Ceremonial Cacao DE

Privacy policy

Protecting your personal data matters to us. We process your data exclusively in accordance with legal requirements (GDPR, DSG, TKG 2021). Here you can find out what data is processed in this shop, what it's used for and how long it's stored.

1. Responsible Party

Jochen Petz, Kautzener Straße 4 , 3861 Eggern , Austria
E-mail: kakao@jochenpetz.at

2. Website Access and Hosting

This website is hosted on servers operated by World4You Internet Services GmbH, Linz, Austria, who act as our data processor. When you access the pages, technically necessary access data is processed (IP address, date and time, page accessed, browser and operating system) to deliver the website and ensure its security. The legal basis is our legitimate interest in secure operations (Art. 6 para. 1 lit. f GDPR). Data transmission is encrypted (SSL/TLS).

Fonts and all images on the page are loaded from our own server. We use no analytics or advertising tools and don't embed any content that sends data to third parties when the page is accessed. We only count anonymously which internet address our shop is accessed from (address of the referring page without parameters, number and time) – without IP address, without cookies and without any reference to a person.

English Version. The English version of this website is automatically translated from the German texts. We use an AI service (Anthropic, USA) as a data processor for this. Only the texts of the website are transmitted – no names, addresses or other personal data of our visitors and customers. The chosen language is contained in the page address; no cookie is set for this. The German version is binding.

3. Cookies

We only use two cookies:

The legal basis is § 165 para. 3 TKG 2021 or our legitimate interest in operating the partner programme (Art. 6 para. 1 lit. f GDPR). You can delete or block cookies in your browser at any time; however, the basket won't work without the session cookie.

4. Orders and Customer Account

When you place an order, we process the data you provide: name, address, email address, optionally phone number and company, the items ordered, your notes, the information "Found through / Recommended by" as well as the date, time and IP address of your order. We need this data to fulfil the contract, deliver the goods, issue the invoice and keep you informed about your order status (Art. 6 para. 1 lit. b GDPR). Payment is by bank transfer; we can see your transfer details on our bank statement.

A customer entry is created for your email address, which summarises your orders. Wholesale customers, cacao partners and ceremony leaders have access to a login; passwords are stored exclusively encrypted (as a hash).

Data Sharing. For shipping, we pass your name and delivery address to the parcel service (currently Hermes); we send you the tracking number by email. Otherwise, only our bank and authorities receive data to the extent legally required.

Storage Duration. We retain order and invoice data for seven years due to tax retention requirements (§ 132 BAO), after which it is deleted.

5. Cacao Subscription and Subscription Gift Certificates

With the cacao subscription, we additionally process the variety, quantity and duration you've chosen as well as the date, time and IP address of your consent to the subscription terms (proof of contract conclusion). For a subscription gift certificate, we also store the information you provide about the recipient (name, personal message, email address if applicable) in order to create and send the gift certificate. The legal basis is contract performance in each case (Art. 6 para. 1 lit. b GDPR).

6. Newsletter

For the newsletter we need your email address, optionally your name. After signing up, you'll receive an email with a confirmation link (double opt-in); you'll only receive the newsletter after that. We store the date and time of your sign-up and confirmation. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR). You can withdraw it at any time – via the unsubscribe link in any newsletter or by email. The newsletter is sent via our own system, not through an external newsletter service.

We may occasionally contact customers who have ordered from us by email about similar products and promotions of our own (§ 174 para. 4 TKG 2021). You can object to this at any time free of charge – via the unsubscribe link or by email.

7. Cacao Ceremonies Calendar

Notifications. If you sign up for news from specific states or locations, we store your email address, optionally your name and the regions you've chosen. Double opt-in applies here too; you can unsubscribe via the link in any notification or change your regions (Art. 6 para. 1 lit. a GDPR).

Ceremony Leaders. Anyone posting ceremonies publishes the data they provide (name of the leader, location, description, contact options, image and website if applicable) in the public calendar. Entries can be changed or deleted at any time by the poster.

8. Cacao Partner Programme

We process information from cacao partners' registration (name, email address, desired address, optional homepage, association and desired reward) as well as orders and rewards resulting from them to operate the programme (Art. 6 para. 1 lit. b GDPR). If you come to us as a customer through a recommendation, your order is assigned to that partner. Partners only see order number, date, quantity and amount – not your name and not your address.

Recommendation emails. Partners can have a recommendation sent to people they know personally. To do this, they provide that person's email address and optionally their name. We use this data exclusively for this single email and store it so that no one receives multiple emails. If you no longer want such an email, simply write to us – we'll delete the address.

9. Cacao samples

When we send you a cacao sample, we store your name, your address and, if applicable, your email address in order to dispatch the sample and send you a voucher for your first order (Art. 6 para. 1 lit. b or lit. f GDPR).

10. Contact

When you contact us via the contact form or by email, we use your details (name, email address, message) to answer your enquiry (Art. 6 para. 1 lit. b or lit. f GDPR). The message is sent to us by email and deleted once it has been dealt with and there is no legal obligation to retain it.

WhatsApp and Telegram. The buttons for these are just links. Only when you click on them and write to us there will WhatsApp (WhatsApp Ireland Limited, Dublin, Ireland) or Telegram process your data according to their own data protection terms – data may also be processed outside the EU in this process. If you don't want this, please write to us by email.

"Back in stock" notification. If you register for a sold-out product, we store your email address together with the product and send you a single message as soon as it becomes available again (Art. 6 para. 1 lit. a GDPR). The address is not used for any other purpose.

11. Instagram and Facebook

Our Instagram and Facebook profiles (Meta Platforms Ireland Limited, Dublin, Ireland) are also linked to only; no social media plugins are embedded. When you simply visit our website, no data is transferred to Meta. The follower numbers displayed are retrieved by our server, not your browser.

12. Your rights

You have the right to information, correction, deletion, restriction of processing, data portability and objection. You can withdraw any consent you have given at any time with effect for the future. Simply write to us at kakao@jochenpetz.at.

If you believe that the processing of your data violates data protection law, you can file a complaint with the supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

13. Changes

We update this privacy policy when the shop or legal situation changes. The version published here applies at any given time.

As of: 10/2026

Google Ads Conversion-Messung

Wenn du über eine Anzeige bei Google zu uns kommst, fragen wir dich mit einem kleinen Hinweis, ob wir Google mitteilen dürfen, dass über diese Anzeige eine Bestellung erfolgt ist. Nur wenn du zustimmst, speichern wir die von Google mitgegebene Klick-Kennung („gclid“) zusammen mit deiner Bestellung und übermitteln diese Kennung, den Zeitpunkt und den Wert der Bestellung an Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. Name, Adresse, E-Mail-Adresse oder bestellte Produkte werden dabei nicht übermittelt. So sehen wir, welche Anzeigen sich lohnen, und können Werbekosten sparen.

Rechtsgrundlage ist deine Einwilligung (Art. 6 Abs. 1 lit. a DSGVO). Du kannst sie jederzeit mit Wirkung für die Zukunft widerrufen – eine kurze E-Mail an uns genügt. Google kann Daten auch in den USA verarbeiten; Google ist nach dem EU-US Data Privacy Framework zertifiziert. Die Klick-Kennung wird nach der Übermittlung nicht weiter verwendet. Ohne Zustimmung merkt sich der Shop nur anonym, dass ein Besuch über eine Anzeige kam (ohne Cookie und ohne Kennung).