Privacy Policy (DSGVO / GDPR)

1. Data Controller Identification

The controller responsible for data processing on this website is:

2. Categories of Data Collected & Processing Purposes

We process personal data only when legally permissible and strictly required for business operations:

• Order Execution & Contract Fulfillment (Art. 6(1)(b) GDPR): When you place an order for tableware or gourmet hampers, we process your full name, shipping and billing address, email address, telephone number, and payment preference to fulfill the contract, dispatch goods, and provide courier tracking.
• Austrian Fiscal & Statutory Accounting (Art. 6(1)(c) GDPR): Pursuant to § 132 Austrian Federal Fiscal Code (Bundesabgabenordnung - BAO) and commercial law (UGB), invoices, order confirmations, and accounting records containing customer identification must be retained for 7 years.
• Private Concierge Consultations (Art. 6(1)(b) GDPR): Inquiries submitted for bespoke monogrammed dinnerware or sommelier cellar tasting boxes are processed to deliver customized quotations.
• Newsletter & Private Guild Invitations (Art. 6(1)(a) GDPR): Processed exclusively based on your explicit double opt-in consent. You can withdraw consent at any time via the unsubscribe link.

3. Hosting & Secure Transmission

Our website and web servers employ end-to-end 256-bit SSL/TLS encryption. All database servers handling customer accounts and checkout order processing are located in state-of-the-art data centers within the European Union (Germany and Austria), ensuring strict compliance with European data sovereignty guidelines.

4. Payment Processing & Banking Security

Payment transactions (EPS Online-Überweisung, Credit Cards, Apple Pay, Klarna) are executed directly via PCI-DSS Level 1 certified banking payment gateways. FineDine never stores full credit card numbers or banking PINs on its own web infrastructure.

5. Logistics & Courier Service Partners

To fulfill orders, we transmit your name, delivery address, and telephone number exclusively to trusted courier providers:

• Österreichische Post AG (Austrian Post): Rochusplatz 1, 1030 Wien, Austria (Standard & Express delivery within Austria and EU).
• DHL Express / UPS International: For expedited worldwide courier delivery outside the EU.

6. Data Subject Rights Under the GDPR

Under Articles 15 to 22 of the GDPR, you enjoy the following enforceable rights:

• Right of Access (Art. 15 GDPR): Request confirmation and a copy of all personal data held concerning you.
• Right to Rectification (Art. 16 GDPR): Request immediate correction of inaccurate or incomplete data.
• Right to Erasure (Art. 17 GDPR): Request deletion of your data, provided no statutory retention obligation (such as the 7-year Austrian BAO tax record duty) supersedes the request.
• Right to Restriction of Processing (Art. 18 GDPR): Request temporary freezing of data processing.
• Right to Data Portability (Art. 20 GDPR): Receive your data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR): Object at any time to data processing based on legitimate interests or for direct marketing.

7. Supervisory Authority & Right to Lodge a Complaint

If you consider that the processing of your personal data violates the GDPR or Austrian data protection laws, you have the statutory right to lodge a complaint with the Austrian Data Protection Authority: