Privacy

1. Controller

Please send privacy requests to our postal address above. The phone contact for general enquiries and further company details are in the legal notice.

2. Visiting this website

The website has no analytics or advertising trackers, newsletter, external fonts, maps or other embedded services. Our own website code sets no cookies and uses neither Local Storage nor Session Storage. Cloudflare may use technically necessary security cookies. There is no contact form, user account or ordering system.

A small locally served script reads your browser’s preferred languages to choose German or English. A manual choice is kept in the page URL, without cookies or browser storage. The browser language list is not sent separately to a tracking or analytics service. The chosen language can appear as ?lang=de or ?lang=en in the requested URL and is therefore processed by Cloudflare as part of the hosting request. Figtree is served locally; no font provider is contacted by your browser. Locally served animations also respect reduced-motion settings.

This website is hosted through Cloudflare Pages by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When a page is requested, Cloudflare processes connection and technical information needed for delivery, security and operation, including IP address, requested URL, time and browser information. It operates an international network; processing outside the EU is possible.

Our website contains no analytics or advertising scripts of its own. Cloudflare’s technical processing is separate. Depending on the data category, Cloudflare processes data as a processor or for its own purposes. Its privacy policy explains this processing, international transfers and retention. We do not claim exclusively local processing or a specific retention period that has not been confirmed.

To the extent that personal data is processed to deliver and protect the website, this serves the legitimate interest in a functioning information website, Article 6(1)(f) GDPR.

3. Contacting us

Phone links open your phone application. We receive the information you provide only when you call or write to us.

For enquiries, we process the necessary contact and business information, for example your name, phone number, email address, shop details, message and any attachments. The purpose is to answer your enquiry and prepare a possible pilot. Please do not send passwords, platform credentials or unnecessary customer data.

General enquiries and communication with a company’s employees or representatives rely on Article 6(1)(f) GDPR: our legitimate interest in responding to business enquiries. Where you are the prospective contracting party yourself, necessary pre-contract steps may rely on Article 6(1)(b). Legal duties, particularly handling privacy requests, rely on Article 6(1)(c).

Providing your information is voluntary. Without a suitable contact method and the information needed for your question, we may be unable to reply. There is no automated decision-making with legal or similarly significant effects.

4. Recipients and service providers

Only people who need to handle your enquiry have access to it. Your phone and email providers, and providers used for our business communications, may process connection information and, for email, the message content. Professional advisers or authorities may be recipients where necessary for legal duties or claims.

Cloudflare delivers this website and processes technical request information for that purpose. This website does not embed delivery platforms. Separately linked websites have their own privacy notices.

5. Retention

This website stores no enquiries or visitor profiles. Correspondence you send to us is retained while needed to handle it and carry out necessary follow-up. It is then deleted unless a specific statutory retention duty or necessary legal claim justifies keeping it. We do not promise automatic deletion of every message after 30 days.

6. Your rights

Subject to GDPR conditions, you can request access, correction, erasure, restriction of processing and data portability. Where processing relies on your consent, you can withdraw it for the future.

You can object to processing under Article 6(1)(f) GDPR on grounds relating to your particular situation.

Write to our postal address above. No particular form or website account is required. Any necessary identity check will be proportionate. We normally respond within one month and will notify you of any legally permitted extension.

You can complain directly to a supervisory authority. The Bavarian State Office for Data Protection Supervision (BayLDA) is responsible for private businesses at our establishment. You do not have to contact us first.

7. Future partner management

Work with an authorised merchant account is a separate processing activity. Before it starts, data access, responsibilities, any processor relationship, services used and deletion rules will be established for the specific collaboration, with the necessary information provided. This website alone does not create manager access or transfer order or customer data.