Privacy Policy (Datenschutzerklärung)

Data Controller (Verantwortlicher)

Data We Collect

We collect personal data only when you voluntarily provide it to us. This may include:

• Name and contact details (when placing orders, making catering inquiries, or contacting us)
• Email address (for order confirmations, newsletter subscription with your consent)
• Payment information (processed securely via our payment provider — we do not store card details)
• Order history and preferences
• IP address and browser data (automatically when visiting our website)

Legal Basis for Processing (Art. 6 DSGVO)

We process your personal data on the following legal bases:

• Art. 6(1)(a) DSGVO — Consent: e.g. newsletter subscription
• Art. 6(1)(b) DSGVO — Contract performance: e.g. processing your food orders or catering bookings
• Art. 6(1)(c) DSGVO — Legal obligation: e.g. tax record keeping requirements
• Art. 6(1)(f) DSGVO — Legitimate interest: e.g. website analytics to improve our services

Purpose of Data Processing

We use the collected data for the following purposes:

• Processing and fulfilling your food orders
• Handling catering inquiries and bookings
• Communicating with you about your orders and inquiries
• Sending marketing communications (only with your explicit consent)
• Improving our website and services
• Complying with legal obligations (e.g. tax law, food safety regulations)

Data Sharing with Third Parties

We do not sell your personal data. We may share your data with the following categories of service providers, who process data on our behalf:

• Payment service providers (for secure transaction processing)
• Website hosting provider
• Email service provider (for order confirmations and newsletters)
• Tax advisor and accounting (as required by German tax law)

Cookies

Our website uses cookies. Essential cookies are necessary for the website to function properly. Analytics and marketing cookies are only set with your consent. You can manage your cookie preferences at any time through your browser settings or our cookie banner.

Data Retention

We retain your personal data only for as long as necessary for the purposes described above, or as required by law. For example, tax-related records are retained for 10 years as required by German tax law (§ 147 AO). Data for order processing is deleted after the retention period has expired.

Your Rights (Art. 15–21 DSGVO)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15) — request information about your stored data
• Right to rectification (Art. 16) — correct inaccurate data
• Right to erasure (Art. 17) — request deletion of your data
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20) — receive your data in a machine-readable format
• Right to object (Art. 21) — object to data processing based on legitimate interest
• Right to withdraw consent at any time (Art. 7(3)) — without affecting the lawfulness of processing before withdrawal

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO). The competent authority for Thuringia is: Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI).

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website uses SSL/TLS encryption for secure data transmission.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in legal requirements or our services. The current version is always available on our website.

Contact for Data Protection Inquiries

If you have any questions about this privacy policy or wish to exercise your rights, please contact us: