Privacy Policy
Last updated: 29 June 2026
This privacy policy informs you, in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG), which personal data we process on hofkorb.at, for what purpose, and what rights you have.
The controller details match the Legal Notice. Biohof Dolzer is an agricultural and forestry holding — it therefore has neither a company register number nor a VAT ID (flat-rate taxation under § 22 UStG).
1. Controller
| Name | Biohof Dolzer |
| Legal form | Agricultural and forestry holding (not entered in the company register) |
| Holding number (LFBIS) | 0504343 |
| VAT | Flat-rated under § 22 UStG — no VAT ID |
| Owners | Lisa and Michael Dolzer |
| Registered address | Unter dem Zensberg 2, 9313 Sankt Georgen am Längsee, Austria |
| office@hofkorb.at | |
| Phone | +43 664 2027760 |
For data protection matters, please contact: office@hofkorb.at.
2. Which personal data we process
2.1 Data you provide
- Account data: name, email address, password (stored encrypted)
- Billing data: for individuals — first and last name, address; for companies (B2B) — company name, VAT ID, registered address, contact person details
- Order data: products ordered, delivery and billing address, order history
- Communication: the content of your enquiries by email or contact form
2.2 Automatically collected data
- Technical data: IP address, browser type, operating system, screen resolution, date/time of access
- Usage data (only with consent — via Sentry): pages visited, clicks, time on page, session recording in the event of an error, with sensitive fields masked
We currently use no tools such as Google Analytics or PostHog. Should such services be added in future, they will be listed here and loaded only after consent.
3. Purposes of processing
- Providing and operating the online shop (account, cart, order processing)
- Showing the products you recently viewed while signed in to your account
- Issuing invoices and meeting tax obligations
- Communication and customer support
- Security, stability and troubleshooting of the platform
- Improving the website (only with consent)
4. Legal bases (GDPR Art. 6)
| Processing | Legal basis |
|---|---|
| Account, cart, order processing | Performance of a contract (Art. 6(1)(b)) |
| Invoicing, 7-year retention | Legal obligation (Art. 6(1)(c)) — BAO, UGB |
| Analytics / session recording | Consent (Art. 6(1)(a)) — withdrawable at any time |
| Error monitoring, security | Legitimate interest (Art. 6(1)(f)) |
Setting non-essential cookies is additionally governed by § 165(3) of the Austrian Telecommunications Act 2021 (TKG 2021).
5. Cookies we use
Which cookies and similar technologies (localStorage) we use, together with provider, purpose and duration, is set out in our Cookie Policy. Non-essential cookies are set only after your consent.
6. Retention periods
| Data category | Duration |
|---|---|
| Account data | Until you delete your account |
| Order and invoice data | 7 years (statutory retention — § 132 BAO, § 212 UGB) |
| Analytics data (Sentry session recording) | Maximum 90 days |
| Consent settings | 13 months |
| Server logs / technical data | As briefly as possible, deleted regularly |
| Recently viewed products (signed-in account) | Maximum 90 days, at most 50 products |
Recently viewed products
When you are signed in to your account, we remember which products you opened so we can show them again in the "Recently viewed" section. Visitors who are not signed in are not tracked this way: for them the list stays in the browser alone and never reaches us.
- What we store: the product identifier and the time it was viewed. Nothing else — no profiling, no combination with other sources, no sharing with third parties.
- Legal basis: performance of the contract and our legitimate interest in providing account functionality (Art. 6(1)(b) and (f) GDPR). This is not analytics processing and does not depend on cookie consent.
- Retention: at most 90 days and at most the last 50 products; anything older is deleted automatically.
- Control: you can delete the whole history at any time under My account → Privacy. It is also deleted when you delete your account.
7. Your rights (GDPR Art. 15–22)
You have the following rights:
- Access to the data we process about you (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure ("right to be forgotten", Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing (Art. 21)
- Withdrawal of a consent you have given, at any time, without affecting the lawfulness of processing carried out until then (Art. 7(3))
How to exercise your rights
Send an email to office@hofkorb.at. We will respond to your request within one month (Art. 12(3)).
Complaints
You have the right to lodge a complaint with the supervisory authority:
Austrian Data Protection Authority (DSB) Barichgasse 40–42, 1030 Vienna Email: dsb@dsb.gv.at · Web: www.dsb.gv.at
8. Disclosure to third parties and processors
We disclose your data only where necessary to perform the contract or to comply with a legal obligation. Categories of recipients:
- Payment service providers — to process payments (only the data required for the payment is transmitted)
- Shipping and logistics providers — to deliver your order
- Vercel Inc. (website hosting) — operating, among other locations, in the USA
- Sentry (error monitoring) — a service that monitors stability, hosted in the EU region (Germany). Error capture runs continuously on the basis of legitimate interest; session recording in the event of an error only with analytics consent, with sensitive fields masked.
Transfers outside the EU
Some providers (e.g. Vercel) operate infrastructure in the USA. Such transfers rely on the Standard Contractual Clauses (SCC) approved by the European Commission and/or the EU-US Data Privacy Framework.
9. Data security
We take appropriate technical and organisational measures (TOM) to protect your data: encryption in transit (HTTPS/TLS), encrypted password storage, masking of sensitive fields in error monitoring, and access restrictions. In the event of a data breach posing a risk to your rights, we notify the DSB within 72 hours (Art. 33 GDPR).
10. Cookies and tracking — quick access
- Cookie Policy — the full list of cookies
- Cookie Settings — manage your settings now
11. Changes to this policy
This privacy policy may be updated from time to time. The version shown at the top of the page is the one that applies. We will inform you via the website of any material changes.
12. Contact
Biohof Dolzer Email: office@hofkorb.at Phone: +43 664 2027760 Address: Unter dem Zensberg 2, 9313 Sankt Georgen am Längsee
Full provider details can be found in the Legal Notice.
Last updated: 29 June 2026