Privacy policy

Last updated: 18 May 2026

Protecting your personal data is of particular importance to us. We process your data exclusively on the basis of the statutory provisions (GDPR, Austrian Telecommunications Act 2021). In this privacy policy we inform you about the most important aspects of data processing in connection with our website.

Data Controller

Dulceria GmbH
Lilienbrunngasse 5/1A, 1020 Vienna, Austria
Email: office@dulceria-gmbh.com
Phone: 0660 / 651 65 62
Managing Director: Manuela Torres

Server Log Files

When you visit our website, information is automatically collected and stored in so-called server log files: IP address, date and time of the request, time-zone difference to GMT, content of the request, HTTP status code, amount of data transferred, referrer URL, browser, operating system and language. This data is technically necessary (Art. 6(1)(f) GDPR) and is deleted after 30 days.

SSL/TLS Encryption

For security reasons, this site uses SSL or TLS encryption. Data that you transmit via this website cannot be read by third parties.

Contacting Us

If you contact us via the form or by email, your details (name, email address, content of the enquiry) are stored for 6 months in order to process the enquiry and in case of follow-up questions. Legal basis: Art. 6(1)(b) or (f) GDPR.

Order Processing

When you place an order, we process the data required to perform the contract (name, delivery address, billing address, email address, payment data). Legal basis: Art. 6(1)(b) GDPR. Tax-relevant data is stored for 7 years (§ 132 of the Austrian Federal Fiscal Code).

Newsletter

You can subscribe to our newsletter. For this we need your email address and your confirmation (double opt-in). You can unsubscribe at any time via the unsubscribe link or by sending a message to office@dulceria-gmbh.com. The newsletter is sent via Shopify Email, a service provided by our shop provider Shopify (see “Data Processors”).

Data Processors

We use the following service providers:

  • Shopify Inc. (shop system incl. newsletter sending via Shopify Email), 150 Elgin Street, Ottawa, Canada (data processing in Canada and the USA, EU standard contractual clauses)
  • Payment service providers for the payment methods activated at checkout (credit card, Klarna, Apple Pay, Google Pay)
  • Österreichische Post AG, DHL and DPD as shipping service providers, depending on the destination country
  • Google Maps for displaying the map on the contact page — Google Ireland Ltd., Dublin, Ireland
  • Judge.me for displaying customer reviews
  • Google (Google Ireland Ltd., Dublin, Ireland): reach and advertising functions via the connected Google & YouTube sales channel (e.g. Google Ads, Google Analytics), only with your corresponding consent via our cookie banner

Transfer to Third Countries

Some service providers are based in third countries (in particular the USA and Canada). Transfers take place on the basis of adequacy decisions (e.g. the EU-US Data Privacy Framework) or EU standard contractual clauses pursuant to Art. 46 GDPR.

Cookies

Our website uses cookies. We use the cookie consent banner integrated into Shopify – on your first visit you can decide which categories you allow. You can find details in our Cookie Policy.

Your Rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21) and withdrawal of a consent given (Art. 7(3) GDPR). Contact: office@dulceria-gmbh.com.

Right to Lodge a Complaint

Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna · Phone: +43 1 52 152-0 · Email: dsb@dsb.gv.at · Web: www.dsb.gv.at