Privacy notice
Privacy notice
This text is complete in substance but has not yet been reviewed by a lawyer. Please have it checked before the final go-live; this notice goes afterwards.
Controller
casa del dessert GmbH Tiefkühlspezialitäten
Weilimdorfer Straße 80, 70839 Gerlingen, Deutschland
Phone 07156 433097, info@casadeldessert.de
In short
This site runs without analytics, advertising or tracking. The typeface is served from our own server. Exactly one third-party service is embedded — the map on the location page — and it only loads when you explicitly ask for it.
Server log files
When you open the site, our hosting provider processes technically necessary access data: IP address, date and time, the address requested, the volume of data transferred, the retrieval status and the browser identification.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and uninterrupted operation of the website and the prevention and investigation of attacks. Access logs are rotated daily and automatically deleted after seven days.
Your enquiry via the form
We process the details you enter: company, contact person and email address as required fields, plus — optionally — phone, number of pallets, desired period, temperature requirement, type of goods and your message.
The purpose is to handle your enquiry and prepare a possible contract — Art. 6 (1) (b) GDPR. For follow-up questions and business correspondence we additionally rely on Art. 6 (1) (f) GDPR; our legitimate interest is answering business enquiries.
Required are company, contact person, email address and your confirmation that you have read this notice. These details are neither a statutory nor a contractual obligation. Without them, however, we cannot handle your enquiry — no further disadvantage arises for you (Art. 13 (2) (e) GDPR).
When you submit the form we also briefly process your IP address in order to limit abuse (at most five enquiries per address within ten minutes). The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is protection against automated bulk sending. The address is held in memory only, discarded after ten minutes, and neither stored nor logged.
Retention: enquiries that do not lead to business are deleted no later than six months after the last correspondence. If a business relationship arises, the statutory retention periods apply: ten years for commercial books, annual accounts and invoices (§ 257 (4) HGB, § 147 (3) AO), eight years for accounting vouchers, six years for commercial letters received and sent.
Recipients of your data
This website runs on a server operated by ZAP-Hosting GmbH, Hafenweg 8, 48155 Münster, Germany. The enquiry email is sent from that same server — no separate mail delivery provider is involved. A data processing agreement pursuant to Art. 28 GDPR is in place with ZAP-Hosting.
Your enquiry arrives in our email mailbox, which we operate via Google Workspace. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; it processes the mailbox contents as a processor on our behalf. This may involve a transfer to Google LLC in the USA, covered by the European Commission’s adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) and, in addition, by standard contractual clauses under Art. 46 (2) (c) GDPR.
Beyond that we do not pass your details on — except to Google if you load the map (see below), and except where we are legally obliged to do so.
Consent and withdrawal
On your first visit we ask whether the map on the location page may be loaded. Rejecting and accepting are offered side by side with equal weight; the site is fully usable without consent and nothing depends on it.
Your decision is stored under the key “tk-consent” in your browser’s local storage — status, time and the version of the notice, with no personal data. It is only written once you have decided, never on a mere page view. This storage does not require consent under § 25 (2) no. 2 TDDDG, because your wish could not otherwise be honoured; it is never transmitted to us. After six months we ask again.
You may withdraw your consent at any time with effect for the future — via “Change consent” in the footer of every page, or by clearing your browser data. The map is then unloaded immediately. This does not affect the lawfulness of processing carried out before the withdrawal (Art. 7 (3) GDPR).
Google Maps on the location page
The map is only loaded once you have consented. Before that it is not even present in the page source — so not a single request goes to Google, no preview image and no connection warm-up.
After consent, your browser connects to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address as well as device, browser and map usage data are transmitted in the process; Google may store and read information on your device. The sole purpose is to display our location.
The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.
Google may transfer data to Google LLC in the USA. An adequacy decision of the European Commission of 10 July 2023 is in place for the USA (Implementing Decision (EU) 2023/1795, EU-US Data Privacy Framework); in addition, Google relies on standard contractual clauses under Art. 46 (2) (c) GDPR. For details see Google’s privacy notice at policies.google.com/privacy.
Without consent you see the postal address and a link to route planning at that spot — so you lose no information, only the embedded view.
Fonts
The Archivo typeface used here is served from our own server. No fonts and no other content are loaded from third-party servers when you open the site — the only exception is the map, and only after your consent.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). An informal message to info@casadeldessert.de is enough.
You also have the right to lodge a complaint with a supervisory authority — with the authority responsible for us as well as with the authority of your place of residence or work.
No automated decision-making
Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.
Right to object
Where we process data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR — server log files and follow-up questions about your enquiry), you have the right to object to that processing on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims. An informal message to info@casadeldessert.de is enough.
Competent supervisory authority
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Postfach 10 29 32, 70025 Stuttgart
Heilbronner Straße 35, 70191 Stuttgart
Phone 0711 615541-0, poststelle@lfdi.bwl.de