The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. For detailed information on data protection, please refer to this privacy policy. Regarding the terminology used, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Status: June 2025
Data Collection on Our Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator:
Café del Mundo
Prof.-Dr.-Albert Str. 10
74722 Buchen, Germany
Responsible: Jan Pascal & Alexander Kilian
Phone: +49 6281 561748
Email: info@cafedelmundo.de
For more information, please see the legal notice on our website.
Data Protection Officer
We fall below the number of employees required to appoint a data protection officer in accordance with § 38 BDSG-New.
What Data Do We Process?
We process categories of data such as basic information, contact details, and content data you provide via contact form or email, as well as usage and communication data, e.g., anonymized IP address, software and hardware info.
We do not process special categories of personal data unless you voluntarily provide them.
We process data from visitors and users of our online offer, as well as from customers, prospects, and suppliers.
Data is processed to provide our online services, fulfill contracts, answer inquiries, and communicate with customers.
How Is Your Data Collected?
Your data is collected in part by you providing it (e.g., contact form).
Other data is collected automatically by our IT systems when visiting the website (e.g., browser, OS, time of access). This data is collected automatically upon visiting the site.
Legal Basis of Processing
According to Art. 13 GDPR, the legal bases are as follows:
- Consent: Art. 6(1)(a)
- Contractual necessity: Art. 6(1)(b)
- Legal obligation: Art. 6(1)(c)
- Legitimate interests: Art. 6(1)(f)
- Vital interests: Art. 6(1)(d)
Changes to This Privacy Policy
Please check this page regularly for updates. We update this policy as needed and inform you if your consent is required for any changes.
Your Rights
You have the right to obtain information about the origin, recipient, and purpose of your stored personal data. You also have the right to request correction, blocking, or deletion of this data. You can contact us at any time using the details in the legal notice. Additionally, you have the right to lodge a complaint with the relevant supervisory authority.
We only process personal data in compliance with the applicable legal requirements.
Security Measures
We take appropriate technical and organizational measures under Art. 32 GDPR to protect your data—especially encryption between your browser and our server, access control, data separation, and data minimization principles under Art. 25 GDPR.
Processors and Third Parties
We only share or give access to data to third parties based on legal permission, consent, legal obligations, or our legitimate interests (e.g., hosting providers). Any data processing by third parties occurs under Art. 28 GDPR.
International Transfers
We transfer data to countries outside the EU/EEA only if required for contract fulfillment, consent, legal obligations, or legitimate interest, and only under the conditions of Art. 44 ff. GDPR.
Rights of Data Subjects
You have the right to confirmation, access (Art. 15), correction (Art. 16), deletion (Art. 17), restriction (Art. 18), portability (Art. 20), and to lodge a complaint (Art. 77) with a supervisory authority.
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe your data is being processed unlawfully.
Right of Withdrawal
You may withdraw your consent at any time under Art. 7(3) GDPR.
Right to Object
You may object to the future processing of your data under Art. 21 GDPR at any time, especially for direct marketing.
Data Deletion
Data is deleted in accordance with Art. 17 & 18 GDPR once it is no longer needed or required to be retained by law.
Right to Erasure
You may request deletion if processing is no longer necessary, you revoke consent, or processing was unlawful, among other legal grounds.
Notice to Third Parties
If your data has been made public and must be deleted, we will notify all processors and third parties as required under Art. 17(2) GDPR.
Exceptions
Your right to erasure does not apply in cases such as exercising freedom of expression, fulfilling legal obligations, public interest, or legal claims.
Right to Restrict Processing
You may request restriction under certain conditions (e.g., data accuracy dispute, legal claims).
Right to Data Portability
You may receive and transmit your data to another controller if processing is based on consent or a contract and is automated.
Right to Notification
We are obliged to notify recipients of your data about any correction, deletion, or restriction unless impossible or disproportionately difficult.
Right to Rectification
You may request correction of inaccurate or incomplete data at any time.
Contacting Us
When you contact us (via form or email), we process your information to handle the request under Art. 6(1)(b) GDPR. Data is deleted once no longer needed.
Social Media Presence
We operate profiles on social platforms to engage with users. Please refer to the respective providers’ privacy policies.
Cookies & Analytics
We use session cookies for essential functions. You can disable cookies in your browser. Disabling cookies may limit site functionality.
Matomo Analytics
We use Matomo to analyze traffic. IPs are anonymized. No data is shared with third parties. You can opt out via the provided link.
Third-Party Content
We embed third-party services (e.g., YouTube, jQuery) under Art. 6(1)(f) GDPR. This may involve collecting your IP address. See their privacy policies for details.
Cookie Banner
We use a cookie banner to inform you of cookie usage. A cookie is saved to prevent showing it repeatedly.
Social Media Channels
On our Facebook page and other social platforms, your data may be collected for marketing purposes. Data processing is based on legitimate interest (Art. 6(1)(f)) or consent (Art. 6(1)(a)).
