This policy explains what personal data we collect on purebaking.at, why, and what rights you have.
Who is responsible
Pure Baking e.U., Ernst-Jandl-Weg 6/64, 1220 Wien, Austria (company register FN 635823i, Handelsgericht Wien). We trade under the name Pure Baking Vienna; the owner is Aleksandra Lazarova-Garneva.
Email: alex@purebaking.at
Booking a workshop
When you book, we collect your name, email address, phone number, billing address and the details of your booking. We need this to run your booking, send you confirmations and contact you about your workshop (Art. 6(1)(b) GDPR). We keep invoices and the booking records we need for our accounts for seven years, as Austrian tax law requires (§ 132 BAO). Other booking details, such as your phone number or notes about your booking, we delete once we no longer need them, and at the latest three years after your workshop.
Allergies and dietary needs
Information about allergies or intolerances is health data, which the GDPR protects specially (Art. 9 GDPR). You decide whether to tell us. If you do, we process it only with your explicit consent (Art. 9(2)(a) GDPR) and only to prepare your workshop safely. We don’t pass it on, and we delete it once your workshop has taken place. You can withdraw your consent at any time; we then just can’t take your allergy into account.
Payments
Payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Stripe receives your payment details directly; we never see or store your full card number. If you choose Klarna, your data goes to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. EPS payments are handled through Stripe and your bank. See stripe.com/privacy and klarna.com.
Contact and enquiry forms
If you send us an enquiry (for example for a private chef booking or a kids’ birthday party), we store the details you enter to answer you and, if you book, to plan your event (Art. 6(1)(b) GDPR). We delete enquiries that don’t lead to a booking after 12 months.
Photos and videos at workshops
We sometimes take photos and videos during workshops for our website and social media. We only use footage of you if you have agreed to it in writing on the day. You can withdraw that consent at any time. The withdrawal applies from then on: we won’t use the footage again and will remove posts showing you from our website and social media. It doesn’t make earlier use unlawful.
Cookies and analytics
We use Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to understand how visitors use the site. It only runs if you allow it in the cookie banner (Art. 6(1)(a) GDPR), and you can change your choice at any time. Google may process data in the USA; Google is certified under the EU-US Data Privacy Framework. Cookies that are needed for the site to work, such as the shopping cart, language choice and security, are set without consent (Art. 6(1)(f) GDPR).
Hosting and security
The site is hosted by HostGator (Newfold Digital, Inc., USA). When you visit, the server records technical data such as your IP address, browser and time of access, which is needed to deliver the site and keep it secure. We use Wordfence (Defiant Inc., USA) to protect the site from attacks, which processes IP addresses for this purpose. Legal basis: our legitimate interest in a secure website (Art. 6(1)(f) GDPR). Transfers to the USA are covered by the EU-US Data Privacy Framework or standard contractual clauses.
Your rights
You have the right to access, correct and delete your data, to restrict or object to its use, to data portability, and to withdraw consent at any time. Just email alex@purebaking.at. If you think we’re handling your data unlawfully, you can complain to the Austrian Data Protection Authority (Datenschutzbehörde), Barichgasse 40–42, 1030 Wien, www.dsb.gv.at.
Last updated: September 2026