Privacy policy

General Information:

This information provides a simple overview of what happens to your personal data when you visit our website. Personal data is information that can be used to identify you personally. Detailed information can be found in the following sections of this privacy policy.

Data Collection on this Website – Data Controller:

Data processing on this website is carried out by the website operator. Please refer to the section "Information on the Data Controller" for contact details.

How do we collect your data?

Some data is collected when you provide it to us (e.g., by entering information in the contact form). Other data is collected automatically by our IT systems when you visit the website, or with your consent (e.g., browser, operating system, time of page access). Data collection begins automatically as soon as you access our website.

What do we use your data for?

Some data is used to ensure the proper functioning of the website. Other data may be used to analyze user behavior. To the extent that contracts are initiated or concluded via the website, we also process the transmitted data for the creation of contract offers, for orders, and other order inquiries.

Your rights:

You have the right to free access to information about the origin, recipients, and purposes of your stored personal data at any time. You also have the right to rectification or erasure of this data, to the withdrawal of consent, to restriction of processing under certain conditions, and the right to lodge a complaint with the competent supervisory authority. You can contact us at any time with regard to this and any further questions.

Third-party analytics tools:

Your browsing behavior may be statistically analyzed when you visit this website, in particular by analytics programs. Details can be found below.

2) Hosting

We host the content of our website with the following providers:

IONOS:

The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit our website, IONOS collects, among other things, log files including IP addresses. The use of this service is based on Article 6(1)(f) GDPR (legitimate interest in the reliable presentation of the website). Where consent has been obtained (e.g., for cookies or device access as defined in Section 25(1) of the German Telemedia Act (TMG)), processing is additionally based on Article 6(1)(a) GDPR and Section 25(1) TDDG; this consent can be revoked at any time. A data processing agreement (DPA) exists with IONOS.

Shopify:

The provider is Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify collects, among other things, IP address, device and browser information, visitor numbers/sources, customer behavior, and – in the case of purchases – name, email address, delivery/billing addresses, payment data, and other purchase-related data. Shopify uses cookies for analytics. The legal basis is Article 6 Paragraph 1 Letter f GDPR (legitimate interest in reliable presentation). If consent is requested, Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TDDDG (revocable) also apply. A data processing agreement (DPA) exists with Shopify.

3) General Information and Mandatory Disclosures

Data Protection:

We treat your personal data confidentially and in accordance with legal regulations. Various personal data are collected when you use the website. This statement explains what data we collect, for what purposes, and how.

Internet Transmission:

Data transmissions over the Internet (e.g., via email) can have security vulnerabilities. Complete protection against access by third parties is not possible.

Controller:

Decaff GmbH, Handelshof 16, 28816 Stuhr, Germany

Email: info@trydecaff.com

The "controller" is the natural or legal person who determines the purposes and means of the processing of personal data.

Data Retention Period:

Unless otherwise stated in this declaration, personal data will remain with us until the purpose of processing no longer applies. Following a legitimate request for erasure or a withdrawal of consent, we will no longer process the data unless statutory retention obligations (e.g., under tax/commercial law) prevent us from doing so; in that case, we will delete the data once these reasons no longer apply.

Legal Basis:

Depending on the situation, we process data on the basis of:

– Art. 6 para. 1 lit. a GDPR (consent) or Art. 9 para. 2 lit. a GDPR (special categories), including Art. 49 para. 1 lit. a GDPR for transfers to third countries;

– Section 25 para. 1 TDDDG (e.g., cookies/device access) with consent;

– Art. 6 para. 1 lit. b GDPR (contract/pre-contractual measures);

– Art. 6 para. 1 lit. c GDPR (legal obligation);

– Article 6(1)(f) GDPR (legitimate interest).

The relevant legal basis in each individual case.