Brammibal's Donuts

Information pursuant to Section 5 of the German Telemedia Act (TMG) Brammibal’s Donuts GmbH Boxhagener Straße 78 10245 Berlin Germany Managing Directors: Bram van Montfort, Jessica Jeworutzki Commercial Register: HRB 190030 B General information and mandatory disclosures The controller responsible for data processing on this website is Brammibal’s Donuts GmbH Boxhagener Straße 78 10245 Berlin, Germany Represented by the managing directors Bram van Montfort, Jessica Jeworutzki VAT ID: DE320402979 Commercial Register No.: HRB 190030 B Data Protection Officer Our Data Protection Officer is Bram van Montfort Data processing in connection with your visit to our website SSL/TLS encryption Server log files pages visited date and time of the server request browser type and browser version operating system used referrer URL host name of the accessing computer IP address These data are not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR Legal basis: Art. 6(1)(b) GDPR Payment service providers PayPal If you pay via PayPal, payment data will be forwarded to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. Legal bases Art. 6(1)(b) GDPR (contract) Klarna / Sofortüberweisung Payments via “Sofort” are processed via Klarna Bank AB (publ). Processed data may include name bank details payment information identity and creditworthiness data Legal bases: see above. Transfer of data to delivery service providers (Uber) The data transferred may include in particular name delivery address where applicable, telephone number order and delivery information Transfer to logistics service providers (DHL) For the shipment of goods, we transmit personal data to DHL Paket GmbH In particular, the following data are transmitted name delivery address Legal basis: Art. 6(1)(b) GDPR Legal basis: Art. 6(1)(a) GDPR (consent) Legal bases Art. 6(1)(c) GDPR (legal documentation obligation) Art. 6(1)(a) GDPR (consent) language settings Google Web Fonts We use Google Web Fonts for a uniform presentation. In doing so, your IP address may be transmitted to Google. Legal basis: Art. 6(1)(f) GDPR Google Analytics IP anonymization Browser plugin Objection to data collection Data processing agreement Demographic characteristics in Google Analytics Use takes place exclusively after your consent via CookieYes. IP addresses are processed in anonymized form. Legal basis: Art. 6(1)(a) GDPR Legal basis: Art. 6(1)(a) GDPR Use for marketing purposes Google Marketing Services The services used include The data are deleted no later than after 720 days. Social media / insights Retention period Data processing in the context of applications (Homerun) The legal basis is Art. 6(1)(b) GDPR in conjunction with § 26(1) BDSG. Your rights In particular, you have the following rights Right of access (Art. 15 GDPR) Right to rectification (Art. 16 GDPR) Right to erasure (Art. 17 GDPR) Right to restriction of processing (Art. 18 GDPR) Right to withdraw consent (Art. 7(3) GDPR) Right to data portability (Art. 20 GDPR) Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) Right to object (Art. 21 GDPR) Your rights as a data subject 1 Right of access 2 Right to rectification 3 Right to erasure (“right to be forgotten”) Your personal data have been processed unlawfully; 4 Right to restriction of processing (blocking) 5 Right to withdraw consent 6 Right to data portability 7 Right to lodge a complaint with a supervisory authority 8 Right to object under Art. 21 GDPR Security of processing