Privacy policy

Our privacy policy uses the terms as defined in the General Data Protection Regulation (Article 4 GDPR).

The controller responsible for the collection, processing and use of your personal data within the meaning of the General Data Protection Regulation is Bischoff, Kauffmann & Otani GbR, Hohenzollerndamm 152, 14199 Berlin, Germany.

Bischoff, Kauffmann & Otani GbR is represented by the managing partners Florian Norbert Bischoff, Jens Kauffmann and Takeshi Otani and can be reached as follows: email: support@culinario-mortale.com, website: www.culinario-mortale.com.

Bischoff, Kauffmann & Otani GbR has not appointed a data protection officer and is not legally required to do so. As data protection is an important concern for us and therefore a matter for the management, you are welcome to contact the managing partners regarding any data protection matters; they will handle your request competently and with high priority.

When operating the web shop, we process your personal data in order to inform you about us and our products, to enable you to purchase our products, to provide assistance and support and, if you wish, to contact you for other purposes. Personal data is also processed in order to make the web shop and related services available in the first place and to operate the web shop securely and efficiently. We process your personal data exclusively for these purposes.

Our web shop uses cookies and tracking technologies. Cookies are small text files that are stored on your device and allow settings you have already made and other changes you have carried out to be restored on your next visit.

We distinguish between essential and non-essential cookies. You generally have the option of blocking cookies in your browser and deleting cookies that have already been set. In that case, certain features of the site may no longer work, or may only work to a limited extent.

When you visit our site, we give you the opportunity to configure your privacy settings and to consent to or refuse the use of non-essential cookies and tracking technologies. Your settings and consents are stored exclusively locally on your device (in the so-called “local storage” of your browser) and are not transmitted to us or to third parties. If you wish to withdraw or adjust your consents, you can delete the locally stored data in your browser at any time. When you then reload the website, you will be asked for your cookie consent again.

Alternatively, you can also manage your consents and privacy settings by clicking the button below:

We store personal data only for as long as the purpose of its storage is fulfilled or as required by statutory retention obligations. Once the purpose of storage has been fulfilled or no longer applies and all statutory retention periods have expired, the stored data is deleted by us.

4.1 Security and availability of the web shop

In order to make the web shop available to you and to enable basic functions and proper operation, it is technically necessary to process personal data about you. For example, when a connection is established between your device and the servers hosting the web shop and our media (e.g. images), the IP address of the device used, the identifier of the device used, the operating system used and the browser are automatically processed in order to ensure a secure connection.

Depending on the location from which you access our services, this data is also sent to servers in secure third countries. Secure third countries are those for which the European Commission has confirmed an adequate level of data protection and whose national legislation guarantees a level of protection for personal data comparable to that of EU law.

In particular, essential cookies are also set on the device you use to ensure the basic availability of the web shop.

Although this is device data, it may be possible to establish a link to you from this data. The legal basis for the processing is Art. 6 (1) (b) GDPR (performance of a contract).

To ensure the security of the operation of the web shop, IP addresses, device identifiers, identifiers of the devices, operating systems and browsers used, the date and time of the visit, the website from which you access our web shop (referrer), your internet service provider (ISP) and the pages you view are processed as log files.

To operate our web shop reliably and securely, we use a content delivery network (CDN). This is a network of servers that cache content and media at multiple locations around the world. When you use our services, a connection is established between your device and the servers of our CDN.

The legal basis for the processing is Art. 6 (1) (b) GDPR (performance of a contract).

4.2 Compilation of statistics

4.2.1 Google Analytics

If you have given your consent as described above, our web shop uses Google Analytics. This service enables us to understand the use of our web shop by generating reports and thus to adapt our offering to the needs of our users.

Google Analytics sets its own cookies, which usually transmit the collected data to a server in the USA and store it there.

Data generated and processed by Google Analytics includes the IP address used by your device, the date and time of your visit, the browser type and operating system of your device, the website from which you access our web shop (referrer), your internet service provider (ISP) and the pages you view, including the time you spend on those pages.

We use the extension _gat._anonymizeIp, which means that your IP address is shortened and anonymised by Google if you access our web shop from an EU member state or from a contracting state of the Agreement on the European Economic Area.

If you do not want your data to be collected by Google Analytics, you will find a corresponding browser plug-in at the following link, with which you can object to processing by Google: https://tools.google.com/dlpage/gaoptout?hl=en In addition, you can block the setting of cookies by Google Analytics as described above or withdraw your consent to tracking by Google Analytics.

The legal basis for the data processing is Art. 6 (1) sentence 1 (a) GDPR (consent).

The operator of the Google Analytics service is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

Further information on Google’s privacy provisions can be found at https://policies.google.com/privacy?hl=en

4.3 Retailer search

In our retailer search (https://www.culinario-mortale.de/haendler-finden), we give you the option of searching for retailers in your area that offer our products in bricks-and-mortar shops by entering an address or city.

To convert the data you enter into longitude and latitude coordinates and to display the retailers on an interactive map, we use the Google Places API and the Google Maps API services.

By visiting the page https://www.culinario-mortale.de/haendler-finden and using the retailer search, the data you enter is transmitted to Google via the web shop.

Even if this data does not necessarily allow conclusions to be drawn about your place of residence or whereabouts and thus about your person, it may nevertheless be an indication thereof and is therefore treated by us as personal data.

Google collects and processes the data, which is usually transmitted to a server in the USA and stored there.

Categories of data generated and processed by the Google Maps API and Google Places API via the web shop are the IP address used by your device, the date and time of your visit, the browser type and operating system of your device, the website from which you access the retailer search (referrer), your internet service provider (ISP), the pages you view, including the time you spend on those pages, and the address or location data you enter into the search form.

To unlock Google Maps content, Google sets a cookie. The cookie has a lifetime of six months. You can block the setting of cookies as described above. In addition, you can disable JavaScript in your browser settings. In that case, however, you may not be able to use the retailer search at all, or only to a very limited extent.

The legal basis for this is Art. 6 (1) sentence 1 (b) GDPR (performance of a contract).

The operator of the Google Maps API and Google Places API services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Further information on Google’s privacy provisions can be found at https://policies.google.com/privacy?hl=en

4.4 Purchases in the web shop and payment

For the initiation, conclusion, performance and reversal of purchase contracts, including any liability and warranty claims that may arise from them, we process your first name and surname, your billing and delivery address, your email address, the details of your order, the chosen payment method and payment service provider, and your IP address.

For the shopping-cart function, a cookie is used to store the items that you as a customer have placed in your virtual shopping cart (essential cookie).

The legal basis for the data processing is Art. 6 (1) sentence 1 (b) GDPR (performance of a contract).

For the performance of the purchase contracts concluded with us, we pass on personal data, to the extent necessary, to a fulfilment service provider that dispatches the goods on our behalf.

The legal basis for the data processing is Art. 6 (1) sentence 1 (b) GDPR (performance of a contract).

Documents subject to retention obligations under tax and commercial law are retained in accordance with the statutory retention obligations and deleted after the retention period has expired.

The legal basis is the respective tax and commercial law provisions on retention obligations and periods in conjunction with Art. 6 (1) (c) GDPR (compliance with a legal obligation).

You can choose from various payment service providers to pay for your orders, which then process your personal data as follows:

PayPal

Our web shop offers PayPal as a payment method. PayPal is a payment service provider that enables payments to be processed via virtual accounts. When paying via PayPal, you either log in to PayPal with your PayPal account or use another payment method offered to you by PayPal.

If you select PayPal as your payment method during the ordering process and complete the purchase, we transmit your first name and surname, your email address, the details of your order and your IP address to PayPal.

The legal basis for the processing is Art. 6 (1) (b) GDPR (performance of a contract).

In addition to processing the payment, the transmitted data also serves the purposes of credit checks and fraud prevention. For these purposes, PayPal may pass on your personal data to credit agencies, external service providers or affiliated companies, insofar as this is necessary for the provision of its services.

The legal basis for the data processing for credit checks and fraud prevention is Art. 6 (1) sentence 1 (f) GDPR (legitimate interest).

The European operating company of PayPal is PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

Further information on data processing by PayPal can be found at https://www.paypal.com/en/webapps/mpp/ua/privacy-full

Klarna Sofortüberweisung (SOFORT bank transfer)

Our web shop offers SOFORT bank transfer as a payment method. SOFORT bank transfer is a payment method that enables cashless payment for goods.

If you choose this payment method, SOFORT GmbH provides its payment service to you directly itself. When using SOFORT bank transfer, you instruct SOFORT GmbH directly to initiate the transfer in your online banking portal. SOFORT GmbH interacts with you directly via the payment form and thereby has a direct relationship with you. Consequently, SOFORT GmbH is itself responsible for the collection and processing of personal data that takes place in this context.

We then receive an immediate payment confirmation, which enables us to dispatch the goods you ordered straight away.

The legal basis for the exchange of data between SOFORT GmbH and us is Art. 6 (1) sentence 1 (b) GDPR (performance of a contract).

The operator of the SOFORT bank transfer service is SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany.

Further information on data processing by SOFORT GmbH can be found at https://www.sofort.com/payment/wizard/getCmsContent/data_protection/EN/0/en.

Credit card

Our web shop offers credit card as a payment method. We process credit card payments with the payment service provider Stripe. When paying by credit card, you transmit the number, expiry date and security code of your credit card to Stripe Payments Europe Ltd.

A technical procedure is used to verify the validity of your credit card details and to carry out the payment. We then receive an immediate payment confirmation, which enables us to dispatch the goods you ordered straight away.

If you select credit card as your payment method during the ordering process and complete the purchase, we transmit your first name and surname, your email address, your billing and delivery address, the details of your order and your IP address to Stripe. Stripe uses a cookie to support the payment processing (essential cookie).

The legal basis for the processing is Art. 6 (1) (b) GDPR (performance of a contract).

In addition to processing the payment, the transmitted data also serves the purposes of credit checks and fraud prevention. For these purposes, Stripe may pass on your personal data to credit agencies, external service providers or affiliated companies, insofar as this is necessary for the provision of its services.

The operator of the Stripe service is Stripe Payments Europe Ltd., 1 Grand Canal Street, Lower Grand Canal Dock, Dublin, Ireland.

Further information on data processing by Stripe can be found at https://stripe.com/privacy.

The data processing for credit checks and fraud prevention is carried out on the basis of Art. 6 (1) sentence 1 (f) GDPR (legitimate interest).

4.5 Online cancellation function

At https://www.culinario-mortale.com/cancellation we provide you with the legally required online cancellation function, via which you can cancel a contract concluded with us.

When you submit the cancellation form, we process the data you provide there: your first name and surname, your email address and — where provided — your order number, the order date and your details about the order. In addition, we process the date and time of receipt of your cancellation notice.

We use this data exclusively to process your cancellation, to send you the legally required acknowledgement of receipt by email and to be able to prove receipt of your notice. For this purpose, your cancellation notice is stored in a database and forwarded by email to our support team.

For storing and sending the emails, we use Amazon Web Services (AWS) as a processor. The processing takes place in a data centre in Frankfurt am Main (AWS region eu-central-1). The contracting party is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg, Luxembourg. Further information on data processing by AWS can be found at https://aws.amazon.com/privacy/.

The legal basis for the processing is Art. 6 (1) sentence 1 (b) GDPR (reversal of the contract) and Art. 6 (1) sentence 1 (c) GDPR (compliance with our legal obligations, in particular the statutory obligation to provide an online cancellation function and to confirm receipt of your cancellation notice).

We store your cancellation notice until your cancellation has been fully processed and, beyond that, for as long as we must be able to prove receipt and content of your notice or statutory retention periods apply. The data is then deleted.

4.6 Customer care and support

For customer care, you can contact us by email. We display a corresponding email address for this purpose in the relevant places on the pages of our web shop. The personal data that you provide to us in an enquiry by email (e.g. name, email address, telephone number) is processed exclusively for correspondence with you and only for the purpose for which you provided the data to us.

In addition, at https://www.culinario-mortale.com/my-access we provide a way to download additional material for the goods we have sold. To make use of this option, you need an access code. This code is included with each of our products and is intended to ensure that only owners of our products can make use of this option. It is neither possible nor intended to draw conclusions about your identity from the access code.

The legal basis for the data processing is Art. 6 (1) sentence 1 (b) GDPR (performance of a contract).

4.7 Instagram

If you have given your consent as described above, our web shop embeds media from the Instagram service. Instagram is a social network that enables its users to share photos and videos.

When you access our pages, a connection to Instagram may be established. In the process, Instagram collects personal data, which is usually transmitted to a server in the USA and processed there.

Data collected by Instagram includes the IP address used by your device, the date and time of your visit, the browser type and operating system of your device, the website from which you access our web shop (referrer), your internet service provider (ISP) and the pages you view, including the time you spend on those pages.

The legal basis for the data processing is Art. 6 (1) sentence 1 (a) GDPR (consent).

The operator of the Instagram service is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Further information on Instagram’s privacy provisions can be found at: https://www.instagram.com/about/legal/privacy/

4.8 YouTube

If you have given your consent as described above, our web shop embeds media from the YouTube service.

When you access our pages, a connection to YouTube may be established. In the process, YouTube collects personal data, which is usually transmitted to a server in the USA and processed there.

The legal basis for the data processing is Art. 6 (1) sentence 1 (a) GDPR (consent).

The operator of the YouTube service is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

Further information on YouTube’s privacy provisions can be found at: https://policies.google.com/privacy?hl=en.

4.9 Google Remarketing

If you have given your consent as described above, our web shop uses Google Remarketing. Google Remarketing is a feature of Google AdWords that enables us to display advertising to users who have previously visited our web shop.

Google Remarketing sets its own cookies or uses similar technologies, which usually transmit the collected data to a server in the USA and store it there.

Data generated and processed by Google Remarketing includes the IP address used by your device, the date and time of your visit, the browser type and operating system of your device, the website from which you access our web shop (referrer), your internet service provider (ISP) and the pages you view, including the time you spend on those pages.

The legal basis for the data processing is Art. 6 (1) sentence 1 (a) GDPR (consent).

The operator of the Google Remarketing services is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

Further information on Google Remarketing’s privacy provisions can be found at: https://policies.google.com/privacy?hl=en.

4.10 Google Ads

If you have given your consent as described above, our web shop uses Google Ads. Google Ads enables us to place adverts in the search engine results of Google as well as in the Google advertising network and to evaluate the success of these adverts on the basis of user behaviour.

Google Ads sets its own cookies or uses similar technologies, which usually transmit the collected data to a server in the USA and store it there.

Data generated and processed by Google Ads includes the IP address used by your device, the date and time of your visit, the browser type and operating system of your device, the website from which you access our web shop (referrer), your internet service provider (ISP) and the pages you view, including the time you spend on those pages.

The legal basis for the data processing is Art. 6 (1) sentence 1 (a) GDPR (consent).

The operator of the Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

Further information on Google Ads’ privacy provisions can be found at: https://policies.google.com/privacy?hl=en.

4.11 Google Maps

If you have given your consent as described above, our web shop embeds media from the Google Maps service.

When you access our pages, a connection to Google Maps may be established. In the process, Google Maps collects personal data, which is usually transmitted to a server in the USA and processed there.

The legal basis for the data processing is Art. 6 (1) sentence 1 (a) GDPR (consent).

The operator of the Google Maps service is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland.

Further information on Google Maps’ privacy provisions can be found at: https://policies.google.com/privacy?hl=en.

You can assert the rights listed below against us. To do so, please send us an email to support@culinario-mortale.com. Please note that we must verify and establish your identity before you can assert your rights.

Right to withdraw consent

You have the right to withdraw your consent to data processing at any time. This right applies with effect for the future. Data collected up to the point at which the withdrawal takes effect remains unaffected.

Right to data portability

You have the right to request that your data be transferred from us to another body.

Right of access

You have the right to request information about your data.

Right to rectification, erasure or blocking

You have the right to have your data rectified, erased or blocked. The latter applies where the legal situation does not permit erasure.

Right to restriction of processing

You have the right to request that we restrict processing.

Right to lodge a complaint

You have the right to complain if you have grounds for objection.

You also have the right to address your concern to the competent supervisory authority. This is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Friedrichstr. 219, 10969 Berlin, Germany, Tel.: +49 30 13889-0, Fax: +49 30 2155050, email: mailbox@datenschutz-berlin.de.

As the controller, we reserve the right to adapt this privacy policy at any time to reflect changed processing operations and the applicable data protection provisions.