Privacy Policy

1. Controller

Bonhem GmbH Fleischmarkt 20-22/EG/2A 1010 Wien, Austria Email: hello@bertcoffee.com

2. Order processing

To process your order we handle your name, email address, delivery and billing address, phone number (for pickup) and order and payment data (Art. 6(1)(b) GDPR). Data is retained for the statutory period (7 years, § 132 BAO).

Payments: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland. Stripe processes payment data as an independent controller; we never receive full card details. Privacy policy: https://stripe.com/at/privacy.

Database hosting: Neon (Neon Inc.), EU region (Frankfurt). Website hosting: Vercel Inc., EU region (Frankfurt). Data processing agreements with EU standard contractual clauses are in place with both.

Transactional emails (order confirmation, shipping, pickup): Resend (Resend Inc.), USA, based on standard contractual clauses.

3. Newsletter

If you subscribe to our newsletter or consent at checkout, we process your email address based on your consent (Art. 6(1)(a) GDPR) using double opt-in. Emails are sent via Klaviyo (Klaviyo Inc., Boston, USA; EU standard contractual clauses). You can unsubscribe at any time via the link in every email or by contacting us.

4. Cookies and analytics

Strictly necessary storage (cart, language, cookie preference) is based on § 165(3) TKG 2021 and requires no consent.

Analytics and A/B testing: we use PostHog (PostHog Inc., servers in the EU/Frankfurt). Without your consent we measure anonymously and without cookies (no recognition across sessions). With your consent (Art. 6(1)(a) GDPR, § 165(3) TKG) cookies are set and session recordings and heatmaps are enabled to understand how the shop is used and to test variants. Input fields are masked.

Google Analytics 4 and Google Tag Manager (Google Ireland Ltd.) load only after consent; IP addresses are truncated. Advertising measurement (Google Ads, Meta) receives data only with consent to the "Marketing" category (Consent Mode v2). You can change your choice at any time via "Cookie settings" in the footer.

5. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, and to withdraw consent at any time. Complaints can be lodged with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).