Privacy Policy
Last updated: 28 September 2026
This Privacy Policy explains how personal data is collected, used and protected when you visit or make a purchase from the éepa coffee website.
1. Data Controller
The controller responsible for the processing of personal data on this website is:
Daniel Uprimny
éepa coffee
Linzer Straße 161, Tür 14
1140 Vienna
Austria
Email: eepamoment@gmail.com
Phone: +43 676 3595238
2. Personal Data We Process
Depending on how you use our website and online store, we may process the following categories of personal data:
Name and surname
Billing and delivery address
Email address
Telephone number, where provided or required for order fulfilment
Order and purchase information
Payment-related information
Communications you send to us
Technical information necessary for the operation and security of the website, such as IP address, browser information, device information and date and time of access
We only process personal data that is necessary for the relevant purpose.
3. Orders and Contract Fulfilment
When you place an order through our online store, we process the information necessary to process and fulfil your purchase.
This may include your name, contact information, billing and delivery address, products ordered, order value, payment status and other information necessary to process the order.
The legal basis for this processing is Article 6(1)(b) GDPR, as the processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Where we are required to retain transaction, accounting or tax information by law, the legal basis is Article 6(1)(c) GDPR.
4. Payment Processing – Stripe
Payments made through our online store are processed by Stripe.
When you make a payment, information necessary to process the transaction may be transmitted to Stripe. Depending on the payment method, this may include your name, billing information, email address, payment information, IP address and transaction information.
We do not receive or store your complete payment card details. Payment information is processed by Stripe and the relevant payment service providers.
The legal basis for processing payment information in connection with your purchase is Article 6(1)(b) GDPR.
Stripe may also process certain information for its own legal, regulatory, security and fraud-prevention purposes in accordance with its own privacy documentation.
Stripe operates internationally, and personal data may therefore be processed outside the European Economic Area where necessary. Stripe states that it uses appropriate safeguards for international transfers, including adequacy mechanisms, the EU-U.S. Data Privacy Framework where applicable, and Standard Contractual Clauses.
Further information about Stripe's processing of personal data can be found in Stripe's Privacy Policy and Privacy Center.
5. Website Hosting and Online Store – Hostinger
Our website and online store are created and hosted using services provided by Hostinger.
In connection with the provision, security and technical operation of the website and online store, technical data may be processed, including IP addresses, browser and device information, timestamps and other information necessary to provide and secure the service.
Where this processing is necessary to provide the website and online store, it is carried out on the basis of Article 6(1)(f) GDPR, our legitimate interest being the secure, reliable and efficient operation of our website and online store.
Personal data associated with orders may also be processed through the Hostinger ecommerce infrastructure where necessary to operate the online store and fulfil customer orders.
Further information about Hostinger's processing of personal data can be found in Hostinger's Privacy Policy.
6. Delivery and Order Fulfilment
Where necessary to fulfil an order, we may provide the information required for delivery to the relevant shipping or delivery service provider.
This generally includes your name, delivery address and, where necessary for delivery, your contact information.
The legal basis for this processing is Article 6(1)(b) GDPR, as the processing is necessary to fulfil your order.
7. Contacting Us
If you contact us by email, telephone or through another communication channel offered on the website, we process the information you provide in order to respond to your request.
If your enquiry relates to an existing or potential order or contract, the legal basis is Article 6(1)(b) GDPR.
For other enquiries, processing may be based on our legitimate interest in responding to communications concerning our business, pursuant to Article 6(1)(f) GDPR.
8. Cookies and Similar Technologies
Our website may use technically necessary technologies required for the operation of the website, online store, shopping cart, checkout, security and privacy preferences.
We currently do not use Google Analytics, Meta Pixel, Google Tag Manager or similar third-party advertising or analytics integrations.
If we introduce optional analytics or marketing technologies in the future, this Privacy Policy will be updated accordingly and, where required by law, such technologies will only be activated after obtaining the appropriate consent.
Where consent is required for a particular technology, processing is based on Article 6(1)(a) GDPR. Consent may be withdrawn at any time through the available cookie or privacy settings.
9. No Newsletter
We currently do not operate an email newsletter and do not process personal data for newsletter marketing through this website.
If a newsletter or similar direct marketing service is introduced in the future, this Privacy Policy will be updated accordingly.
10. Recipients of Personal Data
We only disclose personal data where necessary for the purposes described in this Privacy Policy or where required by law.
Depending on your interaction with our online store, recipients may include:
Hostinger, for website hosting and ecommerce infrastructure
Stripe and relevant payment service providers, for payment processing
Shipping or delivery providers, where necessary to deliver your order
Accounting, tax or professional service providers where necessary
Public authorities where disclosure is required by law
Service providers only receive the information necessary for the relevant service.
11. International Data Transfers
Some service providers may process personal data outside Austria or the European Economic Area.
Where personal data is transferred to a country outside the European Economic Area, such transfers are carried out in accordance with the requirements of the GDPR and, where applicable, on the basis of an adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or another legally permitted transfer mechanism.
12. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected and for as long as required by applicable legal, accounting, tax or contractual obligations.
Order, invoice and transaction information may be retained for the periods required under applicable Austrian accounting and tax law.
Other personal data is deleted or anonymised when it is no longer required for the purpose for which it was collected, unless continued retention is legally required or permitted.
13. Your Rights Under the GDPR
If the GDPR applies to the processing of your personal data, you may have the following rights:
Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time where processing is based on consent
Right not to be subject to certain decisions based solely on automated processing, where applicable
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact us at:
We may need to verify your identity before responding to certain requests.
14. Right to Lodge a Complaint
You also have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
In Austria, the competent supervisory authority is:
Austrian Data Protection Authority
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria
15. Data Security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no method of transmission or storage over the internet can guarantee absolute security.
16. External Links
Our website may contain links to websites operated by third parties.
We are not responsible for the privacy practices or content of third-party websites. When you leave our website, we recommend reviewing the privacy information provided by the respective third party.
17. Changes to This Privacy Policy
We may update this Privacy Policy when our website, services, legal obligations or data-processing activities change.
The current version will always be published on this page together with the date of the latest update.
18. Contact
For questions regarding this Privacy Policy or the processing of your personal data, please contact:
Daniel Uprimny
éepa coffee
Linzer Straße 161, Tür 14
1140 Vienna
Austria
Email: eepamoment@gmail.com
Phone: +43 676 3595238
Contact
Newsletter
eepamoment@gmail.com
+4369917854471
© 2024. All rights reserved.