Privacy Policy

Controller responsible for data processing:
Ábel Vermes
Széchenyi street 65.
Budakeszi
Email: info@kamadochef.de


1. Access Data and Hosting

You can visit our websites without providing any personal information. Every time you access a website, the web server automatically saves what is known as a server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transmitted, and the requesting provider (access data), and records the access.

This access data is evaluated solely for the purpose of ensuring the smooth operation of the site and improving our services. This serves to safeguard our legitimate interests in the correct presentation of our services in accordance with Art. 6 (1) sentence 1 lit. f GDPR.


2. Data Processing for Contract Fulfillment and Contact

2.1 Data Processing for Contract Fulfillment

For the purpose of fulfilling the contract (including inquiries and the processing of any warranty or performance claims as well as any statutory update obligations) in accordance with Art. 6 (1) sentence 1 lit. b GDPR, we collect personal data if you voluntarily provide it to us as part of your order.

Mandatory fields are marked as such because we need the data in these cases to fulfill the contract, and we cannot send the order without this information. Which data is collected can be seen in the respective input forms.

Further information on the processing of your data, in particular the disclosure to our service providers for order, payment, and shipping processing, can be found in the following sections of this privacy policy. After the contract has been fully processed, your data will be restricted for further processing and deleted after the expiry of the tax and commercial retention periods in accordance with Art. 6 (1) sentence 1 lit. c GDPR, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to further data use permitted by law, which we inform you about in this declaration.

2.2 Customer Account

If you have given your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of setting up the account and storing your data for future orders on our website.

You can delete your customer account at any time by sending a message to the contact details described in this privacy policy or using the function provided in the customer account. After deletion of the account, your data will be deleted unless you have expressly consented to further use of your data or we are legally permitted to retain it as stated in this declaration.

2.3 Contact

As part of customer communication, we collect personal data to process your inquiries in accordance with Art. 6 (1) sentence 1 lit. b GDPR when you voluntarily provide it to us when contacting us (e.g., via contact form, live chat tool, or email). Mandatory fields are marked as such because we need this data to process your inquiry. Which data is collected can be seen in the respective input forms.

After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Art. 6 (1) sentence 1 lit. a GDPR or we reserve the right to further data use permitted by law, which we inform you about in this declaration.


3. Data Processing for Shipping Purposes

To fulfill the contract in accordance with Art. 6 (1) sentence 1 lit. b GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of the ordered goods. If you have questions about our service providers or the basis of our cooperation with them, please contact the contact information provided in this privacy policy.

Disclosure of data to shipping service providers for delivery notification
If you have given us your express consent during or after your order in accordance with Art. 6 (1) sentence 1 lit. a GDPR, we will pass on your email address and telephone number to the selected shipping service provider so that they can contact you before delivery for notification or coordination purposes.

You may revoke your consent at any time by contacting us using the details provided in this privacy policy or directly with the shipping service provider at the following address. After revocation, we will delete the data provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to further data use permitted by law.

Shipping service provider:
DACHSER SE
Thomas-Dachser-Straße 2
87439 Kempten
Germany


4. Data Processing for Payment Transactions

When processing payments in our online shop, we work with the following partners: technical service providers, financial institutions, and payment service providers.

4.1 Data Processing for Transaction Handling

Depending on the payment method selected, we pass on the data required for processing the payment transaction to our technical service providers, who act as processors on our behalf, or to the commissioned financial institutions or the selected payment service provider, insofar as this is necessary for the processing of the payment.

This serves the fulfillment of the contract in accordance with Art. 6 (1) sentence 1 lit. b GDPR. In some cases, payment service providers collect the data required for processing the payment themselves, e.g., on their own websites or via a technical integration in the order process. The privacy policy of the respective payment service provider applies.

If you have questions about our payment processing partners and the basis of our cooperation with them, please contact us using the details described in this privacy policy.

4.2 Data Processing for Fraud Prevention and Payment Optimization

Where applicable, we provide our service providers with additional data, which they use together with the data necessary for payment processing as our processors for the purposes of fraud prevention and optimizing our payment processes (e.g., invoicing, handling disputed payments, accounting support).

This serves our legitimate interests under Art. 6 (1) sentence 1 lit. f GDPR in protecting ourselves against fraud and ensuring efficient payment management.


5. Email Marketing

Email Newsletter with Registration
If you subscribe to our newsletter, we use the data required for this or separately provided by you to send you our email newsletter regularly on the basis of your consent under Art. 6 (1) sentence 1 lit. a GDPR.

You may unsubscribe at any time, either by contacting us via the contact details below or by using the link provided in the newsletter. After unsubscribing, we delete your email address from the recipient list unless you have expressly consented to further use of your data or we reserve the right to further data use permitted by law, as stated in this declaration.


6. Cookies and Other Technologies

General Information
To make visiting our website attractive and to enable certain functions, we use technologies on various pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some cookies we use are deleted after the browser session ends (session cookies). Other cookies remain on your device and allow us to recognize your browser upon your next visit (persistent cookies).

The duration of storage can be found in your browser’s cookie settings.

Protection of Privacy on End Devices
When using our online offering, we use strictly necessary technologies to provide the expressly requested telemedia service. Storing information on your device or accessing information already stored on your device does not require consent.

For non-essential functions, storing or accessing information on your device requires your consent. Please note that if consent is not granted, some parts of the website may not be fully usable. Any consent you have given remains valid until you adjust or reset the corresponding settings on your device.

Subsequent Data Processing through Cookies and Other Technologies
We use technologies that are necessary for certain website functions (e.g., shopping cart function). These technologies process your IP address, time of visit, device and browser information, and information about your website usage (e.g., cart content).

This serves our legitimate interest in an optimized presentation of our offering pursuant to Art. 6 (1) sentence 1 lit. f GDPR.

Cookie Settings
You can find your browser’s cookie settings at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™.

If you have consented to the use of technologies under Art. 6 (1) sentence 1 lit. a GDPR, you may withdraw your consent at any time by contacting us as described in this privacy policy.


7. Social Media

7.1 Social Buttons from Facebook (by Meta) and Instagram (by Meta)

Our website uses social buttons from social networks. These are only integrated as HTML links on the site so that no connection is established with the servers of the respective provider when visiting our website. When you click on one of the buttons, the website of the respective social network opens in a new browser window where you can, for example, click the Like or Share button.

7.2 Our Online Presence on Facebook (by Meta) and Instagram (by Meta)

If you have given your consent under Art. 6 (1) sentence 1 lit. a GDPR to the respective social media operator, your data will be automatically collected and stored for market research and advertising purposes when visiting our online presences on the aforementioned social media platforms. Usage profiles are created using pseudonyms and can be used to display advertisements both within and outside the platforms that are presumed to match your interests.

For this purpose, cookies are generally used. Detailed information about data processing and use by the respective social media provider, as well as contact details and your rights and settings options to protect your privacy, can be found in the providers’ privacy notices linked below.

Facebook (by Meta) is a service of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland. Information automatically collected by Meta Platforms Ireland about your use of our Facebook online presence is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing during visits to a Facebook fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (on Insights data) can be found [here].

Our service providers are based and/or use servers in the following countries recognized by the European Commission as having an adequate level of data protection: USA, Canada, Japan, South Korea, New Zealand, the United Kingdom, Argentina. The adequacy decision for the USA serves as the basis for third-country transfers, provided the respective service provider is certified. Certification exists.

Our service providers are also based and/or use servers in: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico. For these countries, no adequacy decision of the European Commission exists. Our cooperation with them is based on the EU Standard Contractual Clauses.

Instagram (by Meta) is a service of Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland. Information automatically collected by Meta Platforms Ireland about your use of our Instagram online presence is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing during visits to an Instagram fan page is based on an agreement between joint controllers in accordance with Art. 26 GDPR. Further information (on Insights data) can be found [here].

Our service providers are based and/or use servers in the following countries recognized by the European Commission as having an adequate level of data protection: USA, Canada, Japan, South Korea, New Zealand, the United Kingdom, Argentina. The adequacy decision for the USA serves as the basis for third-country transfers, provided the respective service provider is certified. Certification exists.

Our service providers are also based and/or use servers in: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico. For these countries, no adequacy decision of the European Commission exists. Our cooperation with them is based on the EU Standard Contractual Clauses.


8. Contact Options and Your Rights

8.1 Your Rights

As a data subject, you have the following rights:
According to Art. 15 GDPR, the right to obtain information about your personal data processed by us;
According to Art. 16 GDPR, the right to request immediate correction of incorrect or completion of your personal data stored by us;
According to Art. 17 GDPR, the right to request deletion of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims;
According to Art. 18 GDPR, the right to request restriction of processing if the accuracy of the data is contested, processing is unlawful but you oppose its erasure, we no longer need the data but you require it for legal claims, or you have objected to processing pursuant to Art. 21 GDPR;
According to Art. 20 GDPR, the right to receive your personal data you provided to us in a structured, commonly used, and machine-readable format, or to request the transfer to another controller;
According to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority, typically at your habitual residence, place of work, or our company headquarters.

Right to Object
Where we process personal data to safeguard our legitimate interests as explained above, you may object to such processing with effect for the future.

If processing is for direct marketing purposes, you may exercise this right at any time. If processing is for other purposes, you have the right to object only on grounds arising from your particular situation. After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

This does not apply where processing is for direct marketing purposes. In that case, we will no longer process your personal data for such purposes.

8.2 Contact Options

If you have questions regarding the collection, processing, or use of your personal data, or wish to request information, correction, restriction, or deletion of data, as well as withdrawal of consent or objection to a particular data use, please contact us directly using the contact details provided in our imprint.