protection Regulation (GDPR) and the Telecommunications Act (TKG).
Below we inform you about how your personal data is processed within the framework of this website and our online shop.
Responsible for data processing
Fluff & Co. – Dog Patisserie e.U.
Email: wecare@fluffandco.eu
Further company details can be found in the legal notice (Imprint).
Collection and Processing of Personal Data
We process only those personal data that are necessary for the use of our website, the processing of orders, and our communication with you.
This includes in particular:
-
First and last name
-
Contact details (email address, telephone number)
-
Delivery address (for orders)
-
Payment information (for online purchases)
-
Technical data such as IP address, cookies, and browser information
These data are processed in order to:
-
process orders and deliveries,
-
respond to inquiries and communicate with you,
-
ensure the functionality and security of our website,
-
comply with legal obligations.
Legal Bases for Processing
Processing is carried out on the basis of:
-
Art. 6(1)(a) GDPR (consent),
-
Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures),
-
Art. 6(1)(c) GDPR (legal obligation), and
-
Art. 6(1)(f) GDPR (legitimate interest in a secure, functional website and efficient customer communication).
Disclosure of Personal Data
Your personal data will only be transferred to third parties:
-
if this is necessary for the performance of a contract (e.g. payment service providers or delivery partners),
-
if you have given your explicit consent, or
-
if there is a legal obligation to do so.
Contact
If you contact us via the contact form, email, telephone, or WhatsApp, we process the data you provide in order to handle your inquiry and any follow-up questions.
Online Shop and Payment Processing
Within our online shop, we process your data to accept, process, deliver, and invoice orders.
This includes:
-
Order data (products, quantity, price)
-
Customer data (first and last name, address, email address, telephone number)
-
Payment information (depending on the selected payment service provider)
Payment processing is carried out via the payment providers offered or integrated by Wix (e.g. credit card, Apple Pay).
These service providers receive your payment data directly; we do not store this information ourselves.
Delivery
Delivery of ordered products is carried out either by us directly or via selected delivery partners.
For this purpose, your first and last name, address, and telephone number are passed on to the respective delivery service.
Hosting and Data Transfers
Our website is hosted by Wix.com Ltd., 40 Namal St., Tel Aviv, Israel.
Wix stores personal data on secure servers in various countries, including Israel, the European Union (e.g. Ireland), the United States, South Korea, and Taiwan.
According to a decision of the European Commission, Israel provides an adequate level of data protection.
For transfers to other third countries that do not offer an equivalent level of protection, Wix uses the European Commission’s Standard Contractual Clauses to ensure the protection of personal data.
These terms are set out in Wix’s Data Processing Agreement (DPA), which automatically forms part of the platform usage.
Wix is committed to the highest data protection and security standards. Further information can be found in Wix’s official privacy policy at:
https://www.wix.com/about/privacy
Cookies and Web Analytics
Our website uses cookies to provide essential functions and to analyze the use of the website.
Technically necessary cookies are set without consent.
Analytics or marketing cookies are only activated after consent has been given via the cookie banner.
You can withdraw your consent at any time via the cookie settings or delete cookies in your browser.
Data Retention
We store personal data only for as long as necessary to fulfill the respective purpose or as required by statutory retention periods.
Once the purpose no longer applies or the retention period expires, the data are deleted.
Your Rights
Under the GDPR, you have the following rights:
-
Right of access to stored data
-
Right to rectification of inaccurate data
-
Right to erasure (“right to be forgotten”)
-
Right to restriction of processing
-
Right to data portability
-
Right to withdraw consent at any time
To exercise any of these rights, please contact us at: wecare@fluffandco.eu
Legal Remedies
For complaints regarding violations of the right to access, confidentiality, rectification, or erasure, the Austrian Data Protection Authority is the competent authority.
Data Security
We implement technical and organizational measures to protect your personal data against loss, misuse, or unauthorized access.
Changes to This Privacy Policy
We reserve the right to amend this privacy policy as necessary. Please always refer to the most current version published on our website.