Cookie Policy
Last updated: 29 June 2026
This policy explains which cookies and similar technologies (e.g. localStorage) we use on hofkorb.at, for what purpose, and how you can control your settings.
Legal basis in Austria: § 165(3) of the Telecommunications Act 2021 (TKG 2021) in conjunction with the General Data Protection Regulation (GDPR). Cookies that are not strictly necessary are set only after your active consent.
1. What are cookies?
Cookies are small text files stored on your device (computer, phone, tablet) when you visit a website. They allow us to:
- recognise that you are signed in (session);
- keep the products in your cart between visits;
- remember your language preference;
- understand how the website is used (statistics, if you have consented).
Cookies cannot read other files on your device and contain no directly identifying personal data (other than what you provide yourself, such as your email address in your customer account).
2. Which cookies and technologies we use
2.1 Strictly necessary cookies (always active)
These are essential for the website to work and require no consent — under § 165(3) TKG 2021 (exemption for technically necessary storage) and GDPR Art. 6(1)(b) (performance of a contract).
Technically, the items below are stored via localStorage (technologies similar to cookies) rather than classic HTTP cookies, but they are subject to the same rules.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
hofkorb:cookie_consent | Biohof Dolzer | Stores your consent settings | 13 months |
hofkorb:auth | Biohof Dolzer | Signed-in session token (JWT) | Session (until sign-out) |
hofkorb:cart | Biohof Dolzer | Contents of your shopping cart | Locally until emptied |
hofkorb:lang | Biohof Dolzer | Language preference (DE/EN) | 1 year |
2.2 Analytics cookies (ONLY with consent)
These help us understand the stability of the website and improve it. They are loaded only after you have expressly agreed — via the cookie banner or the Cookie Settings page.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| Sentry session replay | Sentry.io (EU region, Germany) | Recording of the session at the moment an error occurs, with sensitive fields masked, for troubleshooting | 90 days |
Note on Sentry: capturing technical errors (without session recording) runs continuously on the basis of legitimate interest (GDPR Art. 6(1)(f) — security and service quality). Only the session recording described above requires analytics consent.
Analytics data collected: pages visited, time on page, clicks, browser, operating system, screen resolution — all processed within the EU. We do NOT collect: name, email, password, form contents, payment data.
We currently use no tools such as Google Analytics or PostHog. Should we add further analytics services in future, they will be listed in this policy and loaded only after prior consent.
2.3 Marketing cookies (ONLY with consent)
We currently use no marketing cookies. If we run campaigns in future (e.g. Google Ads or Meta Ads), the corresponding cookies such as _gcl_au or _fbp will be added here. All of them are released expressly by consent — we ask for your agreement before loading them.
3. How do you control your cookie settings?
3.1 On your first visit — the consent banner
When you open the website you will see a banner with these options:
- Accept all — you accept all categories (necessary + analytics)
- Reject all — you accept only the necessary cookies; analytics disabled
- Customise — you choose the categories you want
Reject and Accept sit as equals on the banner's first level (a DSB requirement). Your choice is stored locally in your browser. The banner reappears only when:
- you change your settings via Cookie Settings;
- 13 months have passed since your last choice (renewed consent under GDPR Art. 7(3));
- you clear your browser cookies.
3.2 Changing your mind later — Cookie Settings
You can change your settings at any time on the Cookie Settings page. The change takes effect immediately:
- enabling analytics → activates session recording in the event of an error;
- disabling analytics → stops the Sentry session recording.
3.3 Browser settings
You can also manage cookies directly in your browser:
Please note: disabling necessary cookies can make the website unusable (no sign-in or order processing possible).
4. Embedded third-party services
Google Maps
If we display maps with locations (business address, pickup points), we use Google Maps. The iframe is not loaded automatically — you see a placeholder with a "Show map" button. The Google iframe loads only when you click it.
Google's privacy information: https://policies.google.com/privacy
YouTube embeds
Any YouTube videos are embedded in "nocookie" mode (youtube-nocookie.com) or behind a placeholder with click-to-load.
5. International data transfers
Analytics data (Sentry) is processed within the EU (Germany). Our hosting provider Vercel Inc. operates infrastructure in, among other locations, the USA; any such transfers rely on the European Commission's Standard Contractual Clauses (SCC) and/or the EU-US Data Privacy Framework. Details are in our Privacy Policy.
6. Your rights and the supervisory authority
Under the GDPR (Art. 15–22) you have the right to access, rectification, erasure, restriction, data portability and objection, as well as the right to withdraw a consent you have given at any time. To exercise them, contact office@hofkorb.at.
You also have the right to lodge a complaint with the supervisory authority:
Austrian Data Protection Authority (DSB) Barichgasse 40–42, 1030 Vienna Email: dsb@dsb.gv.at · Web: www.dsb.gv.at
Full information about the processing of your personal data is available in our Privacy Policy.
7. Changes to this policy
This policy may be updated from time to time. Changes are reflected in the last-updated date at the top of the page. You will be informed of material changes via a banner on the website.
8. Contact
For questions or to exercise your rights under the GDPR:
Biohof Dolzer Email: office@hofkorb.at Phone: +43 664 2027760 Address: Unter dem Zensberg 2, 9313 Sankt Georgen am Längsee
Full provider details can be found in the Legal Notice.
See also:
- Privacy Policy — your full rights under the GDPR
- Cookie Settings — manage your settings now
Last updated: 29 June 2026