Privacy policy

Controller

Bringshome
Deutschland

Data we process

When the page is opened, the server processes technically necessary access data (IP address, timestamp, page requested, browser type) on the basis of Art. 6(1)(f) GDPR (secure operation of the site).

When you build an order, we process the details you enter: name, phone number, delivery address where applicable, your selection, notes for the kitchen and any allergies. Legal basis: Art. 6(1)(b) GDPR (performance of the contract). Allergy details are health data; you provide them voluntarily so the kitchen can take them into account (Art. 9(2)(a) GDPR).

Cookies and local storage

This site uses no analytics, advertising or tracking cookies, and loads no external fonts or scripts. Only strictly necessary data is stored:

• lang — the language you selected (cookie, 12 months)
• cart — your current order, in your browser's local storage, for 12 hours at most
• session — only in the protected admin area for signed-in staff

This storage is strictly necessary for the service you requested and therefore requires no consent (§ 25(2)(2) TDDDG). No cookie banner is required.

Ordering via WhatsApp

Your order is not submitted from this site: it opens as a pre-filled message in WhatsApp. You decide whether to send it.

Once sent, the message and your phone number are processed by WhatsApp Ireland Limited (Meta). Data may be transferred to the United States; Meta relies on the EU-US Data Privacy Framework and standard contractual clauses for this. We have no influence over that processing — WhatsApp's privacy policy applies.

If you wish to avoid this, please order by phone.

Payment

Cash payment involves no collection of payment data. If you choose online payment, you are redirected to PayPal (Europe) S.à r.l. et Cie, S.C.A.; you enter your payment details there only and we never receive them.

Hosting

The site runs at a service provider that processes data solely on instruction, under a data processing agreement pursuant to Art. 28 GDPR.

Retention period

Order data is deleted as soon as it is no longer needed for fulfilment, at the latest once commercial and tax retention periods expire. Server access logs are deleted shortly after collection.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future.

Please contact the address above. You also have the right to lodge a complaint with a supervisory authority, for example the data protection authority of Saarland.