Privacy policy

1. Who is responsible

Siesta Haus GmbH, trading as Siesta Haus, runs this storefront and decides what happens to the data described below. For any request under this policy write to hello@siestahaus.com; it is the only contact channel and it is read daily.

2. Most of it never leaves your device

The basket, the saved pieces, any discount code you have entered and your cookie choice are stored in your browser's local storage, on your device. They are not sent to us, we cannot see them, and they disappear if you clear your browsing data for this site or switch to another browser. The contact form on this demonstration storefront behaves the same way: what you type stays on the page.

3. What we do collect, and why

Data	Purpose	Legal basis	Kept for
Name, delivery address, email, phone	Making, delivering and, if needed, collecting an order; the delivery crew call ahead	Contract	7 years after the end of the financial year (Austrian Federal Fiscal Code)
Access notes you give us (floor, lift, stairs)	Booking the right delivery	Contract	Deleted after delivery
Order contents, value and reference	Order handling, returns, the frame guarantee	Contract	7 years, or 5 years from delivery for the guarantee where that is longer
Payment confirmation (never card numbers)	Confirming payment	Contract	7 years
Photographs you send of damage or a fault	Assessing a guarantee claim	Contract	Deleted when the claim is closed
Window seat measurements	Cutting the cushion	Contract	With the order record
Email address only	Newsletter, if you asked for it	Consent	Until you unsubscribe
Aggregate page visits	Seeing which pages are read	Consent	12 months, aggregated, never per person

4. Cookies and the bar at the bottom

• Basket only. Local storage for the basket, saved pieces, discount code and your choice on the bar itself. Set in all cases because the shop does not work without it. No cookie is sent to any server for these.
• Allow counting. An aggregate count of page views. Set only if you press “Allow counting”; not set, and removed, if you choose “Basket only”. You can change your mind by clearing the site's data.

There are no advertising cookies, no social-media pixels and no third-party tracking scripts on this site. The fonts are loaded from Google Fonts, which receives your IP address when it serves them; no other third-party request is made by the pages.

5. Who else sees it

Only the processors needed to run the shop, each under a data processing agreement and each receiving only what its task needs:

• The payment provider: name, email, amount
• The furniture carrier and the parcel carrier: name, address, phone, access notes
• The email provider: your address, for order mail and, with consent, the newsletter
• The hosting provider: server logs including IP addresses, kept 30 days

We do not sell personal data, we do not share it for anyone else's marketing, and the workshop does not receive customer names, only order numbers.

6. Transfers outside the EEA

Our processors are in the EEA where we can arrange it. Where one is not, the transfer relies on the European Commission's Standard Contractual Clauses.

7. Your rights

Under the GDPR and the Austrian Data Protection Act (DSG) you may ask for a copy of your data, have it corrected or deleted, restrict its processing, receive it in a portable form, object to processing based on legitimate interest, and withdraw consent at any time. Email hello@siestahaus.com; we answer within 30 days and usually within a week. Where tax law requires us to keep a record, we will say so and delete it when the period ends.

8. Complaints

You may complain to the Austrian Data Protection Authority (Datenschutzbehörde, dsb.gv.at). We would prefer to hear from you first and put it right.

9. Changes

Material changes are noted here with a new date at the top. Earlier versions are available on request.

Terms & conditions