Privacy Policy

1. General

1.1 What is personal data

Personal data is information that reveals or may reveal the identity of the user. We adhere to the principle of data minimisation. The collection of personal data is avoided wherever possible.

1.2 Handling of personal data

Personal data is used exclusively for the establishment, content, performance or processing of the contractual relationship (Art. 6(1)(b) GDPR).

Beyond that, personal data is only processed where we have obtained your consent (Art. 6(1)(a) GDPR) or where the processing is necessary for our legitimate interests and the balancing of interests shows that no overriding interests, fundamental rights or freedoms on your part stand in the way (Art. 6(1)(f) GDPR). We may use processors for the processing of your personal data, with whom we have concluded a data processing agreement where required; beyond that, personal data is generally not disclosed to third parties. For the fulfilment of the contract, data is passed on to the shipping company commissioned with delivery only where this is necessary for the delivery of ordered goods. For the processing of payments, the payment data required for this purpose is passed on to the credit institution commissioned with the payment and, where applicable, to the commissioned and selected payment service provider. The processing of your personal data takes place in the EU as well as in countries classified by the EU as safe or adequate. Where personal data is processed in the USA, we ensure that the services we use are certified under the "Data Privacy Framework".

1.3 Usage data

When visiting the website, general technical information is collected. This includes the IP address used, time, duration of the visit, browser type and, where applicable, the referring page. This usage data is recorded for technical reasons in a log file and may be used and stored for the purpose of statistical evaluation of this website. This usage data is not linked to your other personal data.

1.4 Registration data

Full use of the functions of our website requires registration. Registration data is collected through your corresponding entries and used for the specific stated purpose in accordance with your consent (Art. 6(1)(a) GDPR).

1.5 Duration of storage

We store your personal data after the purpose for which the data was collected has ended only for as long as required by law (in particular tax law).

2. Your rights

2.1 Right of access

You may request from us confirmation as to whether we process personal data concerning you and, where that is the case, you have the right to access that personal data and the further information referred to in Art. 15 GDPR.

2.2 Right to rectification

You have the right to rectification of inaccurate personal data concerning you and may request completion of incomplete personal data in accordance with Art. 16 GDPR.

2.3 Right to erasure

You have the right to request that we erase personal data concerning you without undue delay. We are obliged to erase this data without undue delay, in particular where one of the following grounds applies:

Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
You withdraw your consent on which the processing of your data was based, and there is no other legal ground for the processing.
Your data was processed unlawfully.

The right to erasure does not apply where your personal data is required for the establishment, exercise or defence of our legal claims.

2.4 Right to restriction of processing

You have the right to request from us restriction of processing of your personal data where

you contest the accuracy of the data and we therefore verify the accuracy,
the processing is unlawful and you oppose erasure and instead request restriction of use,
we no longer need the data but you require it for the establishment, exercise or defence of legal claims,
you have objected to the processing of your data, and it has not yet been determined whether our legitimate grounds override your grounds.

2.5 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit that data to another controller without hindrance from us, where the processing is based on consent or a contract and the processing is carried out by automated means.

2.6 Right to withdraw consent

Where the processing of your personal data is based on consent, you have the right to withdraw that consent at any time.

2.7 General and right to lodge a complaint

Exercising your rights set out above is generally free of charge for you. You have the right to lodge complaints directly with the supervisory authority responsible for us, the State Data Protection Commissioner.

3. Data security

3.1 Data security

All data on our website is protected by technical and organisational measures against loss, destruction, access, alteration and dissemination.

3.2 Sessions and cookies

To operate the website, we use cookies and/or server-side sessions in which data may be stored. We use only cookies and/or server-side sessions that are technically necessary for the operation of this website (e.g. spam protection on the contact form, shopping cart function) and where the balancing of interests shows that no overriding interests on your part stand in the way (Art. 6(1)(f) GDPR).

Cookie name	Expiry date	Type	Domain	Provider name	Provider URL	Country
__cmpconsent*	90 Tage	Funktion	*.consentmanager.net	consentmanager	https://www.consentmanager.net/en/privacy/	DE
__cmpcpc*	Sitzung	Funktion	*.consentmanager.net	consentmanager	https://www.consentmanager.net/en/privacy/	DE
__cmpcvc*	Sitzung	Funktion	*.consentmanager.net	consentmanager	https://www.consentmanager.net/en/privacy/	DE
__cmpcc	6 Minuten	Funktion	a.delivery.consentmanager.net	consentmanager	https://www.consentmanager.net/en/privacy/	DE
PHPSESSID	Sitzung	Funktion	chocolatier.de	Chocolatier	https://www.chocolatier.de/datenschutz.php	DE
__cmpconsent*	Sitzung	Funktion	chocolatier.de	consentmanager	https://www.consentmanager.net/en/privacy/	DE
__cmpcpc*	Sitzung	Funktion	chocolatier.de	consentmanager	https://www.consentmanager.net/en/privacy/	DE
__cmpcvc*	Sitzung	Funktion	chocolatier.de	consentmanager	https://www.consentmanager.net/en/privacy/	DE
cmp_gpcConsentModeEligible.*	Persistent	Funktion	chocolatier.de	consentmanager	https://www.consentmanager.net/en/privacy/	DE
ga-disable-UA-43542316-1	Sitzung	Funktion	chocolatier.de	Chocolatier.de		DE
gmeiner-a11y-font-scale	Persistent	[unbekannt]	chocolatier.de	[unknown]		DE
__cmpconsent*	Sitzung	Funktion	confiserie-gmeiner.com	consentmanager	https://www.consentmanager.net/en/privacy/	DE
__cmpcpc*	Sitzung	Funktion	confiserie-gmeiner.com	consentmanager	https://www.consentmanager.net/en/privacy/	DE
__cmpcvc*	Sitzung	Funktion	confiserie-gmeiner.com	consentmanager	https://www.consentmanager.net/en/privacy/	DE
amzn_consent	Sitzung	Funktion	confiserie-gmeiner.com	consentmanager	https://www.consentmanager.net/en/privacy/	DE
gmeiner_temp_id	Sitzung	[unbekannt]	confiserie-gmeiner.com	[unknown]		DE
PHPSESSID	Sitzung	[unbekannt]	confiserie-gmeiner.de	[unknown]		DE
__cmpconsent*	Sitzung	Funktion	confiserie-gmeiner.de	consentmanager	https://www.consentmanager.net/en/privacy/	DE
__cmpcpc*	Sitzung	Funktion	confiserie-gmeiner.de	consentmanager	https://www.consentmanager.net/en/privacy/	DE
__cmpcvc*	Sitzung	Funktion	confiserie-gmeiner.de	consentmanager	https://www.consentmanager.net/en/privacy/	DE
cmp_gpcConsentModeEligible.*	Persistent	Funktion	confiserie-gmeiner.de	consentmanager	https://www.consentmanager.net/en/privacy/	DE
gmeiner-a11y-font-scale	Persistent	[unbekannt]	confiserie-gmeiner.de	[unknown]		DE
PHPSESSID	Sitzung	Funktion	www.chocolatier.de	Chocolatier.de		DE
__cmpcc	395 Tage	Funktion	www.chocolatier.de	consentmanager	https://www.consentmanager.net/en/privacy/	DE
cmp_gpcConsentModeEligible.*	Persistent	Funktion	www.chocolatier.de	consentmanager	https://www.consentmanager.net/en/privacy/	DE
gmeiner-a11y-font-scale	Persistent	[unbekannt]	www.chocolatier.de	[unknown]		DE
PHPSESSID	Sitzung	[unbekannt]	confiserie-gmeiner.pro	[unknown]		DE
__cmpcc	395 Tage	Funktion	confiserie-gmeiner.pro	consentmanager	https://www.consentmanager.net/en/privacy/	DE
__paypal_storage__	Persistent	[unbekannt]	confiserie-gmeiner.pro	[unknown]		DE
__test__localStorage__	Persistent	[unbekannt]	confiserie-gmeiner.pro	[unknown]		DE
cmp_gpcConsentModeEligible.*	Persistent	Funktion	confiserie-gmeiner.pro	consentmanager	https://www.consentmanager.net/en/privacy/	DE
gmeiner-a11y-font-scale	Persistent	[unbekannt]	confiserie-gmeiner.pro	[unknown]		DE
jsapi	Persistent	[unbekannt]	confiserie-gmeiner.pro	[unknown]		DE

4. Newsletter

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter regularly on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
You may unsubscribe from the newsletter at any time, either by sending us a message using the contact details provided in the legal notice or via the link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address unless you have expressly consented to further use of your data or we reserve a further use of data that is permitted by law and about which we inform you in this statement.

5. Social media links

We maintain our own social media pages with third-party providers accessible via links from this website. By using the links, you are taken to the respective websites of the third-party providers (e.g. Facebook, Twitter, Instagram). To avoid unnecessary data sharing, we recommend logging out of the respective third-party provider before using a corresponding link, so that usage profiles may not already be created by the third-party provider through use of the link.

6. Application procedure

You may apply to us electronically, by telephone or in writing. We will of course use your information exclusively to process your application and will not pass it on to third parties. Please note that if you send your application by email, emails sent without encryption are not transmitted in a protected manner. Your personal data will be deleted immediately after completion of the application procedure or after a maximum of 6 months, unless you have expressly given us your consent for longer storage of your data or a contract has been concluded. The legal basis is Art. 6(1)(a), (b) or (f) GDPR as well as Section 26 BDSG.

7. Presence on social media platforms

We use the following social media platform for corporate presentation and communication (explicit reference is made to the linked privacy policies and opt-out options below).
Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
Privacy policy and opt-out: http://instagram.com/about/legal/privacy/
This social media platform may process personal data outside the EU; we refer in this regard to the privacy policies of the social media platform set out above.
The respective social media platform may create usage profiles from your usage behaviour and the interests and actions arising therefrom and store cookies on your computer in which your usage behaviour is stored. If you have an account on the respective social media platform and are logged in, your usage behaviour may even be stored independently of the device. Your usage profile may be used, for example, to place advertisements that presumably correspond to your interests.

We process personal data exclusively to communicate with you via the social media platform you have chosen and to optimise our online presence, and we ensure that no interests on your part are affected that would override this legitimate interest on our part (Art. 6(1)(f) GDPR). Where you have already given the respective operator of the social media platform effective consent for the corresponding data processing, the processing of your personal data also takes place on the basis of this consent (Art. 6(1)(a) GDPR).

8. Third-party services

8.1 Google Analytics

This website uses Google Analytics, a web analytics service operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), and collects and stores data via this web analytics service from which usage profiles are created using pseudonyms. The usage profiles thus created serve to evaluate visitor behaviour in order to design and improve the offering presented on this website according to requirements. Google Analytics uses so-called "cookies", small text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, your IP address will however be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website and internet use to the website operator. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other data from Google. Usage profiles maintained under a pseudonym are also not merged with personal data about the user without the user's express and separately declared consent. The use of Google Analytics takes place only with your consent (Art. 6(1)(a) GDPR). You can prevent the storage of cookies by adjusting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website in full. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de). You can also prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie is set that prevents the collection of your data on future visits to this website: Disable Google Analytics. You can view Google's privacy information at https://www.google.de/intl/de/policies/privacy/. Further information on the terms of use can be found at https://www.google.com/analytics/terms/de.html. We point out that Google Analytics on this website has been extended by the code "anonymizeIp" to ensure anonymised collection of IP addresses (so-called IP masking).

8.2 Brevo

This website uses the Brevo service for sending newsletters (operated by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin). Brevo is a service with which newsletter dispatch can be organised and analysed. The data you enter for newsletter subscription (e.g. email address) is stored on Brevo's servers. No user interests are affected that would override this technical necessity of integrating the newsletter provider (Art. 6(1)(f) GDPR). The newsletter is of course sent only with your consent (Art. 6(1)(a) GDPR). You can view Brevo's privacy information at https://www.brevo.com/de/legal/privacypolicy/.

8.3 Payment service providers

It is possible to process the payment using the following payment service providers:

PayPal, operated by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg City, Luxembourg
Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full/

Apple Pay, operated by Apple Inc., 1 Apple Park Way, Cupertino, California, USA
Privacy policy: https://www.apple.com/legal/privacy/de-ww/

Google Pay, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy policy: https://www.google.de/intl/de/policies/privacy

For payments by credit card:
First Cash, operated by First Cash Solution GmbH, Okenstr. 7, 77652 Offenburg
Privacy policy: https://www.firstcashsolution.de/service1/datenschutz.html

The following data is regularly transmitted to the payment service provider you have chosen for payment processing:

Your email address
Your address
Details of your order
Your IP address

The legal basis for this is Art. 6(1)(b) GDPR. Information provided to the respective payment service provider is not under our control and is subject to its privacy policy.

8.4 Consentmanager cookie tool and CDN

We use the cookie banner application of consentmanager GmbH, Eppendorfer Weg 183, 20253 Hamburg on our website.

With this tool, we can inform you about the cookies used on our website and obtain your prior consent for certain cookies. The information provided within the scope of the tool (consent, rejection or preference including date and time) as well as your IP address (in anonymised form) and technical browser data are also sent to consentmanager GmbH to enable this function. In addition, the application can track user behaviour on our website and also use the information to improve its own service. The processing of your data takes place only within the European Union or within a country for which an adequacy decision exists. The legal basis for the processing of your data is Art. 6(1)(c) GDPR (fulfilment of legal obligation) or Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest).
You can view the privacy policy of consentmanager GmbH here: https://www.consentmanager.de/datenschutz/

Our website also uses the so-called Content Delivery Network (CDN) of Consentmanager GmbH. A CDN is a network of high-performance servers that cache content at various locations around the world. A CDN essentially has two tasks: on the one hand, it is intended to deliver content in the shortest possible time and, on the other hand, to relieve the web host by distributing data traffic. The legal basis is Art. 6(1)(f) GDPR. No data transfer takes place outside the EU or outside a country for which the European Commission has issued an adequacy decision.

9. Contact

To contact us regarding data protection, you are welcome to use the contact details below. Data controller within the meaning of the GDPR:

Gmeiner Confiserie & Kaffeehausunternehmen Inh.: Volker Gmeiner e. K.
Industriestraße 10
77767 Appenweier
Email: info@confiserie-gmeiner.com
Phone: 07805 - 91697-0