Privacy policy

We process personal data only on the basis of the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG). In short: this website sets no cookies, uses no tracking or analytics, and loads nothing from Google.

1. Controller

2. Hosting and server log files

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit the site, the server processes technically necessary data: IP address, date and time, page requested, amount of data transferred, referrer URL, and browser and operating system details. This data is used solely to deliver the website and keep it secure (e.g. to fend off attacks) and is deleted as soon as it is no longer needed for that purpose.

The legal basis is our legitimate interest in operating the site securely and reliably (Art. 6(1)(f) GDPR). We have a data processing agreement with the host (Art. 28 GDPR).

3. Fonts, cookies, tracking

All fonts are served from our own server — no data is sent to Google or any other font provider. We set no cookies and use no analytics, tracking or advertising services. The “tilt your phone” feature reads your device’s orientation locally in your browser only; that data never leaves your device.

4. Orders and payment via Stripe

When you click “Buy” you are taken to a checkout page operated by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland), where you enter your name, email address, delivery address and payment details. Stripe processes the payment and checks it for fraud; we never receive payment details such as card numbers. Stripe may transfer data to Stripe group companies in the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses. Details:stripe.com/privacy.

Stripe passes on the data we need for your order (name, email address, delivery address, items ordered). We use it to perform the contract — to ship your poster and to contact you about your order (Art. 6(1)(b) GDPR). For delivery, we pass your name and address to the shipping company. Invoice and order data are kept for seven years to meet Austrian tax and commercial law obligations (§ 132 BAO, § 212 UGB; Art. 6(1)(c) GDPR).

When features become available later (such as changing the NFC link or gift messages), we’ll let you know by email at the address from your order — they are part of the product you bought. We don’t send advertising newsletters.

5. Contacting us by email

If you write to us, we process your message and contact details to answer your enquiry (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed and no retention obligations apply.

6. The NFC chip in the poster

The chip stores only a web address. When you tap it with your phone, your browser opens that address on our server, which creates the server log data described in section 2. The chip itself neither collects nor stores any data.

7. Your rights

You have the right to access, rectification, erasure and restriction of processing, to data portability, and to object to processing based on legitimate interests. Just write tohello@sushiundmaki.com.

If you believe the processing of your data violates data protection law, you can lodge a complaint with a supervisory authority — in Austria, the Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna,www.dsb.gv.at — or with the authority in your own EU country.

Last updated: October 2026