Privacy Policy
Last update:
Dec 28, 2024
General information:
Alismora e.U. | The Laughing Broccoli
Last updated: 25 August 2026
This Privacy Policy explains how Alismora e.U. collects and processes personal data when you visit www.thelaughingbroccoli.com, subscribe to our emails or waitlist, purchase a digital product such as The Calm Kitchen Reset, interact with us on social media, or contact us.
The Laughing Broccoli is a brand of Alismora e.U.
1. Data Controller
The controller responsible for the processing of personal data is:
Alismora e.U.
Owner: Stephanie Catala-Bernhard
Praterstraße 11/1/30
1020 Vienna
Austria
Company Register Number: FN 684410 k
Company Register Court: Commercial Court of Vienna
Email: stephanie@thelaughingbroccoli.com
Website: www.thelaughingbroccoli.com
2. What Personal Data We Process
Depending on how you use our website and services, we may process information including your name, email address, billing details, order and transaction information, communications with us, and technical information generated when you use our website.
Technical information may include your IP address, browser and device information, operating system, date and time of access, pages visited, referring website, approximate location and similar technical or usage information.
We collect only the information reasonably necessary for the relevant purpose.
Purchasing The Calm Kitchen Reset does not require you to provide names, health information, allergies, feeding information or other personal information relating to your children.
Please do not send unnecessary medical records, diagnoses or other sensitive health information by email, contact form, social media or WhatsApp.
3. Website Hosting and Technical Operation
Our website is created and hosted using Webflow.
When you visit the website, technical data may be processed in order to deliver the website, maintain security, detect technical problems and protect the website against misuse. This may include IP addresses, device and browser information and server-log information.
Where processing is necessary for the secure and reliable operation of the website, the legal basis is our legitimate interest in operating a secure and functional website pursuant to Article 6(1)(f) GDPR.
Where Webflow or another technical service provider processes personal data outside the European Economic Area, international transfers are made in accordance with the requirements of the GDPR, including through an applicable adequacy decision or other appropriate safeguards such as the European Commission's Standard Contractual Clauses where required.
4. Purchases and Digital Product Delivery
When you purchase The Calm Kitchen Reset or another digital product, we process the information required to complete the transaction and provide the purchased content.
This may include your name, email address, billing information, country, order details, payment status and transaction information.
The legal basis for this processing is Article 6(1)(b) GDPR, as the processing is necessary to enter into and perform the purchase contract.
Certain information must also be retained in order to comply with accounting, tax and other legal obligations. Such processing is based on Article 6(1)(c) GDPR, including applicable Austrian accounting and tax record-keeping requirements.
Digital checkout and delivery may be provided through Kajabi. Payment information is processed by the payment provider available and selected during checkout. Where Kajabi Payments or Stripe is used, payment processing may involve Stripe. Other payment methods may involve the relevant payment provider displayed during checkout.
We do not receive or store your complete payment-card details ourselves.
Certain information, such as your email address and the information required for billing and payment, is necessary to complete a purchase and deliver the digital product. If this information is not provided, we may be unable to process the order or provide the purchased product. Information that is not necessary for the purchase is voluntary.
5. Contact and Customer Support
If you contact us by email, through a contact form or in relation to a purchase, we process the information you provide in order to respond to your request.
Where your request relates to an existing or potential contract, processing is based on Article 6(1)(b) GDPR.
For other general enquiries, processing may be based on our legitimate interest in responding to communications and operating our business pursuant to Article 6(1)(f) GDPR.
Email is our standard customer-support channel.
If you voluntarily provide your telephone number and specifically request, agree to or initiate communication through WhatsApp, we may use WhatsApp for individual customer-support communication. WhatsApp is a service within the Meta group and its use may involve processing by Meta entities and international data transfers.
Providing a telephone number is not required to purchase The Calm Kitchen Reset.
A telephone number provided for customer support is not used for WhatsApp marketing merely because you have purchased a product.
6. Newsletter, Waitlist and Marketing Emails
If you voluntarily subscribe to The Laughing Broccoli newsletter, waitlist or other marketing communications, we process your email address and any other information you voluntarily provide for that purpose.
Marketing emails are generally sent only where you have consented to receive them or where another statutory exception expressly permits the communication.
Where processing is based on consent, the legal basis is Article 6(1)(a) GDPR. Electronic marketing is also subject to Austrian telecommunications law, including § 174 TKG 2021.
Where permitted by § 174(4) TKG 2021, we may use an email address obtained in connection with a purchase to provide information about our own similar products or services without obtaining separate prior consent.
This applies only where all applicable statutory requirements are satisfied, including that the contact information was obtained in connection with a sale or service, the marketing concerns our own similar products or services, and you were given a clear, free and easy opportunity to object when your email address was collected and in every subsequent marketing message. Applicable requirements relating to the Austrian ECG list must also be respected.
For GDPR purposes, such processing may be based on our legitimate interest in direct marketing pursuant to Article 6(1)(f) GDPR.
We currently use Mailchimp to manage certain email lists and marketing communications. Mailchimp may process subscriber data on our behalf, including outside the European Economic Area.
You may withdraw your consent or object to receiving direct marketing at any time by clicking the unsubscribe link contained in our marketing emails or by contacting stephanie@thelaughingbroccoli.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
7. Social Media
We maintain business profiles on social media platforms including Instagram, Facebook and LinkedIn.
If you interact with our profiles, for example by following us, commenting, sharing content or sending us a direct message, we may process the information you provide and information made available to us through the relevant platform for communication, community management and business purposes.
Where an interaction concerns a potential or existing purchase or contract, processing may be based on Article 6(1)(b) GDPR.
For other interactions, processing may be based on our legitimate interest in communicating with our community, responding to enquiries and operating and promoting our business pursuant to Article 6(1)(f) GDPR.
For certain processing of statistical insights relating to our Facebook and Instagram business profiles, we may act as joint controllers with Meta Platforms Ireland Limited in accordance with the applicable arrangements between Meta and page operators.
Where applicable to LinkedIn Page Insights, we may similarly act as joint controllers with LinkedIn Ireland Unlimited Company under the applicable joint-controller arrangements.
The relevant social media provider also processes personal data under its own responsibility and according to its own privacy terms. Depending on the provider and functionality used, personal data may be processed outside the European Economic Area.
Further information about the processing carried out by the individual platforms is available in their respective privacy information.
Providing personal information through social media is voluntary. Where your enquiry concerns sensitive health or medical information, we recommend contacting us by email instead of sending such information through social media.
8. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies are technically necessary for the operation, security or functionality of the website or for services specifically requested by you. These technologies may be used without separate consent where legally permitted.
Other technologies may be used for purposes such as website analytics, measuring advertising performance or personalised marketing. These technologies are activated only where you have provided the legally required consent through our Cookie Settings.
Where consent is required, processing is based on Article 6(1)(a) GDPR together with § 165(3) TKG 2021.
You can accept or reject optional cookie categories through our cookie banner and change or withdraw your choices at any time through the Cookie Settings available on our website.
The Cookie Settings provide current information about the cookies and similar technologies in use, including their provider, purpose, category and duration.
Rejecting optional analytics or marketing cookies will not prevent you from accessing the essential functions of our website.
9. Google Analytics
Where you have provided consent, we may use Google Analytics 4, a web-analytics service provided by Google.
Google Analytics helps us understand how visitors use our website.
Depending on the configuration, information processed may include pages visited, interactions with the website, approximate location, device and browser information, session information and online identifiers.
We use this information to understand website performance and improve our content and services.
Google Analytics is activated only after the required consent has been provided through our Cookie Settings.
The legal basis is Article 6(1)(a) GDPR together with § 165(3) TKG 2021.
You can withdraw your consent at any time through the Cookie Settings.
Google may process information outside the European Economic Area, including in the United States. Where required, international transfers are made using an applicable adequacy decision or other legally recognised safeguards, such as Standard Contractual Clauses.
10. Google Ads and Meta Advertising
Where you have provided consent, we may use advertising and conversion-measurement technologies provided by Google and Meta, including Google Ads and the Meta Pixel.
These technologies help us understand whether advertisements lead users to visit our website or take actions such as registering for a waitlist or purchasing a product.
Depending on the technology and configuration, information such as online identifiers, IP and device information, website visits, interactions and conversion events may be processed.
These advertising and tracking technologies are activated only after the legally required consent has been provided.
The legal basis is Article 6(1)(a) GDPR together with § 165(3) TKG 2021.
You can withdraw or change your consent at any time through the Cookie Settings.
To the extent applicable under Meta's contractual arrangements, Alismora e.U. and Meta Platforms Ireland Limited may act as joint controllers for certain processing involving the collection and transmission of event data through the Meta Pixel. Meta is responsible for its subsequent processing of personal data in accordance with its own applicable terms and privacy information.
Google and Meta may process information outside the European Economic Area, including in the United States. Where required, international transfers are made using applicable adequacy decisions or other legally recognised safeguards.
11. Service Providers and Recipients
We use selected service providers to operate our website and business.
Depending on how you interact with us, recipients or processors may include:
- website hosting providers such as Webflow;
- digital sales and delivery providers such as Kajabi;
- payment processors such as Stripe;
- email-marketing providers such as Mailchimp;
- analytics and advertising providers such as Google and Meta;
- professional advisers such as accountants, tax advisers and legal advisers;
- IT and technical service providers; and
- public authorities where disclosure is legally required.
We provide third parties only with information necessary for the relevant purpose and use appropriate contractual and data-protection arrangements where required.
We do not sell your personal data.
12. International Data Transfers
Some service providers we use are based outside the European Economic Area or process personal data in other countries, particularly the United States.
Where the GDPR requires safeguards for an international transfer, we rely on an applicable adequacy decision, including the EU-U.S. Data Privacy Framework where the relevant recipient is eligible and participating, or on other appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Further information about relevant transfer safeguards can be requested from us at stephanie@thelaughingbroccoli.com.
13. How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected and for any additional period required by law.
Accounting records, invoices, order information and other records subject to Austrian accounting or tax retention obligations are generally retained for seven years. The statutory retention period generally begins at the end of the relevant calendar year. Longer retention may be required where records remain relevant to an ongoing tax or other official proceeding.
Other personal data is retained only for as long as necessary for the relevant processing purpose.
Longer retention periods may apply where required by a specific legal obligation or where data is reasonably necessary for the establishment, exercise or defence of legal claims. In such cases, the data is retained only for as long as necessary in light of the applicable statutory limitation periods.
Customer-support and general correspondence is retained for as long as necessary to deal with the request and, where appropriate, for a reasonable period afterwards where this is necessary for documentation or the establishment, exercise or defence of legal claims.
Newsletter information is generally retained while you remain subscribed. If you unsubscribe, we may retain limited information where necessary to document your opt-out and ensure that no further marketing communications are sent.
Analytics, advertising and cookie-related information is retained according to the applicable configuration and retention periods displayed through our Cookie Settings and by the relevant provider.
14. Your Data Protection Rights
Subject to the conditions of applicable law, you have the right to:
- request access to your personal data under Article 15 GDPR;
- request correction of inaccurate or incomplete personal data under Article 16 GDPR;
- request deletion of your personal data under Article 17 GDPR;
- request restriction of processing under Article 18 GDPR;
- receive certain personal data in a portable format under Article 20 GDPR;
- object to processing based on legitimate interests under Article 21(1) GDPR; and
- withdraw consent at any time where processing is based on consent under Article 7(3) GDPR.
These rights may be subject to statutory conditions and exceptions, including legal retention obligations.
Right to Object to Direct Marketing
Under Article 21(2) GDPR, you have the right to object at any time to the processing of your personal data for direct-marketing purposes.
If you object to processing for direct marketing, we will no longer process your personal data for those purposes. Where processing is based on consent, withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact:
stephanie@thelaughingbroccoli.com
We may need to take reasonable steps to verify your identity before fulfilling a request.
We do not currently use solely automated decision-making, including profiling, that produces legal effects or similarly significant effects concerning you within the meaning of Article 22 GDPR.
15. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with a competent data-protection supervisory authority.
Our Austrian supervisory authority is:
Austrian Data Protection Authority
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria
Email: dsb@dsb.gv.at
You may also have the right to lodge a complaint with another competent supervisory authority, particularly in the EU or EEA country of your habitual residence or place of work.
16. Security and Changes to This Privacy Policy
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
No internet-based system can guarantee absolute security.
We may update this Privacy Policy if our services, service providers, technologies or legal requirements change.
The current version will be made available on our website together with its last-updated date.
