This notice sets out what personal data is processed when you visit this website, for what purpose and on what legal basis. It describes only the processing that actually takes place on this website.
1. Controller
The controller for the processing of personal data on this website within the meaning of Art. 4(7) GDPR is:
Kraut und Rüben
Kerem Topal
Oranienstraße 15
10999 Berlin
Germany
Telephone: 030 – 614 10 75
Email: krautundruben@posteo.de
2. Data protection officer
We are not required by law to appoint a data protection officer and have not appointed one. Please direct any data protection enquiry to the address given above.
3. Hosting and server log files
This website is hosted by a service provider in the European Union:
webhostone GmbH
Rheinvogtstraße 17, 79713 Bad Säckingen, Deutschland
The servers are located exclusively in Germany. Each time a page is called up, the server automatically collects data transmitted by your browser and stores it in log files:
- IP address of the requesting device (truncated in the standard logs)
- date and time of access
- name and URL of the file retrieved
- volume of data transferred and notification of successful retrieval
- browser type and version
- operating system of the device
- referrer URL, where transmitted
Purpose: establishing the connection, keeping the systems running and secure, and investigating and preventing attacks.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the technically sound and secure operation of the website.
Retention: according to the hosting provider, standard logs are retained for 10 days.
4. Cookies and consent banners
The publicly accessible pages set no cookies or entries in your browser’s local or session storage. We use no analytics, marketing or tracking services. Visiting these pages therefore requires no consent for such access, and no cookie banner appears. When editors sign in to the WordPress administration area, WordPress sets technically necessary login cookies.
5. Contact form and contact by email
You can send us a message using the form on the contact page. The data collected is what you enter yourself: name, email address, subject and message text.
Your details are forwarded to our mailbox by email only and are not stored in a database on the web server. The same applies if you contact us directly at the email address given, or by telephone.
Purpose: handling and answering your enquiry.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract; otherwise Art. 6(1)(f) GDPR, on the basis of our legitimate interest in answering enquiries from the neighbourhood.
Retention: we delete your enquiry once it has been dealt with conclusively and no statutory retention periods stand in the way. Retention periods under commercial and tax law (section 257 HGB, section 147 AO) remain unaffected.
Providing the data is voluntary; without a name and email address, however, we cannot reply to you.
6. The map on the contact page
The map on our contact page is an image held on our own server. Viewing the page transmits no data to anyone else — no connection to a map service is made and no cookies are set. The image was produced once from data by the OpenStreetMap contributors (licence: Open Database License). Only if you click it does openstreetmap.org open in a new tab, at which point the privacy notice of the OpenStreetMap Foundation applies (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). That step is entirely your decision.
7. Contact via WhatsApp
Our contact page lists a WhatsApp number alongside the telephone number and the email address. It is an ordinary link, not an embedded widget: until you click it, no connection to WhatsApp or Meta is made, no scripts are loaded from their servers, no cookies are set and no IP address is transmitted. Only on the click does WhatsApp open with a message to our number ready to send. From that point WhatsApp Ireland Ltd., Merrion Road, Dublin 4, D04 X2K5, Ireland processes your telephone number, your message and the associated traffic data under its own terms; this may involve a transfer to Meta Platforms, Inc. in the United States, for which an adequacy decision of the European Commission is in place. The legal basis for our handling of your message is Art. 6(1)(b) GDPR where it concerns initiating or performing a purchase, and otherwise Art. 6(1)(f) GDPR, our legitimate interest in being easy to reach. We delete the chat once your enquiry has been dealt with conclusively. If you would rather not use this route, you can reach us just as well by telephone, by email and through the contact form.
8. Fonts and external content
The fonts used on this website are served from our own server. There is no connection to Google Fonts or any other font service, so no IP address is transmitted to a third party when the page loads. Likewise there are no social media plugins, video embeds, advertising networks or analytics tools. The photographs on this site are held on our own server as well. External content is triggered by you alone: the map in section 6 and the WhatsApp link in section 7, neither of which makes any connection until it is clicked.
9. Recipients of the data
Within our business, only those people who need your data in order to deal with your enquiry have access to it. Beyond that we pass data to our hosting provider as a processor and to our email provider. Data is not passed to any other third party, in particular not for advertising purposes. A transfer to a third country outside the EU or EEA takes place only where you trigger it yourself: by opening the map described in section 6, or by getting in touch over WhatsApp as described in section 7.
10. Your rights as a data subject
You have the following rights in relation to your personal data:
- Access (Art. 15 GDPR) — whether and what data we process about you.
- Rectification (Art. 16 GDPR) — correction of inaccurate and completion of incomplete data.
- Erasure (Art. 17 GDPR) — where no statutory retention obligation stands in the way.
- Restriction of processing (Art. 18 GDPR).
- Data portability (Art. 20 GDPR) — release in a structured, commonly used and machine-readable format.
- Objection (Art. 21 GDPR) — to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation.
- Withdrawal of consent (Art. 7(3) GDPR) — at any time with future effect; the lawfulness of processing carried out up to that point is unaffected.
An informal message to krautundruben@posteo.de is enough to exercise them.
11. Right to lodge a complaint with a supervisory authority
Without prejudice to any other remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin, Germany
Telephone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
www.datenschutz-berlin.de
12. No automated decision-making
There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
13. Whether you have to provide the data
Providing personal data is neither required by law nor by contract. You are under no obligation to provide us with data. Without the details requested in the contact form, however, we cannot answer your enquiry.
14. Data security
This website is transmitted over an encrypted TLS connection. You can recognise this by the “https://” prefix in your browser’s address bar and by the padlock symbol. We also take technical and organisational security measures under Art. 32 GDPR to protect your data against accidental or deliberate manipulation, loss and unauthorised access.
15. Status and changes to this notice
We update this privacy notice whenever the processing that actually takes place on this website changes, or the legal position does. The version available here is the one that applies.