Version: 4 November 2026. English translation; the German Datenschutzerklärung prevails in case of doubt.
1. Controller
LUXONARIA GmbH, Lustkandlgasse 3/1/1-2a, 1090 Vienna, Austria, phone +43 660 444 4422, e-mail [email protected]. This policy applies to bazarport.com, the central payment page of our online shops. For the ordering process in the respective shop, that shop’s privacy policy also applies.
2. What data we process and why
When you pay by card in one of our shops, the shop sends the data needed for the payment to bazarport.com: shop and order number, amount and currency, language, name, e-mail address and billing address. We use this data to process the payment, match it to the order, prevent fraud and carry out refunds. When you visit the pages, technical data (IP address, date and time, browser) is also processed to provide the site securely.
3. Card details
You enter your card details only on the GP webpay payment page of our payment service provider. We receive only the result of the payment (e.g. paid/declined, transaction number) and do not store card details. The payment service providers are Global Payments s.r.o., Austrian branch, Am Belvedere 1, 1100 Vienna, and Global Payments Europe, s.r.o., V Olšinách 626/80, 100 00 Prague 10, Czech Republic. For 3-D Secure authentication, data is passed to the card-issuing bank and the card schemes (Visa, Mastercard, Diners Club/Discover).
4. Legal bases
Art. 6(1)(b) GDPR (performance of the purchase contract), Art. 6(1)(c) GDPR (statutory retention obligations, in particular under section 132 of the Austrian Federal Fiscal Code, BAO) and Art. 6(1)(f) GDPR (legitimate interest in fraud prevention and IT security).
5. Recipients
Global Payments (payment processing, see section 3); the shop the order came from (also LUXONARIA GmbH); Hetzner Online GmbH, Gunzenhausen, Germany (hosting); Cloudflare, Inc. (network and security service; transfers to the USA are based on the EU-US Data Privacy Framework); our tax advisers within the scope of legal obligations.
6. Retention
We keep payment and accounting data for seven years (section 132 BAO), and beyond that only as long as claims can be asserted. Technical access data is stored only briefly.
7. Cookies
On the payment pages we use only technically necessary cookies required for the payment process. We do not use analytics or advertising cookies there.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Please contact [email protected]. You may also lodge a complaint with the Austrian Data Protection Authority (Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at).