Privacy policy

Data protection agreements

In this privacy policy we inform you about the processing of your personal data.

If you would like to change your data protection settings (grant consent or revoke consent already granted), click on the button “settings” below to change your settings.

Responsible

Matías Leon, Elisa – Konditorei und Café, Conventstraße 21+23, 22089 Hamburg, Germany, info@elisa-konditorei.com, +49 40 33482114

Hosting provider

Strato

We host our website at our contract processor Strato, Strato AG, Pascalstraße 10, 10587 Berlin, Germany.

Connection data is processed for the purpose of providing and delivering the website. For the mere purpose of delivery and provision of the website, the data is not stored beyond the call.

The legal basis for the data processing is the legitimate interest (absolute technical necessity for the provision and delivery of the “website” service expressly requested by you through your call) in accordance with Art. 6 Para. 1 lit. f DSGVO.

In order to operate the Website, the connection data and other personal data are additionally processed within the framework of various other functions or services. Detailed information on this is provided in this data protection declaration for the individual functions and services.

Contact form

On our website you have the possibility to contact us directly via a contact form. After sending the contact form, the personal data entered by you will be processed by the person responsible for the purpose of processing your enquiry on the basis of the consent given by you by sending the form in accordance with Art. 6 Para. 1 lit. a DSGVO until further notice.
There is no legal or contractual obligation to provide the personal data. Failure to provide it merely means that you will not be able to send your request and we will not be able to process it.

Comment form

By commenting on our products, articles, photos or videos, the personal data you provide will be processed for the purpose of presenting your comment on our website as well as for internal documentation on the legal basis of the contract concluded with you in accordance with Art. 6 para. 1 lit. b DSGVO (free hosting contract to present your comment on our website). Your name and your comment will be published on our website. Your personal data will be stored until the commentary is deleted.

Security services

On this website we use the services of security service providers such as Captcha services to avoid non-human and automated input.

Google reCAPTCHA

In the event that you give your consent, we process your personal data with the service Google reCaptcha, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controllers, for the purpose of avoiding non-human and automated input. We enable the service to set cookies, collect connection data and data from your web browser. In addition, we enable the Service to calculate a User ID to uniquely identify the user within the advertising network operated by YouTube / Google. Data is stored on your device for a period of up to two years.

The legal basis for the data processing is your consent in accordance with Art. 6 para. 1 lit. a DSGVO. Failure to grant consent will result in the impossibility of using reCaptcha and associated forms.

You can revoke a previously granted consent by changing the data protection settings. Please click on the button “settings” below.

Web Fonts

Google Fonts

We process connection data and browser data with our contract processor Google Fonts, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for the purpose of providing the fonts required by the web browser to display the website. This data is processed only for the time necessary to select and transmit the fonts.

The legal basis for the data processing is the legitimate interest (absolute technical necessity for the provision and delivery of the “Website” service expressly requested by you by calling it up) in accordance with Art. 6 Para. 1 lit. f DSGVO.

Insofar as Google Fonts carries out further independent processing of the data, Google is solely responsible for this. Details can be found in the Privacy Policy and in the FAQ of Google Fonts.

Embeddings

Google Maps

If you give your consent, we process your personal data with the service Google Maps, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint responsible parties, for the purpose of displaying interactive maps on our website.

We enable the service to collect connection data, collect data from your web browser and place an advertising cookie. Through the placement of advertising cookies, Google is able to calculate an individual user ID for each user. These personal data suitable for clear identification are then processed within the advertising network operated by Google.

Insofar as Google carries out further independent processing of the data, especially within the framework of the Google advertising network, Google is the sole responsible party. Details can be found in the Google privacy policy.

Failure to grant consent merely means that the Google Maps service is not made available to you. You can revoke any consent you have already given by changing your privacy settings. Please click on the button “settings” below.

The legal basis for the data processing is your consent in accordance with Art. 6 para. 1 lit. a DSGVO. The legal basis for the transfer to the USA is the implementation decision of the EU Commission C/2016/4176 and the Privacy Shield certification.

YouTube

In the event that you give your consent, we will process your personal data with the service Youtube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controllers for the purpose of playing videos on our website.

We enable the service to collect connection data, collect data from your web browser and place an advertising cookie. Through the placement of advertising cookies, Google is able to calculate an individual user ID for each user. These personal data suitable for clear identification are then processed within the advertising network operated by Google.

Insofar as Google carries out further independent processing of the data, especially within the framework of the Google advertising network, Google is the sole responsible party. Details can be found in the Google privacy policy.

Failure to grant consent merely means that the YouTube service is not made available to you. You can revoke any consent you have already given by changing your privacy settings. Please click on the button “settings” below.

The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a DSGVO.

Analysis services

Google Analytics

If you give your consent, we will process your personal data with the service Google Analytics, Google LLC, Amphitheatre Parkway, Mountain View, CA 94043, USA, as joint responsible parties for the purpose of error analysis and statistical evaluation of our website. Failure to give consent has no direct effect on the function of the website, but without statistical data, the further development of the website will be made more difficult for us. You can revoke any consent already given by changing the data protection settings. Please click on the button “settings” below.

We enable the service to collect connection data, data from your web browser and data about the content you have called up, as well as to execute analysis software and store data on your end device. The service anonymizes the collected data immediately after the collection and provides us with the anonymous data in the form of statistics for evaluation. We use these statistics for troubleshooting and for the further development of our website. The data on your end device is stored for a period of up to two years.

The legal basis for the data processing is your consent in accordance with Art. 6 para. 1 lit. a DSGVO. The legal basis for the transfer to the USA is the implementation decision of the EU Commission C/2016/4176 and the Privacy Shield certification.

Right of objection

If the processing of your personal data is based on a legitimate interest, you have the right to object to this processing.

If there are no compelling reasons for processing on our part worthy of protection, the processing of your data on the basis of this legal basis will be stopped.

You also have the right to object to the processing of your personal data for the purpose of direct marketing. If you do so, your personal data will no longer be processed for the purpose of direct marketing.

The lawfulness of the data processed up to the point of opposition is not affected by the opposition.

Right of withdrawal

You have the right to revoke your consent at any time by changing your privacy settings. Please click on the button “settings” below.

In the case of consent to receive electronic advertising, your consent can be revoked by clicking on the unsubscribe link. In this case, processing will be discontinued unless there is another legal basis.

The legality of the data processed until the revocation is not affected by the revocation.

Rights affected

You have the right to revoke a previously given consent at any time by changing the privacy settings. Please click on the button “settings” below.

If you have given your consent to receive electronic advertising, you can revoke your consent by clicking on the unsubscribe link. In this case, processing will be discontinued unless another legal basis exists.

The legality of the data processed until the revocation is not affected by the revocation.

Rights of data subjects

You also have the right of access, rectification, cancellation and limitation of the processing of personal data.

If the legal basis for processing your personal data is your consent or a contract concluded with you, you also have the right to data transferability.

Furthermore, you have the right to complain to the supervisory authority. You can find more information on the supervisory authorities in the European Union here.