The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data are all data with which you can be personally identified. For detailed information on the subject of data protection, please refer to our data protection declaration listed below this text.
Data collection on this website Who is responsible for the data collection on this website?
How do we collect your data? Your data is collected by you providing us with this information. This can be data that you enter in a contact form, for example.
Other data is collected automatically or with your consent by our IT systems when you visit the website. These are mainly technical data (e.g. internet browser, operating system or time of the page call). This data is collected automatically as soon as you enter this website.
What do we use your data for? A part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior.
What rights do you have regarding your data? You have the right to receive information free of charge about the origin, recipient and purpose of your stored personal data at any time. You also have the right to demand the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent for the future at any time. In addition, you have the right to demand, under certain circumstances, the restriction of the processing of your personal data.
Furthermore, you have the right to complain to the responsible supervisory authority, and you can contact us at any time regarding this and other questions about data protection.
Analysis tools and third-party tools
2. Hosting und Content Delivery Networks (CDN)
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated by a website.
The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f GDPR).
Our hoster will only process your data to the extent necessary to fulfill its performance obligations and will follow our instructions with regard to this data.
We use the following hoster:
Squarespace Ireland Limited Attention: Legal – Privacy Le Pole House Ship Street Great Dublin 8, D08N12C Ireland
3. General Aspects and Mandatory Information
When you use this website, various personal data is collected.
We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. It is not possible to completely protect data from access by third parties.
Note on the responsible authority
The person responsible for data processing on this website is
Luisa Fernanda Mejia Upegui – Café del Cielo Krusenrotter Weg 56 24113 Kiel Germany E-Mail: firstname.lastname@example.org
Unless a more specific storage period has been specified within this data protection declaration, your personal data will remain with us until the purpose for which it was collected ceases to apply. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons have ceased to apply.
Note on data transfer to third countries outside the European Union
Data is transferred to third countries outside the European Union, and our website includes tools from companies based in the USA. If these tools are active, your personal data may be transferred to the US servers of these companies. We would like to point out that the USA is not a safe third country in terms of EU data protection law. US companies are obligated to disclose personal data to security authorities without the possibility of legal action against you as a data subject.
It cannot therefore be ruled out that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for monitoring purposes. We have no influence on these processing activities.
Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke a previously given consent at any time. The legality of the data processing that took place up to the revocation remains unaffected by the revocation.
Right to refuse data collection in special cases and direct advertising (Art. 21 DSGVO)
If data processing is carried out on the basis of Art. 6 para. 1 letter e or f DPA, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you lodge an objection, we will no longer process your personal data concerned unless we can demonstrate compelling reasons for processing which are worthy of protection and which outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims (objection pursuant to Art. 21 Par. 1 DSGVO).
If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling, insofar as it is connected with such direct marketing. If you object, your personal data will no longer be used for the purpose of direct marketing (objection under Art. 21 para. 2 DSGVO).
Right of appeal to the competent supervisory authority Pursuant to Art. 77 DSGVO, you have the right to appeal to the supervisory authority if you believe that your personal data are being processed unlawfully.
Right to data transferability You have the right to have data, which we process automatically on the basis of your consent or in fulfilment of a contract, handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent that it is technically feasible.
SSL or TLS encryption This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as site operator.
You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If the SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Information, deletion and correction Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to correct or delete this data. You can contact us at any time for this and for further questions about personal data.
Right to limitation of processing You have the right to request that the processing of your personal data be restricted. You can contact us at any time for this purpose. The right to limit processing exists in the following cases:
If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the review, you have the right to request that we limit the processing of your personal data.
If the processing of your personal data was/is unlawful, you can demand the restriction of the data processing instead of deletion.
If we no longer need your personal data, but you need it for the exercise, defence or assertion of legal claims, you have the right to demand the restriction of the processing of your personal data instead of deletion.
If you have lodged an objection in accordance with Art. 21 Paragraph 1 DSGVO, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to demand the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data – apart from their storage – may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state.
Objection to advertising e-mails The use of contact data published within the scope of the imprint obligation for the transmission of not expressly requested advertisement and information materials is hereby contradicted. The operators of the site expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as through spam e-mails.
4. Data Collection on this Website
Our Internet pages use so-called “cookies”. Cookies are small text files and do not cause any damage on your end device. They are either temporarily stored on your device for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser.
In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for the processing of payment services).
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behavior or display advertising.
Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g. for the shopping basket function) or to optimize the website (e.g. cookies for measuring the web audience) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is given. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of his services. If consent to the storage of cookies has been requested, the storage of the cookies in question will be carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR); the consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.
Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the scope of this data protection declaration and, if necessary, request your consent.
For technical reasons, the following data that your Internet browser sends to us or to our hoster are recorded (so-called server log files): – Browser type and version – Operating system used – Website from which you visit us (referrer URL) – Website that you visit – Date and time of your access – Your Internet Protocol (IP) address. This anonymous data is stored separately from any personal data you may have provided and therefore does not allow any conclusions to be drawn about a specific person. They are evaluated for statistical purposes in order to optimize our Internet presence and our offers.
If you send us inquiries via the contact form, your data from the Inquiry form including the contact data provided by you there for the purpose of processing the inquiry and for the case of follow-up questions stored by us. We will not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), provided that the inquiry was made.
The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for which it was stored ceases to apply (e.g. after your inquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.
Inquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your inquiry including all personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), provided that this has been requested.
The data sent to us by you via contact requests will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for which it was stored no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular legal retention periods – remain unaffected.
While you are going through the payment process, this website can automatically complete your delivery and billing address by sharing your entries with the Google Places API and making suggestions to improve your order process.
Data processing for the purpose of dispatch handling
When you purchase something on this website, we collect personal information from you in order to process the order. We may collect information such as yours:
Billing and shipping address E-mail address Name Phone number
We share this information with Squarespace, our online store hosting provider, so that they can provide website services to us.
In order to fulfill the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
When processing payments in our online store, we work together with these partners: technical service providers, credit institutions, payment service providers.
The Stripe service is provided by Stripe Inc. 510 Townsend Street, San Francisco, CA 94103USA. Stripe receives all payment information, including your name, billing address, email address, invoice amount and credit card numbers or account number. Purpose of the passing on of the data is the payment processing with you. For more information about data processing at Stripe, please click on the following link: https://stripe.com/en-de/privacy. As a provider based in the USA, Stripe transfers your data to the USA. There is no level of data protection in the USA comparable to that in the European Union. The data transfer to the USA takes place on the basis of the EU-US Privacy Shield. You can find further information on this at https://stripe.com/privacy-shield-policy.
If you would like to receive the newsletter offered on the website, we need an email address from you as well as information that allows us to verify that you are the owner of the email address and agree to receive the newsletter. Further data will not be collected or only on a voluntary basis. We use these data exclusively for sending the requested information and do not pass them on to third parties.
The processing of the data entered in the newsletter registration form is based exclusively on your consent (Art. 6 para. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address as well as its use for sending the newsletter at any time, e.g. via the “unsubscribe” link in the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you have provided us with for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the discontinuation of the purpose. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
After you have been removed from the newsletter distribution list, your e-mail address will be deleted or blocked by us or
Newsletter service providers may be stored in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in compliance with the legal requirements when sending newsletters (legitimate interest in the sense of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
Our newsletters are sent via MailChimp, a newsletter sending platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA (in the following “MailChimp”).
The e-mail addresses of our newsletter recipients, as well as their other data described in this notice, are stored on the servers of MailChimp in the USA. MailChimp uses this information to send and evaluate the newsletter on our behalf. Furthermore, MailChimp may use this data according to its own information to optimize or improve its own services, e.g. for technical optimization of sending and presentation of the newsletters or for economic purposes to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients for its own purposes or to pass them on to third parties.
MailChimp is certified under the US-EU data protection agreement “Privacy Shield” and is therefore committed to comply with the EU data protection regulations. Furthermore, we have concluded a “Data-Processing-Agreement” with MailChimp. This is a contract in which MailChimp commits itself to protect the data of our users, to process it on our behalf according to its data protection regulations and in particular not to pass it on to third parties.
The registration to our newsletter is done by the double opt-in procedure. After registration you will receive an e-mail asking you to confirm your registration. This procedure increases security and prevents registrations with foreign e-mail addresses.
Newsletter registrations are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Changes to your data stored with MailChimp are also logged.
b) Statistical survey and analyses
The newsletters contain a web beacon, a pixel-sized file which is retrieved from the server of MailChimp when the newsletter is opened. In the context of this retrieval, technical information such as browser and system information, as well as your IP address and time of retrieval are collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined by means of the IP address) or the access times.
Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons this information can be assigned to the individual newsletter recipients, but it is neither our nor MailChimp’s intention to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our contents to them or to send different contents according to the interests of our users.
c) Termination/revocation You can cancel our newsletter at any time and thus revoke your consent. A separate revocation of the dispatch via MailChimp or the statistical evaluation MailChimps is not possible. To cancel the newsletter you can use the link at the end of the newsletter or write us an e-mail to email@example.com.
6. Plugins und Tools
This website uses plugins from the video portal Vimeo. Provider is Vimeo Inc. 555 West 18th Street, New York, New York 10011, USA. When you visit one of our sites equipped with a Vimeo video, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This is true even if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transferred to the Vimeo server in the USA.
When you are logged into your Vimeo account, you allow Vimeo to associate your surfing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on “legitimate business interests”. Details can be found here: https://vimeo.com/privacy
Use of Cookieyes
This website uses the cookie content tool “CookieYes” from Mozilor Limited, 3 Warren Yard, Wolverton Mill, Milton Keynes, England, MK12 5NW, United Kingdom (“CookieYes”) to obtain effective user consent for cookies and cookie-based applications requiring consent.
To enable the CookieConsent-Tool to uniquely assign page views to individual users and to individually record, log and store for a session duration the consent settings made by the user, certain user information (including the IP address) is collected by the Cookie Consent-Tool when our website is accessed, transmitted to CookieYes servers and stored there.
This data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
A further legal basis for the described data processing is Art. 6 Para. 1 lit. c GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
We use the web analysis service Google Analytics of Google LLC on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). As far as you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google which is responsible for processing your data and for ensuring compliance with the applicable data protection laws.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide further services to the website operator in connection with website and internet use. The following information, among others, may be collected: IP address, date and time of the page view, click path, information about the browser and the device used by you, operating system used, referrer URL (website from which you accessed our website), purchasing activities. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other data from Google.
Google Analytics uses technologies such as cookies, web memory in the browser and counting pixels, which enable an analysis of your use of the website. The information thus generated about your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymization is activated on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
In addition, we have concluded a contract with Google for the use of Google Analytics. Through this contract Google assures that they process the data in accordance with the basic data protection regulation and guarantee the protection of the rights of the person concerned.
The data processing, in particular the setting of cookies, is carried out on the basis of Art. 6 Para. 1 lit. f GDPR out of our predominant legitimate interest in the needs-based and targeted design of the website. For reasons arising from your particular situation, you have the right to object at any time to the processing of your personal data based on Art. 6 Paragraph 1 letter f GDPR.
You can prevent the collection of data generated by Google Analytics and relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de
To prevent data collection and storage by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when you visit this website. You must opt-out on all systems and devices in use to be fully effective. If you delete the opt-out cookie, requests will again be sent to Google. If you click here, the opt-out cookie will be set: Disable Google Analytics.
For the uniform display of fonts, we use so-called web fonts, which are provided by Adobe. When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. For this purpose, the browser you use must connect to the Adobe servers. This enables Adobe to know that our website was accessed via your IP address. The use of Adobe TypeKit fonts is in the interest of a uniform and appealing presentation of our online offers. The legal basis is Art. 6 para. 1 lit. f GDPR.
Provider of these services is Adobe Systems Incorporated: 345 Park Avenue, San Jose, California 95110-2704, USA Adobe Systems Software Ireland Limited: 4-6 Riverwalk, City West Business Campus, Saggart, Dublin 24, Ireland
You can set your browser so that the fonts are not loaded from the Adobe servers (e.g. by installing add-ons such as NoScript or Ghostery). If your browser does not support the Adobe fonts or if you prevent access to the Adobe servers, the text will be displayed in the default font of the system.
Using the Google Tag Manager
We use the Google Tag Manager of Google LLC on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller. Google Ireland Limited is therefore the company affiliated with Google which is responsible for processing your data and for ensuring compliance with the applicable data protection laws.
If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR to the respective social media operator, when you visit our online offers in the above-mentioned social media, your data will be automatically collected and stored for market research and advertising, from which user profiles are created using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are usually used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as a contact option and your rights and settings options for the protection of your privacy, please refer to the provider’s data protection information linked below.
Facebook is an offer from Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”) The information automatically collected by Facebook Ireland about your use of our online presence on Facebook is usually transferred to a server of Facebook, Inc, 1601 Willow Road, Menlo Park, California 94025, USA and stored there. There is no adequacy finding by the European Commission for the USA. Our cooperation is based on standard data protection clauses of the European Commission. The data processing in the context of a visit to a Facebook fan page is based on an agreement between jointly responsible parties in accordance with Art. 26 DSGVO. Further information (information about Insights data) can be found here:https://www.facebook.com/legal/terms/information_about_page_insights_data
Instagram is an offer from Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”) Information automatically collected by Facebook Ireland about your use of our online presence on Instagram is typically transferred to and stored on a server at Facebook, Inc, 1601 Willow Road, Menlo Park, California 94025, USA. There is no adequacy finding for the USA by the European Commission. Our cooperation is based on standard data protection clauses of the European Commission. Data processing in the context of visiting an Instagram fan page is based on an agreement between jointly responsible parties in accordance with Art. 26 DSGVO. Further information (information about Insights data) can be found here https://www.facebook.com/legal/terms/information_about_page_insights_data
Due to ongoing technical development, we reserve the right to make additions or changes to this data protection declaration.
Just as coffee pairs well with cookies, our site uses 'digital cookies' to enhance your experience. By clicking "accept", you'll get the full flavor of our website.
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.