Cookie policy

This page explains which cookies and comparable storage techniques craftalux.at uses, what they are for and how you can change your decision at any time. It lists exactly what this shop actually sets — nothing more.

What cookies are

Cookies are small text files that a website stores in your browser and can read again on your next visit. They contain no programs and can neither read your files nor cause harm.

In law what matters is not the technique but whether information is stored on your device or retrieved from it. That is why the local storage described below follows the same rules.

Without these cookies the basket, the language choice and signing in do not work. They are therefore set as soon as you use the shop and contain no data for advertising purposes:

  • site_cookie_consent — stores only your own cookie choice (12 months)
  • NEXT_LOCALE — remembers the shop language you last chose (12 months)
  • strapi_site_domain — assigns the request to the right shop (6 months)
  • _medusa_cart_id — links your browser to your shopping basket (30 days)
  • _medusa_jwt — keeps you signed in after logging in (7 days)

Legal basis: Section 165(3) of the Austrian Telecommunications Act 2021 (strictly necessary for the service requested by the user), together with Art. 6(1)(b) and (f) GDPR.

Only once you agree in the cookie banner is the Yandex Metrica audience measurement loaded and its cookies set:

  • _ym_uid — visitor identifier (1 year)
  • _ym_d — date of the first visit (1 year)
  • _ym_isad — detection of ad blockers (2 days)
  • _ym_visorc — session recorder function (30 minutes)

It records the pages you open and how long you stay, the referring page, device type, browser and screen size, the approximate location derived from your IP address, and the terms you type into this shop’s search. Session recording (“Webvisor”) is switched off. The provider is YANDEX, LLC, ul. Lva Tolstogo 16, 119021 Moscow.

Legal basis: Art. 6(1)(a) GDPR and Section 165(3) TKG 2021 — your consent.

If you decline or make no choice, no analytics script is loaded and not one of these cookies is set. The shop remains fully usable.

Local storage

In addition, the shop keeps two items in your browser’s local storage: the checkout fields you have already filled in, so they survive a page reload, and the products you viewed most recently. Both stay on your device, are not transmitted to us and can be deleted together with the cookies in your browser settings.

Changing or withdrawing your choice

You can change your decision at any time and without giving reasons:

  • via the “Cookie settings” button at the bottom of every page — it shows the same options as on your first visit;
  • by deleting this website’s cookies in your browser — we will then ask again on your next visit;
  • in your browser settings, where cookies can be blocked in general or for individual websites.

Withdrawal takes effect for the future: from that moment nothing more is measured. If you block the necessary cookies, the basket and signing in can no longer work.

Transfers to third countries

The audience measurement is provided by a company established in the Russian Federation. There is no adequacy decision of the European Commission for that country under Art. 45 GDPR.

We therefore load this service only after your express consent, which is at the same time the basis for the transfer under Art. 49(1)(a) GDPR. You should be aware that the level of protection there does not correspond to the European one, that access by state authorities cannot be ruled out and that enforcing your rights may be more difficult.

Controller

CraftaLux — Dimitri Korenev
Grabmayrgasse 2, Stiege 1, Tür 17, 1210 Wien, Österreich
E-Mail: shop@craftalux.at

Full details about the provider are given in the Legal notice.

Everything else about the processing of your data — orders, payment, shipping, your rights — is set out in the privacy policy.

You have the rights of access, rectification, erasure, restriction, data portability and objection (Art. 15 to 21 GDPR); an informal message to the address above is enough. You may also lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40—42, 1030 Vienna.

Changes

If a cookie is added or removed, we change this page and ask for your consent again — the stored choice then loses its validity. Version of: 5 September 2026.