Privacy Policy
Last updated: June 2026
1. Controller
The controller responsible for data processing on however.at and store.however.at is: however.at, Vienna, Austria. Email: [email protected]
2. What Data We Collect
We collect only the minimum data necessary: Server logs (IP address, browser, pages visited) retained for 7 days. Essential session cookies required for the site to function. Account data (name, email, password hash) only if you register on store.however.at. Order data (delivery address, items, payment status) only if you place an order.
3. Cookies
We use only essential cookies. We do not use tracking cookies, analytics cookies, or advertising cookies.
4. Third-Party Services
Stripe: Payment processing - GDPR compliant, EU region. Hetzner Cloud: Server hosting in Nuremberg, Germany - all data stored in the EU. Cloudflare: DNS and CDN provider - may process your IP address as traffic passes through their network.
5. Your Rights (GDPR)
Under GDPR you have the right to: access your personal data, correct inaccurate data, delete your data (right to be forgotten), object to processing, data portability, and lodge a complaint with the Austrian Data Protection Authority (DSB).
6. Data Retention
We retain your data only as long as necessary. Account data is deleted upon request. Order data is retained for 7 years as required by Austrian tax law.
7. Contact
For any privacy-related questions, contact us at: [email protected]