Privacy policy

Privacy Policy

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of the applicable legal provisions (GDPR, Austrian Telecommunications Act – TKG 2003).
In this privacy notice, we inform you about the most important aspects of data processing within the scope of our online shop babbily.eu.

1. Contact with Us

If you contact us by e-mail or through a contact form, the data you provide will be stored by us for the purpose of processing your inquiry and in case of follow-up questions.
We do not pass on this data without your consent.

2. Data Processing for Contract Fulfilment

To process your purchase, we store personal data necessary for order fulfilment:

  • Name, billing and delivery address

  • Contact details (e-mail, phone number)

  • Purchased products, order date, and payment method

The data provided by you are required to fulfil the contract or to carry out pre-contractual measures. Without this data, we cannot conclude the contract with you.

Data will only be shared with:

  • Payment service providers (for processing your payment),

  • Shipping companies (for delivering your order), and

  • Our tax advisor (for fulfilling our tax obligations).

Data is stored for as long as required under Austrian tax law (usually seven years). Product-liability-related data may be retained longer.

3. Shop System – Shopify

Our online shop is operated using Shopify, provided by
Shopify International Ltd., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Shopify stores and processes personal data (name, address, e-mail, payment information, IP address, and browser data) on its secure servers to enable the operation of our website, checkout, and fulfilment of your order.
Data may also be transferred to Shopify Inc., 151 O’Connor Street, Ottawa, ON K2P 2L8, Canada, and to Shopify Data Processing (USA).
Shopify ensures compliance with the EU–US Data Privacy Framework.

Data processing by Shopify is based on Art. 6 para. 1 lit. b (contract fulfilment) and lit. f (legitimate interest in a reliable and secure online platform) of the GDPR.

For more information, please see Shopify’s Privacy Policy and Data Processing Agreement:

4. Cookies and Consent

Our website uses cookies to make your shopping experience user-friendly and to enable essential functions such as the cart and checkout.

When you first visit our website, a cookie banner appears allowing you to accept or reject non-essential cookies.
Essential cookies are necessary for the website to function and cannot be disabled. Analytical and marketing cookies (such as Google Analytics or Meta Pixel) are only activated after your consent.

You can change or withdraw your consent at any time via the “Cookie Settings” link in the footer of our website.
If you disable cookies, the functionality of our site may be limited.

5. Web Analytics – Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, to analyse how visitors use our website.

Google Analytics uses cookies to collect information such as IP address (anonymised before storage), browser type, device information, and pages visited. This data may be transferred to Google servers in the EU and the USA.

Data processing occurs only with your consent (Art. 6 para. 1 lit. a GDPR).
You can withdraw your consent at any time via cookie settings.
Data is automatically deleted after 26 months.

More information: https://policies.google.com/privacy

6. Payment Processing

Payments in our shop are handled by the following providers, depending on your choice at checkout:

  • Shopify Payments (Stripe Payments Europe Ltd.)

  • PayPal (Europe) S.à r.l. et Cie, S.C.A.

These providers process your payment data (e.g., credit card number, bank details) under their own responsibility as data controllers.
The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfilment).

You can find their respective privacy policies here:

7. Newsletter

If you subscribe to our newsletter, we collect your e-mail address and store it for the purpose of sending you regular updates about our products and promotions.

You can unsubscribe at any time by clicking the “Unsubscribe” link in the email or by contacting office@babbily.eu.
We then immediately delete your data related to the newsletter.
This does not affect the lawfulness of processing carried out before withdrawal.

If we use a third-party provider ( MailerLite) to send newsletters, data processing occurs under a contract for order processing (Art. 28 GDPR).

8. Data Retention

All data related to purchases are retained as required under Austrian commercial and tax law (up to seven years).
Other personal data are deleted as soon as they are no longer necessary for the purpose for which they were collected.

9. Your Rights

You have the right to information, correction, deletion, restriction, data portability, withdrawal of consent, and objection to processing.
If you believe that the processing of your data violates data protection law, you can contact us at office@babbily.eu or lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

10. Data Security

We use SSL encryption and secure servers to protect your personal data against unauthorized access, loss, or misuse.
Shopify continuously monitors its systems for potential vulnerabilities and attacks.

Last updated: November 2025

You can reach us by contacting:
Sunny Bunny e.U.

Tel: +43 (0) 660 587 5184

E-mail: office@babbily.eu