Privacy Policy

Hanzhang Xu · Diabelligasse 1A/3/1 · 1130 Vienna, Austria
Email: hello@roter-panda.com

Contact and inquiry form: When you submit our form (sample or wholesale inquiry), we process your name, café/company, email address, phone number (optional), city, and message. Purpose: handling and responding to your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). Form submissions are processed via Netlify Forms (see Processors).

Email contact: When you contact us by email, we process your name, email address, and message content. Purpose: responding to your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).

Server logs: Our hosting provider (Netlify) automatically records IP address, timestamp, and browser identifier on each page request. Purpose: operating and securing the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

Netlify, Inc. (44 Montgomery St, San Francisco, CA 94104, USA): website hosting, static file delivery, and processing and storage of inquiries submitted through our contact form (Netlify Forms). A Data Processing Agreement (DPA) is in place with Netlify; data transfers to the USA are made under Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): email service (Google Workspace / Gmail) for incoming messages to hello@roter-panda.com. A Data Processing Agreement is in place with Google; transfers to third countries are made under Standard Contractual Clauses.

This website uses no cookies, no analytics tools, and no tracking. No user profiles are created. No cookie banner is required.

Email inquiries are retained for as long as necessary to process them, typically up to 12 months after last contact. Inquiries that lead to a business relationship may be retained longer in line with statutory retention obligations (up to 7 years). Server logs are deleted by Netlify after 30 days.

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Direct requests to: hello@roter-panda.com.

You have the right to lodge a complaint with the competent supervisory authority:
Austrian Data Protection Authority
Barichgasse 40–42, 1030 Vienna, Austria
dsb.gv.at · dsb@dsb.gv.at