Privacy Policy

Last updated: 28 July 2026

This Privacy Policy explains how Backstube Lärche ("we", "us", or "our") collects, uses, stores, and protects your personal data when you visit our website at monogfirma.homes, contact us, or purchase bakery products. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR" / "DSGVO"), the Austrian Data Protection Act (Datenschutzgesetz, DSG), and guidance from the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, DSB).

1. Data Controller

The data controller responsible for your personal data is:

• Business name: Backstube Lärche
• Address: Maria-Theresien-Straße 18, 6020 Innsbruck, Austria
• Phone: +43 512 58 34 21
• Email: [email protected]

For data protection enquiries or to exercise your rights, contact us using the details above.

2. Personal Data We Collect

• Identity data: your name
• Contact data: phone number, email address, postal address
• Order data: product preferences, special bakery orders, pickup notes
• Transaction data: invoices and payment records where applicable
• Technical data: IP address, browser type, device information, and cookies (see our Cookie Policy)
• Communication data: messages via our contact form, email, or phone notes

3. How We Collect Your Data

• Website contact forms
• Phone, email, or in-person visits to the bakery
• Product orders and pre-orders
• Payment processing at the shop
• Cookies and similar technologies (with consent where required)

4. Purposes and Legal Bases

• Contract performance (Art. 6(1)(b) GDPR): to fulfil bakery orders, confirm pickups, and issue invoices
• Legal obligation (Art. 6(1)(c)): to comply with Austrian tax, accounting, and commercial record-keeping requirements
• Legitimate interests (Art. 6(1)(f)): to respond to enquiries, improve our services, and ensure website security — balanced against your rights
• Consent (Art. 6(1)(a)): for non-essential cookies, analytics, and marketing where applicable

5. Data Retention

• Order and invoice records: for the business relationship and up to 7 years thereafter for tax purposes under Austrian law
• Contact form enquiries: up to 12 months unless a customer relationship continues
• Cookie consent records: as long as needed to demonstrate compliance
• Website logs: typically up to 90 days for security

6. Data Sharing and Processors

We do not sell your personal data. We may share data with:

• Service providers: hosting, email, and IT providers acting as processors under Art. 28 GDPR
• Professional advisers: accountants or legal advisers where necessary
• Authorities: where required by Austrian law or a valid legal request

Where data is transferred outside the EEA, we ensure appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

7. Your Rights Under GDPR / DSGVO

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to withdraw consent (Art. 7(3)) at any time

To exercise these rights, email [email protected]. We will respond within one month as required by law.

8. Right to Lodge a Complaint

You may lodge a complaint with the Austrian Data Protection Authority:

• Authority: Österreichische Datenschutzbehörde (DSB)
• Address: Barichgasse 40-42, 1030 Vienna, Austria
• Phone: +43 1 52 152-0
• Email: [email protected]
• Website: www.dsb.gv.at

9. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, in line with Art. 32 GDPR and Austrian practice.

10. Changes

We may update this Privacy Policy from time to time. The current version is always published on this page with the date of the latest revision.