Privacy Policy
Personal data (hereinafter referred to as "data") is processed by us only as necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e., the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations which is performed upon personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following privacy policy, we inform you particularly about the nature, scope, purpose, duration, and legal basis of the processing of personal data, insofar as we alone or together with others decide on the purposes and means of processing. Furthermore, we inform you below about the third-party components we use for optimization purposes and to increase the quality of use, provided that third parties process data under their own responsibility.
Information about us as controllers
The responsible provider of this website in terms of data protection law is Karoline Zemina, Weihburggasse 16/10, 1010 Vienna (“Nam Cooking”, “we”).
Contact details of the supervisory authority: Austrian Data Protection Authority Wickenburggasse 8 1080 Vienna, Austria Email: dsb@dsb.gv.at
Rights of users and data subjects
Users and data subjects have the right to:
Confirmation of whether data concerning them is being processed, information about the data being processed, further information about data processing, and copies of the data (see also Art. 15 GDPR);
Rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR);
Immediate deletion of data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is necessary according to Art. 17(3) GDPR, restriction of processing according to Art. 18 GDPR;
Receive the data concerning them and provided by them and to have this data transmitted to other providers/controllers (see also Art. 20 GDPR);
Lodge a complaint with the supervisory authority if they believe that the data concerning them is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).
Additionally, the provider is obliged to notify all recipients to whom data has been disclosed by the provider of any correction, deletion, or restriction of processing according to Articles 16, 17(1), and 18 GDPR. However, this obligation does not apply if such notification is impossible or involves disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Users and data subjects also have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Art. 6(1)(f) GDPR. In particular, an objection to data processing for direct advertising purposes is permissible.
Information on data processing
Your data processed during the use of our website will be deleted or blocked as soon as the purpose of storage ceases to apply, provided that there are no statutory retention obligations to the contrary and no different provisions are made below regarding specific processing procedures.
Server data
For technical reasons, particularly to ensure a secure and stable website, data is transmitted to us or our web space provider by your internet browser. With these so-called server log files, the type and version of your internet browser, the operating system, the website from which you switched to our website (referrer URL), the website(s) of our internet presence you visit, the date and time of the respective access, and the IP address of the internet connection from which our website is used are collected.
These data are temporarily stored, but not together with other data from you.
This storage takes place on the legal basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.
The data will be deleted after no more than seven days unless further storage is required for evidentiary purposes. Otherwise, the data will be wholly or partially excluded from deletion until the final clarification of an incident.
Analytics
This website collects personal data to power our site analytics, including:
Information about your browser, network, and device
Web pages you visited prior to coming to this website
Your IP address
This information may also include details about your use of this website, including:
Clicks
Internal links
Pages visited
Scrolling
Searches
Timestamps
We share this information with Squarespace, our website analytics provider, to learn about site traffic and activity.
Cookies
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.
These functional and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.
These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.
a) Session cookies
We use so-called cookies with our website. Cookies are small text files or other storage technologies that your internet browser places and stores on your device. Through these cookies, certain information about you, such as your browser or location data or your IP address, is processed individually.
This processing makes our website more user-friendly, effective, and secure, as it allows, for example, the display of our website in different languages or the use of a shopping cart function.
The legal basis for this processing is Art. 6(1)(b) GDPR, provided that these cookies process data for contract initiation or contract processing.
If the processing does not serve the purpose of contract initiation or contract processing, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6(1)(f) GDPR.
When you close your internet browser, these session cookies are deleted.
b) Third-party cookies
Where applicable, cookies from partner companies we cooperate with for advertising, analysis, or functionalities of our website may also be used with our website.
Please refer to the following information for details, particularly regarding the purposes and legal basis for the processing of such third-party cookies.
c) Removal option
You can prevent or restrict the installation of cookies by configuring your internet browser. You can also delete already stored cookies at any time. The necessary steps and measures depend on your specific internet browser. If you have questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. However, with so-called flash cookies, processing cannot be prevented via browser settings. Instead, you must change the settings of your flash player. The necessary steps and measures also depend on your specific flash player. If you have questions, please use the help function or documentation of your flash player or contact the manufacturer or user support.
If you prevent or restrict the installation of cookies, not all functions of our website may be fully usable.
Cookie Manager
To obtain consent for the use of non-essential cookies on the website, the provider uses a cookie manager.
When the website is accessed, a cookie with the user's setting information is placed on the user's device, so that the consent query does not have to be repeated on a subsequent visit.
This cookie is necessary to obtain the user's legally compliant consent.
The user can prevent or end the installation of cookies through their browser settings.
Visitor Data
When you buy something on this website, we collect personal information from you to fulfill the order. We may collect information like your:
Billing and shipping address
Details relating to your purchase (for example, your shirt size)
Email address
Name
Phone number
We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us.
Our payment processor(s) [payment processor name(s)] will also collect payment information from you. You can read their privacy policy at [payment processor privacy policy URL].
As you go through checkout, this site may auto-complete your shipping and billing address by sharing what you type with the Google Places API and returning suggestions to you to improve your checkout experience.
Squarespace
This website is hosted by Squarespace. Squarespace collects personal data when you visit this website, including:
Information about your browser, network and device
Web pages you visited prior to coming to this website
Web pages you view while on this website
Your IP address
Squarespace needs the data to run this website, and to protect and improve its platform and services. Squarespace analyzes the data in a de-personalized form.
Marketing emails
We may send you marketing emails, which you can unsubscribe from by clicking the link at the bottom of the email. We share your contact information with Squarespace, our email marketing provider, so they can send these emails on our behalf.
Newsletter
If you sign up for our free newsletter, the data requested from you for this purpose, i.e., your email address and - optionally - your name and address, will be transmitted to us. At the same time, we will store the IP address of the internet connection from which you access our website as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to send the newsletter, provide a detailed description of its contents, and refer to this privacy policy. The data collected will be used exclusively for the newsletter dispatch – in particular, it will not be passed on to third parties.
The legal basis is Art. 6(1)(a) GDPR.
You can withdraw your consent to the newsletter dispatch at any time in accordance with Art. 7(3) GDPR with effect for the future. To do this, you only need to inform us of your withdrawal or use the unsubscribe link contained in each newsletter.
Fonts
This website serves font files from and renders fonts using Google Fonts and Adobe Fonts. To properly display this site to you, these third parties may receive personal information about you, including:
Information about your browser, network, or device
Information about this site and the page you’re viewing on it
Your IP address
Contact requests/contact options
If you contact us via the contact form or email, the data you provide will be used to process your request. The provision of the data is necessary for processing and answering your request – without their provision, we cannot process your request or can only process it to a limited extent.
The legal basis for this processing is Art. 6(1)(b) GDPR.
Your data will be deleted once your request has been finally answered and the deletion does not conflict with any statutory retention obligations, such as in the case of subsequent contract processing.
Email requests
If you contact us by e-mail, the data of your request provided by you (name, contact details, content of the request) will only be processed for individual correspondence to answer for the purpose of customer service on the basis of a pre-contractual measure.
We guarantee that your data will be used exclusively by us, will not be passed on and will be treated confidentially in accordance with the applicable legal provisions. An exception is the transfer to data processors who work exclusively on the instructions of Nam Cooking, do not use the data for their own purposes and are bound by specific contracts to the data protection obligations of the General Data Protection Regulation.
Your rights
You have the right to access, rectification and erasure of your data, the right to restriction of processing, to object to processing, as well as the right to lodge a complaint with a supervisory authority.
If you have any questions about data protection and how to exercise your rights, please contact us via email.
Google services integration
With your consent, our website uses the following services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, E-Mail: support-at@google.com (“Google”), which in turn transmits your data to the USA for further processing. We would like to point out that the USA has a lower level of data protection than the EU and that US companies are obliged to hand over data to courts, law enforcement authorities, supervisory authorities or security bodies.
As part of your consent, you have the option of selecting and deselecting the individual services.
We use Google Analytics for error analysis and statistical evaluations and the Google Tag Manager for the integration of other Google services. In addition, with your consent, we integrate YouTube videos, which are also provided by Google.
Google also uses the collected information for its own purposes. For more information, see https://policies.google.com/technologies/partner-sites
To promote our products and services and communicate with interested parties or customers, we maintain a corporate presence on the Facebook platform.
On this social media platform, we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Facebook’s Data Protection Officer can be reached via a contact form:
We have regulated joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, from which the mutual obligations arise, is available at the following link:
Facebook Terms - Page Controller Addendum
The legal basis for the subsequent processing of personal data is Article 6(1)(f) GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.
The legal basis can also be the user’s consent to the platform operator according to Article 6(1)(a) GDPR. The user can revoke this consent at any time for the future by notifying the platform operator per Article 7(3) GDPR.
When accessing our online presence on the Facebook platform, Facebook Ireland Ltd., as the platform operator in the EU, processes the user's data (e.g., personal information, IP address, etc.).
This user data is used to provide statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes, as well as for creating user profiles. These profiles enable Facebook Ireland Ltd. to, for example, target users with interest-based advertising both within and outside of Facebook. If the user is logged into their Facebook account at the time of access, Facebook Ireland Ltd. can also link the data to the respective user account.
If the user contacts us via Facebook, the personal data entered on this occasion will be used to process the request. The user's data will be deleted once the user's request has been fully answered and there are no legal retention obligations, such as in the case of subsequent contract processing.
Cookies may also be set by Facebook Ireland Ltd. during data processing.
If the user does not agree with this processing, it is possible to prevent the installation of cookies by adjusting the browser settings accordingly. Already stored cookies can also be deleted at any time. The settings for this depend on the browser used. The processing of Flash cookies cannot be prevented via the browser settings but through the appropriate settings of the Flash Player. Preventing or restricting the installation of cookies may result in not all Facebook functions being fully usable.
More details on processing activities, their prevention, and the deletion of data processed by Facebook can be found in Facebook’s Data Policy:
It cannot be ruled out that the processing by Facebook Ireland Ltd. also occurs via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
To promote our products and services and communicate with interested parties or customers, we maintain a corporate presence on the Instagram platform.
On this social media platform, we are jointly responsible with Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.
Instagram’s Data Protection Officer can be reached via a contact form:
We have regulated joint responsibility in an agreement regarding the respective obligations under the GDPR. This agreement, from which the mutual obligations arise, is available at the following link:
Instagram Terms - Page Controller Addendum
The legal basis for the subsequent processing of personal data is Article 6(1)(f) GDPR. Our legitimate interest lies in the analysis, communication, sales, and promotion of our products and services.
The legal basis can also be the user’s consent to the platform operator according to Article 6(1)(a) GDPR. The user can revoke this consent at any time for the future by notifying the platform operator per Article 7(3) GDPR.
When accessing our online presence on the Instagram platform, Facebook Ireland Ltd., as the platform operator in the EU, processes the user's data (e.g., personal information, IP address, etc.).
This user data is used to provide statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes, as well as for creating user profiles. These profiles enable Facebook Ireland Ltd. to, for example, target users with interest-based advertising both within and outside of Instagram. If the user is logged into their Instagram account at the time of access, Facebook Ireland Ltd. can also link the data to the respective user account.
If the user contacts us via Instagram, the personal data entered on this occasion will be used to process the request. The user's data will be deleted once the user's request has been fully answered and there are no legal retention obligations, such as in the case of subsequent contract processing.
Cookies may also be set by Facebook Ireland Ltd. during data processing.
If the user does not agree with this processing, it is possible to prevent the installation of cookies by adjusting the browser settings accordingly. Already stored cookies can also be deleted at any time. The settings for this depend on the browser used. The processing of Flash cookies cannot be prevented via the browser settings but through the appropriate settings of the Flash Player. Preventing or restricting the installation of cookies may result in not all Instagram functions being fully usable.
More details on processing activities, their prevention, and the deletion of data processed by Instagram can be found in Instagram’s Data Policy:
It cannot be ruled out that the processing by Facebook Ireland Ltd. also occurs via Facebook Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA.
Linking Social Media via Graphic or Text Link
We also promote our presences on the following social networks on our website. The integration is done via a linked graphic of the respective network. By using this linked graphic, a connection to the respective social network server is only established when a user clicks on the corresponding graphic. This prevents an automatic connection to the respective social network server when visiting a website with social media advertising to display a graphic of the respective network. Only by clicking on the respective graphic will the user be redirected to the service of the respective social network.
After the user is redirected, the respective network collects information about the user. It cannot be ruled out that data processing may occur in the USA.
Initially, this includes data such as IP address, date, time, and the page visited. If the user is logged into their account on the respective network, the network operator may associate the collected information from the specific visit with the user’s personal account. If the user interacts via a “share” button of the respective network, this information may be stored in the user's personal account and potentially published. To prevent the collected information from being directly associated with the user’s account, the user must log out before clicking the graphic. Additionally, it is possible to configure the respective user account accordingly.
The following social networks are linked to our site:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy Policy: Facebook Privacy Policy
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA.
Privacy Policy: Instagram Privacy Policy
Google Analytics
We use Google Analytics on our website. This is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google.”
The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our website.
Usage and user-related information, such as IP address, location, time, or frequency of visits to our website, are transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. With this function, Google truncates the IP address within the EU or EEA.
The data collected in this way is used by Google to provide us with an evaluation of the visits to our website and the usage activities there. This data can also be used to provide other services related to the use of our website and the internet.
Google states that it will not associate your IP address with other data. In addition, Google provides further data protection information at:
Google also offers a so-called deactivation add-on along with further information:
Google Analytics Opt-out Add-on
This add-on can be installed on common internet browsers and offers further control over the data that Google collects when visiting our website. The add-on informs Google Analytics' JavaScript (ga.js) that no information about the website visit should be transmitted to Google Analytics. This does not prevent data from being transmitted to us or other web analytics services. Whether we use any other web analytics services can be found in this privacy policy.
Google AdWords
This website uses Google AdWords. AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use what is known as conversion tracking. If you click on an ad placed by Google, a cookie for conversion tracking is set. These cookies expire after a maximum of 90 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that personally identifies users.
For more information on data protection in Google Ads and Google Conversion Tracking, please refer to Google's privacy policy.