How Kura Wien handles personal data, under the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act
We are a small brewery. We collect what we need to answer you, send you sake and run a masterclass, and nothing beyond that.
Kura Ferments FlexCo, Kumpfgasse 7, 1010 Vienna, Austria.
Questions about your data: [email protected], +43 664 1220006.
We have not appointed a data protection officer; we are not required to.
When you write to us or place an order by email: your name, email address, postal address, phone number and the contents of your message. We need these to answer you and to deliver what you ordered.
When you book a masterclass: your name, contact details and the session you chose.
When you subscribe to the newsletter: your email address.
Automatically, when you visit: our host records the usual server log data – IP address, date and time, the page requested, referrer, browser and operating system.
To perform a contract or take steps before entering one – orders, reservations, enquiries: Art. 6(1)(b) GDPR.
With your consent – the newsletter: Art. 6(1)(a) GDPR. You can withdraw it at any time, with effect for the future.
Our legitimate interest in a site that works and is not abused – server logs, security: Art. 6(1)(f) GDPR.
Legal obligations – invoices and other records we must keep: Art. 6(1)(c) GDPR.
We set no advertising or analytics cookies.
The shopping cart is stored in your own browser using local storage, so that it survives when you move between pages. It stays on your device, we never receive it, and you can clear it at any time through your browser settings. It is technically necessary for the shop to work, so it does not require consent.
The typefaces used on this site are served from our own server. Your browser makes no request to Google or any other third party to display them, and no IP address is transmitted anywhere for that purpose.
Our hosting provider, which stores the site and its log files on our behalf under a data processing agreement (Art. 28 GDPR).
Our email provider, which carries the messages you send us.
Shipping and payment partners, where an order requires them, and only to the extent needed.
We do not sell your data and do not pass it on for advertising.
We keep processing inside the EU wherever we can. Where a service provider processes data in a third country, we rely on the European Commission’s standard contractual clauses or an adequacy decision.
Enquiries and correspondence: as long as needed to deal with them, then deleted.
Order and invoice records: seven years, as Austrian tax and commercial law requires.
Newsletter: until you unsubscribe.
Server logs: a short period for security and troubleshooting.
You have the right to access your data (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to restrict processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing rests on consent, you may withdraw it at any time.
Write to [email protected] and we will deal with it.
If you believe we are handling your data unlawfully, you can complain to the Austrian data protection authority:
Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, [email protected], www.dsb.gv.at
This site is served over TLS, so what passes between your browser and the server is encrypted. No transmission over the internet can be guaranteed absolutely secure.
We will update this policy when the site or the law changes. The version published here is the one that applies.
Last updated 18 September 2026. This policy describes the site as it stands: an email-based ordering flow with no payment processing, no analytics, no advertising and no third-party content of any kind. It will need revisiting when a checkout, a shop system or any measurement is added.