Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Makrina Schneider (FCO Kuzina)
Lauenbach 60
77883 Ottenhöfen
Germany
Phone: +49 173 7544276
Email: makrina.152@gmx.de

Owner: Makrina Schneider.

2. Hosting and technical infrastructure

This website is hosted by Cloudflare, Inc. (Cloudflare Pages). When you access the website, Cloudflare automatically processes technical access data in server log files (e.g. IP address, date and time, page accessed, browser type).

Order data and content (e.g. menu, settings, orders) are stored in a Google Firebase (Cloud Firestore) database, a service of Google Ireland Limited.

This processing serves the secure and stable provision of our online offering. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure IT operations).

3. What data we process

When you order online with us, we process:

Email address (for order confirmation and matching your order)
Contents of the order (selected dishes, quantity, notes)
Order number, time, amount, currency, payment method and payment status

4. Purposes and legal bases

Processing and fulfilment of your order: Art. 6(1)(b) GDPR (contract or pre-contractual measures)
Secure operation, abuse and fraud prevention: Art. 6(1)(f) GDPR
Tax and commercial law retention: Art. 6(1)(c) GDPR

5. Payment processing via SumUp

Card payments are processed by the payment service provider SumUp (SumUp Payments Limited). Card and payment data are entered and processed exclusively directly by SumUp; we do not receive or store full card data.

We only receive feedback from SumUp as to whether the payment was successful, and possibly a transaction reference. For more information, see SumUp’s privacy policy: sumup.de/privacy.

6. Cookies and local storage

This website uses no tracking, analytics or marketing cookies. Information necessary for operation is stored in your browser’s local storage (localStorage) – in particular the contents of your shopping cart so that it is preserved when you switch pages.

This storage is necessary for the function you have requested (the ordering process) and is therefore permitted without consent under § 25(2) no. 2 TDDDG. Login status in the internal administration area is stored only for the session (sessionStorage).

7. No analytics or marketing services

We do not use any web analytics services (e.g. Google Analytics), advertising networks or social media plugins.

8. Recipients and transfers to third countries

Your data is transmitted only to the service providers named above (Cloudflare, Google, SumUp) and only insofar as necessary to provide the service. A transfer to the USA is possible; the providers rely on the EU Standard Contractual Clauses or certification under the EU-US Data Privacy Framework.

9. Retention period

We store personal data only for as long as necessary for the purposes stated or as required by statutory retention periods (in particular tax and commercial law). Order data is deleted after the statutory periods expire.

10. Your rights

Under the GDPR you have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI BW).

12. Data protection contact

For questions about the processing of your data, please contact us at makrina.152@gmx.de.

13. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to our services.