Privacy Policy

This Privacy Policy explains how GTasty Coffee GmbH ("we", "us", "our") collects, uses and protects your personal data when you visit our website gtastycoffee.pro (the "Website"). We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).

1. Controller

The controller responsible for data processing is:

2. Data We Process

Our Website is an information showcase. You can browse it without revealing any personal data. We only process personal data when you voluntarily contact us through our contact form. In that case we process:

• Your name (as provided in the form);
• Your email address (as provided in the form);
• The free-text message you submit to us;
• Technical metadata automatically transmitted by your browser (e.g. IP address, date and time of the request), to the extent necessary to respond and to secure the form against misuse.

3. Legal Basis for Processing

We process the data you submit through the contact form on the legal basis of Art. 6 (1) (b) GDPR (to take steps at your request prior to a contract, where your enquiry relates to a purchase) and Art. 6 (1) (f) GDPR (our legitimate interest in answering your enquiry and operating our customer communications).

Any technical metadata needed to deliver and secure the Website is processed on the basis of Art. 6 (1) (f) GDPR (legitimate interest in maintaining a functioning and secure website).

4. Purposes of Processing

We use the data described above exclusively to:

• Answer your enquiry and provide product information;
• Process pre-contractual requests (e.g. wholesale or gift orders);
• Protect our contact form from spam and misuse;
• Comply with legal retention obligations under German commercial and tax law (HGB, AO).

5. Storage Period and Deletion

We store your enquiry only for as long as necessary to answer it and to handle any follow-up. Where your enquiry could relate to a contract, we retain the correspondence for the duration of the statutory limitation periods under §§ 195 ff. BGB (regular limitation period: three years) and any longer retention periods under the German Commercial Code (HGB) and Fiscal Code (AO), after which it is deleted.

6. Sharing of Data

We do not sell your data. We only share personal data with processors (Art. 28 GDPR) that provide us with technical services — for example the email and hosting provider that transmits our inbox. These processors are bound by written agreements and may only use your data on our instructions. We do not transfer data to third countries outside the EU/EEA unless an adequate safeguard (Art. 44 ff. GDPR) is in place.

7. Your Rights under the GDPR

You have the following rights at any time:

• Access (Art. 15 GDPR) to the data we hold about you;
• Rectification of inaccurate data (Art. 16 GDPR);
• Erasure of your data (Art. 17 GDPR, "right to be forgotten");
• Restriction of processing (Art. 18 GDPR);
• Data portability (Art. 20 GDPR);
• Objection to processing based on legitimate interest (Art. 21 GDPR);
• Withdrawal of consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Art. 7 (3) GDPR).

In addition, you have the right to lodge a complaint with the competent supervisory authority. For Berlin, the responsible authority is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

8. German Consumer Rights (BGB)

Consumers within the meaning of § 13 BGB benefit from the statutory consumer protection provisions, including the rights set out in our Terms of Service. Nothing in this Privacy Policy limits any mandatory consumer rights you may have under German civil law.

9. Security

We apply technical and organisational measures to protect your personal data against unauthorised access, loss and manipulation, including encrypted transmission (TLS) and access controls limited to authorised personnel.

10. Updates to this Policy

We may update this Privacy Policy to reflect changes in law or practice. The "last updated" date above indicates the most recent revision.

11. Contact

To exercise your rights or ask any question about this Privacy Policy, please contact us at kontakt@gtastycoffee.pro.

← Back to GTasty Coffee