PRIVACY POLICY
Last updated: May 3, 2025
At HOLA PERÚ CON SABOR Y AMOR, we take the protection of your personal data very seriously. This Privacy Policy complies with the provisions of the General Data Protection Regulation (GDPR) of the European Union and the Austrian Data Protection Act (DSG – Datenschutz).
📌 Data Controller
- Trade name: HELLO PERU WITH FLAVOR AND LOVE
- Address: Riesstraße 206, Graz
- Contact email: info@hola-peru.com
- Legal representative: Norma Llulisa Lopez Flores
🔒 What data do we collect? We collect and process the following data when you visit or make purchases in our online store:
- Name and surname
- Shipping and billing address
- Email address
- Phone number (optional)
- Payment information (processed through secure gateways)
- Order history
- Browsing data on our website (cookies and web analytics)
🎯 What do we use your data for?
- To process your orders and shipments
- To issue invoices and manage payments
- To respond to queries or requests
- To send you information related to your purchase
- To improve your user experience (through cookies and browsing statistics)
⚖️ Legal basis for processing We process your personal data based on:
- Execution of a contract (Art. 6.1.b GDPR): to manage your purchases
- Consent (Art. 6.1.a GDPR): for direct marketing
- Legitimate interest (Art. 6.1.f GDPR): to improve our services
- Legal obligation (Art. 6.1.c GDPR): to comply with tax and commercial obligations
🤝 Third parties with access to your data We only share your data with third parties when necessary to process your order:
- Shipping services (e.g. Österreichische Post, DHL)
- Secure payment platforms (PayPal)
- Technical services (web maintenance)
- Shopify Inc. (our e-commerce platform)
All of these third parties are also GDPR compliant.
🍪 Cookies We use cookies to optimize the performance of our website. You can accept, reject, or configure the use of cookies when you visit our website. For more information, see our Cookie Policy.
⏱️ Data retention period We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, tax, or accounting purposes (generally 7 years under Austrian law).
📁 Your rights under the GDPR You have the right to:
- Access your personal data
- Correct incorrect data
- Request the deletion of your data ("right to be forgotten")
- Limit or oppose processing
- Data portability
- Withdraw your consent at any time
- Not to be subject to automated decisions, including profiling
🔒 Data Security We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure.