How we use cookies on our Kaffeestudio.at site

Cookie Policy of kaffeestudio.at

Welcome to kaffeestudio.at's Cookie Policy. This policy helps you understand what cookies and tracking technologies we use, how we use them, and what your rights are in this regard.

Last updated: June 24, 2025

Table of Contents

Introduction

This document informs Users about the technologies that this Application employs to achieve the purposes described below. These technologies enable access to or storage of information (e.g., by using Cookies) on the User's device or the use of the device's data processing capabilities when the User accesses or runs this Application.

For simplicity, unless a distinction is warranted, such technologies are defined as "Trackers" within this document.

For example, while cookies can be used in both web and mobile browsers, they are not suitable as browser-based trackers for mobile apps. Therefore, in this document, the term "cookie" is only used when specifically referring to that type of Tracker.

Some of the processing purposes for which Trackers are used may require the User's consent. If consent is given, it can be freely withdrawn at any time by following the procedure outlined in this document.

This Application uses proprietary Trackers (so-called "first-party Trackers") and third-party Trackers in connection with third-party services (so-called "third-party Trackers"). Unless otherwise specified in this document, such third parties also have access to the Trackers they manage.

The validity period and expiration of cookies and other comparable Trackers depend on the lifespan set by the Provider or the respective third-party provider. Some of them expire as soon as the User ends the browsing session.

To obtain more precise and up-to-date information on the lifespan, as well as other information – such as regarding the use of additional Trackers – Users are referred to the descriptions of the categories listed below and, furthermore, to the linked privacy policies of corresponding third-party providers or to contact the Provider.

How this Application uses Trackers.

Functionality

This Application uses so-called "technical" cookies and similar Trackers to enable processes that are strictly necessary for the execution and provision of the service.

Trackers managed by third parties

Shopify

Company: Shopify Inc.

Location of processing: Canada

Personal Data processed: Device information +2

Shopify is a platform provided by Shopify Inc. that allows the Provider to create, host, and operate an e-commerce website. This service may place Trackers on the User's device. The most current and comprehensive information can be found in the service's official documentation.

Personal Data processed:
  • Device information
  • Usage Data
  • Tracker
Service provided by:
Tracker duration:
  • _ab: 3 years
  • _cmp_a: 1 day
  • _customer_account_shop_sessions: 1 month
  • _landing_page: 14 days
  • _orig_referrer: 14 days
  • _pay_session: Session duration
  • _s: 30 minutes
  • _secure_account_session_id: 1 month
  • _secure_session_id: 1 day
  • _shopify_country: Session duration
  • _shopify_d: Session duration
  • _shopify_evids: Session duration
  • _shopify_fs: 1 year
  • _shopify_ga: indefinite
  • _shopify_m: Session duration
  • _shopify_s: 30 minutes
  • _shopify_sa_p: 30 minutes
  • _shopify_sa_t: 30 minutes
  • _shopify_tm: Session duration
  • _shopify_tw: Session duration
  • _shopify_y: 1 year
  • _storefront_u: 1 minute
  • _tracking_consent: Session duration
  • _y: 1 year
  • c: 2 years
  • card_update_verification_id: 20 minutes
  • cart: 14 days
  • cart_currency: 14 days
  • cart_sig: 14 days
  • cart_ts: 14 days
  • cart_ver: 14 days
  • checkout: 28 days
  • checkout_prefill: 5 minutes
  • checkout_queue_checkout_token: 2 years
  • checkout_queue_token: 2 years
  • checkout_session_lookup: 21 days
  • checkout_session_token: 21 days
  • checkout_session_token*: 21 days
  • checkout_token: 2 years
  • checkout_worker_session: 3 days
  • customer_account_locale: 1 year
  • customer_account_new_login: 20 minutes
  • customer_account_preview: 7 days
  • customer_auth_provider: indefinite
  • customer_auth_session_created_at: indefinite
  • customer_payment_method: 1 hour
  • customer_shop_pay_agreement: 20 minutes
  • discount_code: indefinite
  • dynamic_checkout_shown_on_cart: 30 minutes
  • hide_shopify_pay_for_checkout: indefinite
  • identity-state: 1 day
  • identity-state-*: 1 day
  • identity_customer_account_number: 3 months
  • keep_alive: 14 days
  • localization: 14 days
  • login_with_shop_finalize: 5 minutes
  • master_device_id: 2 years
  • order: 21 days
  • pay_update_intent_id: 20 minutes
  • preview_theme: indefinite
  • previous_step: 2 years
  • profile_preview_token: 5 minutes
  • remember_me: 2 years
  • secure_customer_sig: 1 year
  • shopify-editor-unconfirmed-settings: 16 hours
  • shopifyChatData: Session duration
  • shopify_pay: 2 years
  • shopify_pay_redirect: 1 hour
  • source_name: indefinite
  • storefront_digest: 3 years
  • tracked_start_checkout: 2 years

Visa

Company: Visa Inc.

Location of processing: United States

Personal Data processed: Email +3

Visa is a payment service provided by Visa Inc. that allows Users to make online payments.

Personal Data processed:
  • Email
  • Usage Data
  • Tracker
  • Payment data
Service provided by:

PayPal

Company: Paypal

Location of processing: See PayPal's Privacy Policy

Personal Data processed: Email +3

PayPal is a payment service provided by PayPal Inc. that allows Users to make online payments.

Personal Data processed:
  • Email
  • Usage Data
  • Tracker
  • Payment data
Service provided by:
Tracker duration:
  • LANG: 8 hours
  • __paypal_storage__: indefinite
  • akavpau_ppsd: Session duration
  • enforce_policy: Session duration
  • l7_az: Session duration
  • nsid: Session duration
  • ts: Session duration
  • tsrce: Session duration
  • x-cdn: Session duration
  • x-pp-s: Session duration

Mastercard

Company: Mastercard Inc.

Location of processing: United States

Personal Data processed: Email +3

Mastercard is a payment service provided by Mastercard Inc. that allows Users to make online payments.

Personal Data processed:
  • Email
  • Usage Data
  • Tracker
  • Payment data
Service provided by:

Google Pay

Company: Google LLC

Location of processing: United States

Personal Data processed: Email +5

Google Pay is a payment service provided by Google LLC that allows Users to make online payments using their Google login credentials.

Personal Data processed:
  • Email
  • Last name
  • Usage Data
  • Tracker
  • First name
  • Payment data
Service provided by:

RevenueCat

Company: RevenueCat, Inc.

Location of processing: United States

Personal Data processed: Usage Data +1

RevenueCat is a payment service provided by RevenueCat, Inc. The service allows the Owner to monitor and analyze users and their purchase history, and can be used to track user behavior.

Personal Data processed:
  • Usage Data
  • Tracker
Service provided by:

Cloudflare

Company: Cloudflare, Inc.

Location of processing: United States

Personal Data processed: Tracker +1

Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc. Due to the way Cloudflare's functions are integrated, the service filters all traffic occurring through this Application, i.e., communication between this Application and the User's browser, and at the same time allows for the collection of analytical data that this Application contains.

Personal Data processed:
  • Tracker
  • various types of data, as described in the service's privacy policy
Service provided by:
Tracker duration:
  • _cfuvid: indefinite
  • cf_clearance: 30 minutes

User Experience

This Application uses Trackers to provide Users with advanced options and features for interacting with external content, networks, and platforms.

Trackers managed by third parties

Spotify Widgets

Company: Spotify AB

Location of processing: Sweden

Personal Data processed: Usage Data +1

Spotify is an audio content provision service offered by Spotify AB that allows this Application to embed corresponding content on its pages.

Personal Data processed:
  • Usage Data
  • Tracker
Service provided by:

Marketing

This Application uses Trackers to deliver advertising or marketing content and to measure its performance.

Trackers managed by third parties

Trustpilot Automated Feedback Service

Company: Trustpilot A/S

Location of processing: Denmark

Personal Data processed: Email +2

The Trustpilot Automated Feedback Service is a service provided by Trustpilot A/S that automates the sending of email requests for product or service reviews based on specific user actions within this Application.

Personal Data processed:
  • Email
  • Usage Data
  • Tracker
Service provided by:

Manage preferences and grant or withdraw consent

If the use of Trackers is based on consent, Users can grant or withdraw this consent by setting or updating their preferences via the appropriate privacy selection panel on this Application.

Regarding all Trackers used by third parties, Users can manage their preferences by using the relevant opt-out link (if available), by using the means specified in the third party's privacy policy, or by contacting the third party.

How to control or delete cookies and similar technologies via your device settings.

Users can use their own browser settings to:

  • see which cookies or other similar technologies have been set on the device;
  • block cookies or similar technologies;
  • delete cookies or similar technologies from the browser.

However, browser settings do not allow for detailed control of consent by category.

For example, Users can find information on how to manage cookies via the most common browsers at the following addresses:

Users can also manage certain Trackers used within mobile apps via corresponding device settings – for example, via device settings for mobile advertising, or general tracking settings (Users can access device settings and search for the relevant commands).

How to opt out of interest-based advertising

Furthermore, Users are advised that they can follow the instructions provided by YourOnlineChoices (EU and UK), Network Advertising Initiative (US) and Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to set their tracking preferences for almost all advertising tools. The Provider therefore recommends Users to make use of these means in addition to the information provided in this document.

The Digital Advertising Alliance offers the AppChoices application for controlling interest-based advertising in mobile apps.

Consequences of rejecting the use of Trackers

Users are free to decide whether to consent to the use of trackers or not. However, it should be noted that trackers help this application provide users with a better user experience and extended functionalities (in accordance with the purposes described in this document). Therefore, if the user decides to block the use of trackers, the provider may not be able to provide corresponding functionalities.

Definitions and legal references

Personal Data (or Data)

Any information that directly or indirectly identifies or can identify a natural person.

Usage Data

Information collected automatically through this application (or third-party services employed in this application), which can include: the IP addresses or domain names of the computers utilized by the Users who use this application, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., how much time was spent on each page within the application) and the details about the path followed within the application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Data Supervisor)

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.

Data Controller (or Owner, or Provider)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this application. The Data Controller, unless otherwise specified, is the Owner of this application.

This Application

The hardware or software tool by which the Personal Data of the User is collected and processed.

Service

The service provided by this Application as described in the relative terms (if available) and on this site/application.

European Union (or EU)

Unless otherwise specified, all references to the European Union within this document include all current member states to the European Union and the European Economic Area (EEA).

Cookie

Cookies are Trackers consisting of a small set of data stored in the User's browser.

Tracker

Tracker indicates any technology — e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting — that allows the tracking of Users, for example by enabling access to or storing information on the User’s device.

Legal information

This privacy statement relates solely to this Application, if not stated otherwise within this document.

How can we help?

What you can do

Your data

In case of problems

Although we strive to create a positive user experience, we know that occasional problems may arise between us and our users.

If this is the case, please feel free to contact us.

Contact us