Privacy Policy

1. Controller

The controller for data processing on this website is Nargiza Korgoldoeva (sole proprietor), Miciostrasse 3, 1150 Vienna, Austria. Email: nargiza@nomadkuche.com. Phone: +43 664 2239463.

2. Overview and legal bases

We process personal data in line with the GDPR and the Austrian Data Protection Act (DSG). Our legal bases are your consent (Art. 6(1)(a) GDPR), performing a contract or taking steps before a contract at your request (Art. 6(1)(b)), and our legitimate interest in a secure, working website (Art. 6(1)(f)).

3. Hosting (GitHub Pages)

This website is hosted on GitHub Pages (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA, a Microsoft company). When you visit the site, technically necessary data such as your IP address, date and time, requested page and browser information is processed in server log files. Legal basis: Art. 6(1)(f) GDPR. Data may be transferred to the USA on the basis of the EU-US Data Privacy Framework or standard contractual clauses.

4. Cookies and local storage

We store your cookie choice in your browser's local storage (key "nk_consent"). This is technically necessary to remember your decision. Analytics and marketing only run after you accept. You can change your choice at any time via "Cookie settings" in the footer.

The traffic source of your visit (for example a link, a referring site such as Instagram or TikTok, or a campaign tag) is saved in your browser's session storage (key "nk_source") so it is still known when you move between pages. It is passed to the booking form so we can see where bookings come from. It is not a cookie, contains no personal identifier, and is deleted when you close the tab. Legal basis: Art. 6(1)(f) GDPR (our interest in knowing which channels lead to bookings).

5. Google Tag Manager and Google Analytics 4

With your consent we use Google Tag Manager and Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Google LLC, USA) to measure how the site is used: page views, clicks, section views and key actions such as a booking, a contact request or a voucher request. We use Google Consent Mode: without your consent no analytics or advertising cookies are set, although Google Tag Manager is loaded and your IP address reaches Google when the page loads, and Google may receive cookieless signals. Legal basis for analytics: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time.

6. Google Fonts

The fonts on this site are loaded from Google servers (fonts.googleapis.com, fonts.gstatic.com). Your IP address is transmitted to Google when the page loads. Legal basis: Art. 6(1)(f) GDPR (a consistent, attractive presentation).

7. Booking via Cal.com

On the workshop pages we embed the booking calendar of Cal.com (Cal.com, Inc., USA). Loading it transmits your IP address to Cal.com. When you book, Cal.com processes the data you enter (name, email, date, number of guests, allergies, dietary wishes) so we can confirm and run your booking. Legal basis: Art. 6(1)(b) GDPR. Please also see Cal.com's privacy policy.

8. Voucher requests, email and WhatsApp

If you request a voucher, we process the data you enter (name, email, voucher details, message) to answer your request and to prepare payment and the voucher. The form is sent through a form service provider acting on our behalf (currently planned: Formspree, Inc., USA). If you email us or message us on WhatsApp (WhatsApp Ireland Limited / Meta), we process your contact details and message to answer you. Legal basis: Art. 6(1)(b) or (f) GDPR.

9. Links to other sites

We link to Instagram (Meta), WhatsApp and Google Maps. These are plain links: data is only sent to those providers once you click them, and their own privacy policies apply.

10. Retention

We delete your data once it is no longer needed for the purpose it was collected for. Booking and payment records are kept for the statutory retention period (generally 7 years under Austrian tax and commercial law). Contact requests without a contract are deleted after the matter is closed, unless claims are still possible.

11. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and to withdraw consent at any time (Art. 7(3)) without affecting the lawfulness of earlier processing. Please write to nargiza@nomadkuche.com.

You can also complain to the Austrian Data Protection Authority: Österreichische Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at, dsb@dsb.gv.at.