Privacy Policy

Last updated: August 2026

This Privacy Policy explains how Tonic Mama collects and processes personal data when you visit tonicmama.com, contact us, request or book a cooking class, or subscribe to our newsletter.

1. Data Controller

The controller responsible for your personal data is:

Tonic Mama
Elena Turrin
Hawelgasse 22A/6
1180 Vienna, Austria

Email: [email protected]
Phone: +43 670 7038906

2. Personal Data We Process

Depending on how you interact with us, we may process:

first and last name;

country;

telephone number;

email address;

preferred class date;

number of guests;

messages and special requests;

booking and payment information;

dietary requirements;

allergy or intolerance information voluntarily provided by you;

newsletter preferences;

technical information relating to your use of the website, such as IP address, browser and device information.

3. Contact and Booking Requests

When you submit a contact or booking form, we process the data you provide in order to:

respond to your request;

check availability;

organise and administer your cooking class;

communicate with you regarding your booking;

take steps necessary to enter into or perform a contract.

The legal basis is generally Article 6(1)(b) GDPR where processing is necessary for pre-contractual steps or performance of a contract.

Where processing is necessary to comply with legal obligations, Article 6(1)(c) GDPR may apply.

4. Allergy and Dietary Information

Information concerning food allergies or intolerances may reveal information about your health and may therefore constitute a special category of personal data under Article 9 GDPR.

Where you provide such information, Tonic Mama processes it solely for the purpose of assessing whether your dietary requirements can be accommodated and of safely organising and conducting your class.

Where required, this processing is based on your explicit consent pursuant to Article 9(2)(a) GDPR.

You may withdraw your consent at any time. Withdrawal does not affect processing already carried out lawfully before withdrawal.

Please provide only the information that is necessary for us to organise your participation safely.

5. Website and Form Provider — HighLevel

Tonic Mama uses services provided by HighLevel Inc. / LeadConnector to operate parts of its website, forms, customer communication and customer relationship management system.

When you submit information through the website, HighLevel may process that information on behalf of Tonic Mama as a data processor.

HighLevel is headquartered in the United States. Data may therefore be processed outside the European Economic Area.

HighLevel states that it participates in the EU-U.S. Data Privacy Framework and also provides contractual safeguards, including Standard Contractual Clauses where applicable, for international transfers.

6. Email Communications

If you contact Tonic Mama by email, we process your email address and the content of your correspondence in order to respond to you and administer your request or booking.

The legal basis depends on the context and will generally be Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

7. Newsletter

If you actively subscribe to our newsletter, we may use your email address to send:

new class dates;

recipes;

news from Tonic Mama;

occasional offers.

The legal basis is your consent under Article 6(1)(a) GDPR.

Newsletter consent is voluntary and is not required to book or participate in a class.

You can unsubscribe at any time by using the unsubscribe link contained in our emails or by contacting us.

8. Cookies and Similar Technologies

Tonic Mama may use cookies and similar technologies.

Cookies that are strictly necessary for the operation of the website may be used without consent where permitted by law.

Analytics, advertising or other non-essential technologies are activated only after the required consent has been obtained.

Further information is available in our Cookie Policy / Cookie Settings.

9. Analytics and Marketing Technologies

[REMOVE THIS SECTION IF YOU DO NOT USE ANALYTICS OR ADVERTISING TECHNOLOGIES.]

If Tonic Mama uses tools such as Google Analytics, Meta Pixel or similar technologies, these tools will only be activated after the required consent has been obtained.

Information about the specific providers, purposes, data processed, retention periods and international transfers will be included in the Cookie Settings and/or this Privacy Policy.

10. Recipients of Personal Data

Personal data may be shared with service providers where necessary to operate Tonic Mama, such as:

website and hosting providers;

CRM and form providers;

email service providers;

payment providers;

IT service providers;

accountants or professional advisers where required;

public authorities where disclosure is legally required.

Service providers acting on our behalf receive access only to data necessary for their respective services and are subject to applicable data-protection requirements.

11. International Data Transfers

Some service providers may be located outside the European Economic Area.

Where personal data is transferred internationally, Tonic Mama relies on an applicable legal transfer mechanism, such as:

an adequacy decision by the European Commission;

the EU-U.S. Data Privacy Framework where applicable;

Standard Contractual Clauses;

another legally recognised safeguard.

12. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected and for applicable statutory retention periods.

In general:

enquiries are retained only as long as reasonably necessary to respond and administer the request;

booking and payment records may be retained for statutory accounting and tax periods;

newsletter information is retained until you unsubscribe or withdraw consent;

allergy and dietary information is retained only as long as reasonably necessary to safely organise and conduct the relevant class, unless legal obligations require otherwise.

13. Your Rights

Under the GDPR, you may have the right to:

access your personal data;

correct inaccurate data;

request deletion;

restrict processing;

object to certain processing;

receive certain data in a portable format;

withdraw consent at any time where processing is based on consent.

To exercise these rights, contact:

[email protected]

14. Right to Lodge a Complaint

You also have the right to lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria

15. Security

Tonic Mama takes reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration or disclosure.

16. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technologies or legal obligations change.

The current version will always be published on tonicmama.com.