Data protection
We appreciate your trust in us and apply the utmost diligence and the most stringent security standards to protect your personal data against unauthorised access. Our data protection provisions conform to the German Federal Data Protection Act (Bundesdatenschutzgesetz; BDSG) and the European General Data Protection Regulation (GDPR).
Below you will find information on how we handle your data which are recorded when you use this website. Where there are links to other websites, we cannot influence or check these linked contents or their data protection provisions. We recommend checking the privacy statements of these linked websites in order to identify whether and to what extent they collect, process and use personal data or make personal data available to third parties.
Controller
The controller pursuant to data protection law is Pfalzgraf Konditorei GmbH, Zeißstrasse 6, DE 72285 Pfalzgrafenweiler.
Email: info@pfalzgraf.de
Telephone: +49 7445 8510 0
Contact details of the Data Protection Officer:
Michael Gembus
Data Protection Officer:
Support & Consulting GmbH
Schulstraße 13
72250 Freudenstadt
datenschutz@pfalzgraf.de
Data processing when you visit our website
When you visit our website, our web server temporarily stores each access in a log file. The following data are recorded and stored until they are deleted automatically:
- IP address of the inquiring computer
- date and time of the access
- visited domain
- name and URL of the called file
- transferred data volume
- report whether the access was successful
- identification data of the browser and operation system used.
These data are processed in order to make it possible to use the website (establish a connection), for system security, technical administration of the network infrastructure and to optimise the internet offer. We cannot allocate these data to specific persons. We do not combine this data with other data sources. Also, the data are deleted after a statistical analysis. The legal basis for the temporary saving of data and log files is Art. 6 para. 1 lit. f) GDPR.
Contact form and establishing contact by email
If you send us enquiries via the contact form or by email, your details from the enquiry form or your email, including the contact details provided by you, are saved on our site for the purpose of the enquiry and for the event of follow-up questions. We do not pass on these data without your consent in any case. The legal basis for the processing of the data is our legitimate interest in answering your query in accordance with Art. 6 para. 1 lit. f) GDPR as well as Art. 6 para. 1 lit. b) GDPR, to the extent that the enquiry is aimed at concluding a contract. Your data are deleted after your enquiry has been finally processed, to the extent that this is not contrary to any legal retention obligations.
Use of cookies
We use so-called cookies to make visiting our website more attractive and to enable the use of certain functions. Cookies are small text files saved on your end device. Some of the cookies used by us are deleted after the end of the browser session or when you close your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies to identify you when you visit next (so-called persistent cookies).
Some cookies are used to simplify website processes by saving settings (e.g. keeping already selected options). Where individual cookies implemented by us process personal data, the processing is either for contract performance in accordance with Art. 6 para. 1 lit. b) GDPR or to safeguard our legitimate interests in the best possible website functionality and in a customer-friendly, effective design of the page visit in accordance with Art. 6 para. 1 lit. f) GDPR.
You can choose browser settings that notify you when cookies are set and decide individually whether to accept them or you can prevent cookies from being accepted either in general or in specific cases. If you do not accept cookies, this may restrict the functionality of our website.
Creation of pseudonymised user profiles for web analysis
This website uses Google Analytics, a web analysis service by Google Inc ("Google"). Google Analytics uses so-called "cookies", i.e. text components saved on your computer, which enable an analysis of your use of the website. The information regarding your use of this website, which is created by the cookie, is normally sent to the Google server in the USA and saved there. If IP anonymisation is enabled on this website, Google first abbreviates your IP address in countries that are Member States of the European Union or Contracting Parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to the Google server in the USA and abbreviated there. Commissioned by the operator of this website, Google will use this information in order to analyse use of the website, compile website activity reports and provide other services related to website or internet use for the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with the other Google data. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that in such a case, you will be unable to fully use all functions of this website.
In addition, you can prevent the data created by the cookie and related to the use of the website (incl. your IP-address) from being recorded by Google and processed by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Newsletter dispatch
If you want to receive the newsletter available on our website containing regular information about our offers and products, we need your email address. We will then use the so-called opt-in procedure for sending the newsletter. This means that we will only send you our newsletter by email after you have explicitly confirmed that you consent to the newsletter dispatch. With the confirmation, you give us your consent pursuant to Art. 6 para. 1 lit. a) GDPR for us to use your personal data for the purpose of the requested newsletter dispatch.
When you sign up for the newsletter, we save the email address required for the dispatch, alongside the data and time of the registration and confirmation, so that we can trace any potential abuse at a later point in time.
You can unsubscribe from the newsletter at any time using the link inserted in the newsletter or by contacting the controller listed above by email. After you have successfully unsubscribed, your email address will be deleted from our newsletter mailing list immediately, unless you have explicitly agreed to the continued use of the collected data or the continued processing is legally permissible in another way.
Forwarding of data and recipients
We do not pass on your personal data to third parties, except
- where we have explicitly pointed this out in the description of the respective data processing,
- where you have given your explicit consent pursuant to Art. 6 para. 1 S. 1 lit. a) GDPR,
- the transfer is necessary pursuant to Art. 6 para. 1 S. 1 lit. f) GDPR to assert, execute or defend against legal claims and there is no reason to assume that you have an overriding interest worthy of protection in your data not being transferred,
- in case a legal obligation applies to the transfer pursuant to Art. 6 para. 1 S. 1 lit. c) GDPR and - to the extent that this is necessary to process the contractual relationship with you pursuant to Art. 6 para. 1 S. 1 lit. b) GDPR.
In addition, we use external service providers to process our services that we have selected with care and that we have commissioned in writing. They are bound by our instructions, are monitored by us on a regular basis and moreover, where necessary, have concluded order processing contracts with us pursuant to Art. 28 GDPR. They are service providers for web hosting, maintenance and servicing of our IT systems etc. These service providers will not pass on these data to third parties.
Storage duration for personal data
The storage duration for personal data is based on the applicable legal retention periods (e.g. in commercial law and tax law). Once the respective period has ended, the corresponding data are routinely deleted. To the extent that the data are needed for contract performance or to prepare for a contract, or if there is a legitimate interest on our part to continue storing the information, the data will be deleted once they are no longer needed for these purposes or when you make use of your right to object or your right to revoke consent.
Your rights
Below you will find information on your rights as the data subject in relation to the controller that you enjoy under data protection law regarding the processing of your personal data:
The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can demand information about the purpose of the processing, the category of personal data, the categories of recipients to whom your data is or has been disclosed, the planned storage duration, the right to correct, delete, restrict processing or object, the right to lodge a complaint, the origin of your data where this was not collected by us, as well as whether automated decision-making is used, including profiling and, if applicable, meaningful information relating to details.
The right to demand the correction of incorrect or incomplete personal data stored by us without delay in accordance with Art. 16 GDPR.
The right to demand the erasure of your personal data stored with us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
The right to demand the restriction of the processing of your personal data in accordance with Art. 18 GDPR, if the accuracy of the data is disputed by you, if the processing is unlawful but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing in accordance with Art. 21 GDPR.
The right to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party in accordance with Art. 20 GDPR.
The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. For this, you can normally contact the supervisory authority of the federal state at our place of business as specified above or, if applicable, at your usual place of residence or place of work.
Right to withdrawal of consent pursuant to Art. 7 para. 3 GDPR: You have the right to revoke consent granted for processing of your data at any time effective for the future. In the event of a revocation, we will delete the relevant data immediately, unless further processing can be based on a legal basis for processing without consent. Revoking consent does not affect the legality of any processing up to the revocation.;
Right to object
To the extent that your personal data are processed by us based on legitimate interest in accordance with Art. 6 para. 1 S. 1 lit. f) GDPR, you have the right pursuant to Art. 21 GDPR to object to the processing of your personal data, to the extent that this is based on reasons resulting from your specific situation. To the extent that the objection is against the processing of personal data for the purpose of direct advertising, you have a general right to object without needing to specify your specific situation.
If you want to make use of your right of revocation or right to object, it is sufficient to send an email to
Changes to our data privacy statement
We reserve the right to amend or update our data privacy statement if necessary in line with the applicable data protection provisions. In this way, we can adapt them to the current legal requirements and take into account changes to our services, e.g. if we introduce new services. Your visit is governed by the respective most current version.
Version of this data privacy statement: 13/02/2020