Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide them has no consequences. This applies only insofar as no other information is given for the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR for our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offer.
Contact
Controller
Please contact us if you wish. The controller for data processing is: Foodis GmbH, Adolf-Murthum-Str.23, 70771 Leinfelden-Echterdingen Germany, +49 711 933 43 900, info@crepesshop.com
Customer-initiated contact via email
If you contact us by email on your own initiative, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to handle and respond to your contact request.
If the contact serves to carry out pre-contractual measures (e.g. consultation in case of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR for our overriding legitimate interest in handling and answering your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) lit. f GDPR.
We use your email address only to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you.
If the contact serves to carry out pre-contractual measures (e.g. consultation in case of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR for our overriding legitimate interest in handling and answering your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) lit. f GDPR.
We use your email address only to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
WhatsApp Business
If you contact us via WhatsApp for business purposes, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”) for this purpose. If you reside outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves to handle and respond to your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided, as well as further data to the extent provided by you. We use a mobile device for the service, in whose address book only data of users who have contacted us via WhatsApp are stored. Personal data is therefore not transferred to WhatsApp without your prior consent to WhatsApp.
Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, an adequacy decision of the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself under the TADPF and has thereby committed to comply with European data protection principles. If the contact serves to carry out pre-contractual measures (e.g. consultation in case of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR for our overriding legitimate interest in providing quick and easy contact and answering your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 (1) lit. f GDPR.
We use your personal data only to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
For more information on terms of use and data protection when using WhatsApp, please visit https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Customer Account Orders
Customer account
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves to improve your shopping experience and simplify order processing. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal. Your customer account will then be deleted.
Shipping Service Providers Merchandise Management
Disclosure of email address to shipping companies for information about shipping status
We disclose your email address to the carrier as part of the contract processing, provided you have expressly consented to this during the order process. The disclosure serves to inform you by email about the shipping status. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us or the carrier, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
Use of an external merchandise management system
We use a merchandise management system from the following provider for processing contracts within the scope of order processing:
JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven
Your data collected by us in connection with the order processing is transmitted to the above provider. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR for our overriding legitimate interest in efficient order processing.
Use of PayPal Express
We use the payment service PayPal Express of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service.
To integrate this payment service, it is necessary that PayPal collects, stores and analyses data (e.g. IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
For more information on data processing when using the PayPal Express payment service, please refer to the corresponding privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS
Use of PayPal Check-Out
We use the payment service PayPal Check-Out of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or „Pay Later“ via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Cookies may be stored in this process which enable the recognition of your browser. The data processing taking place as a result is based on Art. 6 (1) lit. f GDPR for our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Credit card via PayPal, direct debit via PayPal & „Pay later“ via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or „Pay later“ via PayPal, PayPal reserves the right to obtain a credit assessment based on mathematical-statistical procedures using credit agencies if necessary. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit assessment may include probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical procedures and which include, among other things, address data. Your interests worthy of protection are considered in accordance with the legal provisions. The data processing serves the purpose of credit checks for contract initiation. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR for our overriding legitimate interest in protection against payment default when PayPal makes advance payment.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) lit. f GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide the data has the consequence that the contract cannot be concluded with the payment method you have chosen.
Third-party providers
For payment via the payment method of a third-party provider, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. To carry out this payment method, the data is then forwarded by PayPal to the respective provider. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Local third-party providers may be, for example:
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Invoice purchase via PayPal
For payment via the invoice purchase payment method, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to be able to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Ratepay may carry out a credit assessment based on mathematical-statistical procedures (probability or score values) using credit agencies according to the procedure already described above. The data processing serves the purpose of credit checks for contract initiation. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR for our overriding legitimate interest in protection against payment default when Ratepay makes advance payment. For more information on data protection and which credit agencies Ratepay uses, please visit https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
For more information on data processing when using PayPal, please refer to the corresponding privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows unique identification of the browser when the website is accessed again.
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Use of the cookie consent tool by JTL
We use the cookie consent tool of JTL-Software-GmbH (Rheinstraße 7, 41836 Hückelhoven; “JTL”) on our website.
The tool allows you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. The data processing serves the purpose of obtaining required consents to data processing and documenting them, thus complying with legal obligations. Cookies may be used for this purpose. The following information may be collected, among others: IP address, date and time of page access, and consent status.
The data processing is carried out to fulfil a legal obligation on the basis of Art. 6 (1) lit. c GDPR.
For more information on data protection at JTL, please visit: https://www.jtl-software.de/datenschutz.
Analysis Advertising Tracking
Use of Google Analytics 4
We use the web analysis service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“) on our website.
The data processing serves the purpose of analysing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide further services associated with website use and Internet use to the website operator.
The following information may be collected, among others: IP address, date and time of page access, click path, information about the browser used and the device used by you, pages visited, referrer URL (website from which you accessed our website), location data, purchasing activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data of other devices and any other data that Google has about you.
The IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand.
The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
The information generated about your use of this website is generally transferred to a Google server in the USA and stored there. For the USA, an adequacy decision of the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby committed to comply with European data protection principles. Both Google and US government authorities have access to your data.
For more information on terms of use and data protection, please visit https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/
We use the online advertising programme „Google Ads“ on our website and in this context conversion tracking (visit action evaluation). Google conversion tracking is an analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
If you click on an advertisement placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, contain no personal data and therefore do not serve for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Thus, there is no possibility for cookies to be tracked across the websites of Ads customers.
The information collected with the help of the conversion cookie serves the purpose of generating conversion statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that personally identifies users.
Your data may be transmitted to the servers of Google LLC in the USA. For the USA, an adequacy decision of the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby committed to comply with European data protection principles.
For more information and Google's privacy policy, please visit: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
We use the remarketing or "Similar Audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The application serves the purpose of analysing visitor behaviour and visitor interests. To carry out the analysis of website use, which forms the basis for the creation of interest-based advertisements, Google uses cookies. Through the cookies, visits to the website and anonymised data on the use of the website are recorded. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas.
Your data may be transmitted to servers of Google LLC in the USA. For the USA, an adequacy decision of the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby committed to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
For more information on Google Remarketing and the corresponding privacy policy, please visit: https://www.google.com/privacy/ads/ and https://business.safety.google/privacy/
Plug-ins and Other
Use of Google reCAPTCHA
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website as part of order data processing. The query serves the purpose of distinguishing between input by a human or by automated, machine processing. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. For the USA, an adequacy decision of the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby committed to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
Use of YouTube
We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „YouTube“) on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function shows videos stored on YouTube in an iFrame on the website. The option „Enhanced privacy mode“ is activated. As a result, no information about the visitors to the website is stored by YouTube. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transmitted to the USA. For the USA, an adequacy decision of the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under the TADPF and has thereby committed to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
For more information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy, please refer to the YouTube privacy notices at https://www.youtube.com/t/privacy.
Use of Vimeo
We use plug-ins of Vimeo Inc. (555 West 18th Street New York, New York 10011, USA; “Vimeo”) on our website to embed videos from the “Vimeo” portal.
If you access pages of our website provided with such a plug-in, a connection to Vimeo's servers is established and the plug-in is displayed on the page by notifying your browser. As a result, both your IP address and the information about which of our pages you have visited are transmitted to Vimeo's servers.
If you are logged in to Vimeo at the time, Vimeo associates this information with your personal user account. When you use the plug-in functions (e.g. by starting a video by pressing the corresponding button), this information is also associated with your Vimeo account.
Your data may be transmitted to the USA. For the USA, an adequacy decision of the EU Commission is in place, the Trans-Atlantic Data Privacy Framework (TADPF). Vimeo has certified itself under the TADPF and has thereby committed to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
For more information on the purpose and scope of data collection and the further use and processing of data by Vimeo, as well as your rights and options for protecting your privacy, please refer to the Vimeo privacy notices: https://vimeo.com/privacy
Data Subject Rights and Storage Period
Storage period
After complete contract processing, the data is initially stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law, retention periods, and then deleted after expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
You have the following rights under Art. 15 to 20 GDPR if the legal requirements are met: right of access, rectification, erasure, restriction of processing, data portability.
You also have a right to object to processing based on Art. 6 (1) f GDPR, and to processing for the purpose of direct advertising, under Art. 21 (1) GDPR.
Right to lodge a complaint with the supervisory authority
According to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You can lodge a complaint, among others, with the supervisory authority responsible for us, which can be reached at the following contact details:
State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstrasse 10 a
70173 Stuttgart
Tel.: +49 711 6155410
Fax: +49 711 61554115
Email: poststelle@lfdi.bwl.de
Right to object
If the personal data processing carried out here is based on our legitimate interest under Art. 6 (1) lit. f GDPR, you have the right to object at any time to such processing with effect for the future for reasons arising from your particular situation.
After your objection, the processing of the affected data will be ended, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.
Last updated: 22.10.2024