Privacy policy
Protecting your data matters to us. We process personal data exclusively on the basis of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). Here you can find out which data we use and why.
1. Controller
Luntra, Austria
Email: office@fuegoz.at
2. Principles
- We do not use any analytics, tracking, marketing or social media services.
- Fonts and all other content are loaded from our own server – no data is transmitted to third parties such as Google when you visit the website.
- We do not sell your data and only pass it on where this is necessary to process your order (see below).
3. Visiting the website (server log files)
When you access the website, our hosting provider processes technically necessary data such as IP address, date and time, the page accessed and browser type in order to deliver the website and protect it against attacks. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR). The data is deleted after 14 days at the latest.
Hosting provider: easyname GmbH, servers in Vienna (Austria). A data processing agreement (Art. 28 GDPR) is in place with the provider.
4. Cookies and local storage
We only use strictly necessary storage technologies. No consent is required for this (§ 165 (3) Austrian Telecommunications Act 2021).
| Name | Type | Purpose | Duration |
|---|---|---|---|
| luntra_sid | Cookie | Keeps you signed in to your account | 30 days or until you sign out |
| luntra_cart | Local storage | Stores your shopping cart | Until you empty it |
| luntra_lang | Local storage | Remembers your chosen language (German/English) | Permanently in your browser |
| luntra_cookie_ok | Local storage | Remembers that you have seen the cookie notice | Permanently in your browser |
You can delete cookies and local storage in your browser at any time.
5. Customer account
If you create an account, we store your name, your email address and your password (only as an encrypted hash – we cannot read it). This allows you to view your orders, track shipments and write reviews. The legal basis is the performance of a contract (Art. 6 (1) (b) GDPR). You can delete your account yourself at any time in your account settings.
6. Orders
To process your order, we process your name, shipping address, email, optionally your phone number and the order data. The legal basis is the performance of a contract (Art. 6 (1) (b) GDPR). Due to statutory retention obligations (§ 132 Austrian Federal Fiscal Code, § 212 UGB), we store order and invoice data for 7 years (Art. 6 (1) (c) GDPR).
Disclosure to shipping providers: We pass on your name, shipping address and, where applicable, your phone number to the shipping provider or supplier who delivers your parcel.
Address suggestions at checkout
To help you enter your shipping address quickly and correctly, we show matching addresses while you type. For this purpose, the address text you enter is sent via our server to the Photon service of komoot GmbH (Berlin, Germany), which is based on OpenStreetMap data. Your IP address or any other data about you is not passed on, and no cookies are set. The legal basis is the performance of a contract and our legitimate interest in correct shipping addresses (Art. 6 (1) (b) and (f) GDPR). Address data © OpenStreetMap contributors.
7. Payment via Stripe
Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. You will be redirected to a Stripe payment page for this. You enter your payment details (e.g. card number) directly with Stripe – we do not receive them. Stripe receives your email address, the order amount and the order number. The legal basis is the performance of a contract (Art. 6 (1) (b) GDPR) and our legitimate interest in fraud prevention (Art. 6 (1) (f) GDPR). A transfer to Stripe, Inc. in the USA is possible; it takes place on the basis of the EU-US Data Privacy Framework or EU standard contractual clauses. More information: stripe.com/privacy.
8. Emails
We send order confirmations, shipping information and password links via the mail server of our hosting provider (see section 3). We do not send promotional newsletters.
9. Contact form and withdrawal form
If you write to us using the contact or withdrawal form, we store your details in order to deal with your request (Art. 6 (1) (b) and (c) GDPR). We delete contact requests once they have been dealt with and there is no retention obligation.
10. Reviews
If you write a review, we publish it together with your first name, the first letter of your last name, the date and optionally the size. The legal basis is your consent by submitting the review (Art. 6 (1) (a) GDPR), which you can withdraw at any time by email.
11. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). In your account you can download your data and delete your account yourself. For all other requests, please write to office@fuegoz.at.
You can also lodge a complaint with the supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.
12. Data security
The website is encrypted throughout via TLS (HTTPS). We store passwords exclusively as hashes using the Argon2id method.
As of: October 2026 · In case of doubt, the German version applies.