Privacy Policy

We process your data only on the basis of the applicable law (GDPR, Austrian Data Protection Act, TKG 2021). This page explains which data we process and why, who else gets to see it, and what rights you have.

Controller

Lucas Bohunovsky, The Jungle Vault, Frauenstiftgasse 5/1/11, 1210 Vienna, Austria
Email: contact@thejunglevault.com, phone: +43 677 62882778

Visiting the website

The website runs on Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you open it, Cloudflare processes technically necessary data such as your IP address, the time of access, the page requested and browser information in order to deliver the site and protect it from attacks. These logs are deleted after a few days. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.

Cookies and local storage

We do not use cookies for tracking or advertising, and no analytics tools. Fonts are served from our own server. Your shopping cart is stored only in your browser (local storage) and is sent to us only when you check out. You can delete it at any time in your browser settings.

Orders and payment

Payments are handled by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). At checkout you are taken to a Stripe page where you enter your name, email address, phone number, delivery address and payment details. Stripe processes this data for payment processing and fraud prevention and sets its own cookies on its payment page. We receive your name, contact and delivery details and the items ordered, but not your full card details. Stripe’s privacy notice: stripe.com/privacy.

The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). We store order data in our database at Cloudflare and keep it for the statutory retention period of seven years (§ 132 BAO, Art. 6(1)(c) GDPR).

Contact forms, enquiries and withdrawal

When you contact us through a form or by email, we process the details you provide (name, email address, message and any uploaded files) in order to answer your enquiry (Art. 6(1)(b) or (f) GDPR). Form submissions are stored at Cloudflare (database and file storage) and deleted once they are no longer needed, at the latest after three years unless a statutory retention duty applies.

If you ask us to tell you when a product is available, we store your email address, the product and your language, and send you one email once you can order it (Art. 6(1)(a) GDPR, your consent). After that email we delete your address. You can withdraw your consent at any time by writing to us.

If you withdraw from a contract through our online form, we keep the withdrawal with the order because we have to be able to prove it (Art. 6(1)(c) GDPR), and we send you a confirmation of receipt by email.

Notifications about new orders and forms, and confirmations to you, are sent through the email service Resend (Resend, Inc., San Francisco, USA). Our mailboxes are hosted by Zoho Mail (Zoho Corporation B.V., Utrecht, Netherlands). For transfers to the USA we rely on the EU-US Data Privacy Framework or EU standard contractual clauses.

My JungleSIM

If you sign in to My JungleSIM, your browser connects directly to the JungleSIM app’s database at Google Firebase (Google Ireland Ltd., Dublin, Ireland) with your app account. It shows the data your JungleSIM devices already store there for the app; this website stores nothing of it. The legal basis is the use of the JungleSIM service you signed up for (Art. 6(1)(b) GDPR). Firebase keeps you signed in in your browser’s storage until you sign out.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. To use them, write to contact@thejunglevault.com. If you believe that the processing of your data violates data protection law, you can lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

Last updated: October 2026