Privacy policy

Last updated: December 2025

1. General information

The protection of your personal data is of particular concern to us. We process your personal data exclusively on the basis of the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the Data Protection Act (DSG) and the Telecommunications Act (TKG 2021).

This privacy policy informs you about the most important aspects of data processing in the context of our website achinger-lavendel.at and our online shop.

2. Responsible body

Achinger Lavendel

Inhaber: Michael Doppler

Bahnhofstraße 15280 Braunau am Inn Austria

📧 E-mail: support@achinger-lavendel.at

Legal form: Sole proprietorship

Small business according to sec. 6 para. 1 no. 27 of the German VAT Act

A VAT number is currently not required

The controller for the processing of personal data within the meaning of the GDPR is the above-mentioned sole proprietor.

3. Data collection and processing in the online shop

When you shop in our online shop, we process personal data that is necessary to process your order.

3.1 Data collected

  • First and last name
  • Billing and delivery address
  • E-mail address
  • Telephone number (if you have any questions about ordering)
  • Payment information (depending on the payment method chosen)

3.2 Purpose of processing

  • Processing and processing of your order
  • Invoicing and bookkeeping
  • Delivery of ordered goods
  • Fulfilment of legal obligations (e.g. UGB, BAO)

3.3 Legal basis

  • Art. 6 (1) (b) GDPR (performance of contract / pre-contractual measures)
  • Art. 6 (1) (c) GDPR (legal obligation)

3.4 Storage period

Personal data will only be stored for as long as is necessary for the purposes mentioned. Accounting and accounting documents are kept for 7 years in accordance with § 132 BAO  .

4. Using Shopify

Our website and online store are operated through Shopify Inc., 151 O'Connor Street, Ground Floor, Ottawa, Ontario K2P 2L8, Canada .

  • Shopify processes personal data on servers in the EU and, to some extent, in third countries (USA, Canada).
  • The transfer is based on standard contractual clauses in accordance with Art. 46 GDPR.
  • Contracts exist with all processors used in accordance with Art. 28 GDPR. It cannot be ruled out that when data is processed in third countries, public authorities may have access to personal data without an effective remedy.

For more information about data processing by Shopify, please visit:
👉 https://www.shopify.com/legal/privacy

5. Payment Processing

5.1 PayPal

  • During the payment process, you will be redirected to the PayPal website.
  • Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
  • We only receive a payment confirmation.
  • PayPal processes personal data as an independent controller.

Legal basis: Art. 6 para. 1 lit. b GDPR Data protection information:

 https://www.paypal.com/webapps/mpp/ua/privacy-full

5.2 Prepayment / Bank Transfer

  • In the case of payment by bank transfer, only the data required for payment and order processing will be processed.
  • It will not be passed on to third parties. Legal basis: Art. 6 (1) (b) GDPR.

6. Contact form

When using our contact form, the following data will be processed:

  • Name
  • E-mail address
  • Content of the message

Legal basis:
Art. 6 para. 1 lit. b GDPR (pre-contractual measures)

Storage period:
Maximum 6 months, provided there are no legal retention obligations.

7. Cookies and technical functions

  • Our website uses technically necessary cookies, which are required for the operation of the online shop (e.g., shopping cart, order processing, security, and session management).
  • These cookies are essential and cannot be deactivated.
  • In addition, our shop platform, Shopify, may use cookies and similar technologies for analytics, personalization, or marketing purposes.
  • In the European Economic Area (including Austria), such non-essential cookies are only activated after you have given your explicit consent via the cookie banner.
  • Without your consent, only technically necessary cookies are used.
  • Cookies are automatically deleted at the end of the session or after a defined storage period.
  • Further information about the cookies used by Shopify can be found at: https://www.shopify.com/legal/cookies

8. Google Maps

The map service Google Maps of  the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is integrated into our website.

Through the use of Google Maps, information about the use of this website (including your IP address) may be transmitted to Google servers. This may also result in the transfer of personal data to the USA.

Google Maps is integrated for the purpose of making our company location easy to find.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

The legitimate interest lies in improving the user-friendliness of our website and making it easier to contact us.

Google processes personal data as an independent controller. Further information on data processing by Google can be found at: 
👉 https://policies.google.com/privacy

If you want to avoid submitting your data to Google, you will not be able to use the map service and will instead use our address manually.

9. Data transfer to shipping service providers

For the purpose of delivering your order, we pass on the following data to shipping service providers:

  • Name
  • Delivery address
  • If applicable, telephone number

Legal basis:

Art. 6 (1) (b) GDPRThe shipping service providers have corresponding data protection agreements.

10. Your rights

You have the right at any time to:

  • Information (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)

📧 Contact: support@achinger-lavendel.at

Right to lodge a complaint with the Austrian Data Protection Authority (DPA):
👉 https://www.dsb.gv.at

11. Data security

We use appropriate technical and organizational measures to protect your data. Our website uses SSL encryption.

12. Changes to this Privacy Policy

We reserve the right to amend this privacy policy if necessary. The version published on the website from time to time applies.