privacy policy
privacy policy
last updated: 26.08.2026
- who we are
this privacy policy explains how Lilgenau KG, operating the online store curated by STAUB, collects, uses and protects personal data when you visit our website or purchase products from us.
Lilgenau KG
Leopoldsgasse 27a
1020 Vienna
Austria
email: hi@curatedbystaub.com
we are the controller responsible for the processing of your personal data in accordance with applicable data protection laws, in particular the eu general data protection regulation (gdpr).
- what personal data we collect
depending on how you interact with our website, we may collect:
- your name and contact details
- billing and shipping address
- email address
- telephone number, if provided
- order and purchase information
- payment information
- information you provide when contacting us
- information relating to returns and customer service requests
- technical information such as ip address, browser type and device information
- information about how you use our website
- cookie and similar technology information
we only collect and process personal data that is necessary for the relevant purpose.
- how we use your data
processing and fulfilling orders
we use your name, contact details, shipping and billing information and order details to process and fulfil your purchase, arrange delivery, handle payments, process returns and provide customer support.
the legal basis for this processing is art. 6(1)(b) gdpr, as the processing is necessary for the performance of a contract with you.
payment processing
payments are processed through the payment methods available at checkout, including shopify payments and paypal, where selected by you.
payment providers may process your personal data in accordance with their own privacy policies. for paypal, see: https://www.paypal.com/privacy
legal and accounting obligations
we may process and retain information relating to orders, invoices and payments where this is necessary to comply with legal, tax and accounting obligations.
the legal basis is art. 6(1)(c) gdpr.
customer communication
if you contact us by email or through our contact forms, we process the information you provide in order to respond to your request.
the legal basis is generally art. 6(1)(b) gdpr or art. 6(1)(f) gdpr, depending on the nature of the request.
shopify
our online store is operated using shopify, a service provided by shopify inc. and its affiliated entities.
shopify processes personal data in connection with operating our online store, including information relating to customer accounts, orders, purchases and interactions with our store.
shopify may process personal data outside the european economic area. where this occurs, shopify relies on appropriate safeguards such as eu standard contractual clauses (sccs) in accordance with art. 46 gdpr. further information about shopify's data processing and international data transfers can be found in shopify's privacy policy.
shipping
to deliver your order, we provide the shipping company with the information necessary for delivery, such as your name and shipping address.
we may use österreichische post and other shipping providers where necessary.
the legal basis is art. 6(1)(b) gdpr, as the processing is necessary to fulfil your order.
cookies and similar technologies
our website uses cookies and similar technologies.
some cookies are technically necessary to operate the website, provide shopping cart and checkout functionality, maintain security and remember essential preferences.
we may also use analytics and marketing technologies, including google analytics and meta pixel, to understand how visitors use our website and to improve our marketing and services.
where required by law, these technologies will only be activated after you have provided your consent through our cookie consent banner.
we use the cookie consent functionality provided by shopify to manage your cookie preferences.
you can change or withdraw your consent at any time through the available cookie settings.
google analytics
we may use google analytics, a web analytics service provided by google ireland limited.
google analytics uses cookies and similar technologies to help us understand how visitors interact with our website. ip addresses are anonymised/truncated before storage where technically supported by the service.
where required, google analytics will only be activated after your consent.
google may process information outside the european economic area. where this occurs, google relies on appropriate safeguards such as eu standard contractual clauses (sccs) in accordance with art. 46 gdpr.
meta pixel
we may use the meta pixel provided by meta platforms ireland limited.
the meta pixel allows us to understand how visitors interact with our website and to measure and improve our advertising campaigns.
where required by law, the meta pixel will only be activated after your consent.
meta may process personal data outside the european economic area. where this occurs, meta relies on appropriate safeguards such as eu standard contractual clauses (sccs) in accordance with art. 46 gdpr.
shopify flow and order printer
we use shopify flow to automate certain internal processes relating to our store and orders.
we may also use shopify order printer to create and print order-related documents such as packing slips and other documents.
these services may process information relating to orders and products as necessary to provide their respective functions.
third-party service providers
we use selected service providers to operate our online store, process payments, deliver orders and provide other services. these may include:
- shopify
- shopify payments
- paypal
- österreichische post and other shipping providers
- google analytics
- meta
- shopify flow
- shopify order printer
- other service providers necessary to operate our business
where third parties process personal data on our behalf, we take appropriate measures to ensure that such processing complies with applicable data protection law.
- data retention
we retain personal data only for as long as necessary for the purposes described in this privacy policy.
in particular:
- order, invoice and accounting-related data is retained for 7 years in accordance with austrian tax and accounting law (bao/ugb).
- data collected for cookie-based analytics and marketing purposes is retained according to the retention periods of the respective provider (see their individual privacy policies) or until you withdraw your consent.
- customer service correspondence is retained only as long as necessary to resolve the matter, unless a longer retention period applies for legal reasons.
when personal data is no longer required and there is no legal obligation to retain it, we will delete or anonymise it.
- your rights
subject to applicable legal requirements, you have the right to:
- request access to your personal data
- request correction of inaccurate or incomplete data
- request deletion of your personal data
- request restriction of processing
- object to certain processing
- request data portability
- withdraw consent where processing is based on consent
to exercise any of these rights, please contact us at: hi@curatedbystaub.com
you also have the right to lodge a complaint with the competent data protection authority. in austria, this is the:
austrian data protection authority (datenschutzbehörde)
data security
we take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
however, no method of transmission or storage over the internet can be guaranteed to be completely secure.
changes to this privacy policy
we may update this privacy policy from time to time to reflect changes to our services, legal requirements or the way we process personal data.
the latest version will always be published on this page.
contact
if you have any questions about this privacy policy or how we process your personal data, please contact:
Lilgenau KG
Leopoldsgasse 27a
1020 Vienna
Austria
hi@curatedbystaub.com