Privacy

Eiscafé Dolomiti, owner: Gazmend Shabani
Mengeder Markt 1, 44359 Dortmund, Germany
Phone: +49 231 53488443
Email: [email protected]

A data protection officer is not required for a business of this size and has therefore not been appointed.

You have the following rights towards us:

• Access to the data stored about you (Article 15 GDPR)
• Rectification of inaccurate data (Article 16 GDPR)
• Erasure (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to processing (Article 21 GDPR, see the next section)
• Withdrawal of a given consent with effect for the future (Article 7 (3) GDPR)

Please use the contact details above. You may also lodge a complaint with a supervisory authority; ours is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf

Where we process your data on the basis of our legitimate interest (Article 6 (1) (f) GDPR), you may object to that processing at any time on grounds relating to your particular situation. We will then stop, unless we can show compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. An informal message to the contact details above is enough.

This website runs on a server operated by Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The server is located in Germany. Operation and maintenance are handled on our behalf by a technical service provider, who uses Hetzner as a subcontractor. Both are bound by contract as processors under Article 28 GDPR. The legal basis is our legitimate interest in secure and reliable operation, Article 6 (1) (f) GDPR.

Delivery to your browser runs through a tunnel operated by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes your IP address in order to establish and secure the connection. The legal basis is Article 6 (1) (f) GDPR. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer to the USA relies on the European Commission’s adequacy decision (Article 45 GDPR), with standard contractual clauses in addition. Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/

When you open the website, technically necessary data is processed:

• IP address
• date and time of the request
• the page or file requested
• amount of data transferred and status code
• referring address
• browser and operating system identification

The purpose is the operation and security of the website. The legal basis is Article 6 (1) (f) GDPR. This data is deleted after seven days at the latest and is not combined with other data.

If you write to us through the form, we process the selected reason, your name, your email address and your message. Depending on the reason, we also process a subject, the preferred date, the time, the number of people, the occasion or the date of your visit. Giving a phone number is optional and only helps if we need to ask something.

You are not obliged to give us any of this. Without the required fields, however, we cannot answer your enquiry.

The purpose is handling your enquiry. The legal basis is Article 6 (1) (b) GDPR where a contract is being prepared, otherwise Article 6 (1) (f) GDPR.

Your enquiry reaches us as an email. As a rule we also send an automatic confirmation with a copy of your message to the address you gave.

In the website’s database, your enquiry is deleted automatically 90 days after it arrives. We delete the email in our mailbox once the enquiry has been dealt with. If it leads to an order, for a party for example, we keep the correspondence for as long as tax and commercial retention periods require.

No IP address is stored with the enquiry. To limit misuse of the form we keep your IP address only as a non-reversible hash with a key that changes daily. That value is deleted after 24 hours.

The contact form is protected against automated submissions by Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile only loads once you start filling in the form.

Your IP address, information about your browser and interaction data are processed. Turnstile sets no cookies. The legal basis is our legitimate interest in preventing spam, Article 6 (1) (f) GDPR. Where Turnstile reads information from your browser for this, section 25 (2) no. 2 TDDDG permits that without consent, because it is strictly necessary for sending the form you asked to send.

The transfer to the USA is covered in the same way as under “Hosting”: Cloudflare is certified under the EU-US Data Privacy Framework (Article 45 GDPR), with standard contractual clauses in addition.

On the start page and the contact page you can load a Google map. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is loaded only after you click for it. No connection to Google is made before that. The legal basis is your consent under Article 6 (1) (a) GDPR and section 25 (1) TDDDG.

Loading it may transfer data, including your IP address, to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer relies on the European Commission’s adequacy decision (Article 45 GDPR). Google’s privacy policy: https://policies.google.com/privacy

Your decision is kept in your browser’s local storage. You can take it back at any time, through the “Withdraw map consent” link in the footer or at the top of this page.

We use Plausible Analytics to see how the site is used. The software runs on our own server in Germany; the data does not leave our control.

No cookies are set and no personal data is stored. IP addresses are not kept; they are only used to derive a daily, non-reversible visitor key. There is no recognition across websites.

The legal basis is our legitimate interest in data-minimising statistics, Article 6 (1) (f) GDPR. You can object by using a content blocker or by preventing scripts from our statistics address from loading.

This website uses no cookies for advertising or analytics. Only technically necessary values are stored:

• your language choice, so the site appears in the same language next time
• your decision about loading the map
• in the admin area: a session identifier so the owner stays signed in

Because delivery runs through Cloudflare (see “Hosting”), Cloudflare may set cookies of its own, which we have no influence over:

• “__cf_bm”, to tell automated requests apart from real visits, lasting about 30 minutes
• “cf_clearance”, if you were shown a security check, so that it is not repeated

None of these cookies holds an advertising or analytics identifier. Because they are strictly necessary for the functions you use and for a secure connection, section 25 (2) no. 2 TDDDG permits storing them without consent. Processing the data relies on Article 6 (1) (f) GDPR. A consent banner is therefore not required.

Your data is passed on only to the service providers named above, and only as far as running the website requires. Enquiries from the contact form and the confirmation also pass through our email provider’s mail server and are kept in our mailbox there.

There is no automated decision-making and no profiling.