Privacypolicy
Information under Articles 13 and 14 of the General Data Protection Regulation. In short, we collect as little as possible, pass nothing on and sell nothing.
1. Controller
The party responsible for data processing on this website is
Mustermann Butcher Shop, owner Sepp Mustermann
Musterstraße 1, 83xxx Musterdorf
Phone 08641 0000, e-mail info@mustermann.de
We have not appointed a data protection officer, because the legal requirements for one don’t apply to a business of our size. If you have questions, please contact us directly at the address above.
2. Hosting and server log files
This website is hosted by a provider with servers in Germany. Every time a page is opened, the server automatically collects data that your browser transmits:
- Shortened IP address
- Date and time of access
- Name and URL of the file requested
- Amount of data transferred and whether the request was successful
- Browser type and operating system
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in running the website without technical errors and keeping it secure. The log files are deleted after seven days. We have a data processing agreement with the hosting provider under Article 28 GDPR.
3. Encryption
This site uses SSL or TLS encryption. You can tell by the padlock in your browser’s address bar. It means that data you send us can’t be read by third parties along the way.
4. Cookies and visitor statistics
This website sets no cookies that aren’t technically necessary. We don’t use Google Analytics, ad networks, social media plugins or external fonts that send data to third parties when the page loads. That’s why you won’t see a cookie banner here. We don’t know who you are, and we don’t want to know.
5. Order form for pre-orders
If you place a pre-order using the form on the Lunch Menu page, we process your name, phone number, pickup day, pickup time, type of order, the order text and anything you tell us about intolerances.
We use this data only to prepare your order and to be able to talk to you if we have questions. The legal basis is Art. 6(1)(b) GDPR, because the processing is necessary to take steps prior to entering into a contract.
Information about intolerances can be health data under Art. 9 GDPR. We only process it because you give it to us voluntarily, and only for preparing your food. The legal basis is Art. 9(2)(a) GDPR. We delete this information after pickup.
We delete orders four weeks after pickup. If an invoice was issued, the retention periods under tax and commercial law of eight to ten years apply.
6. Catering enquiries
For a catering enquiry we also process the date and occasion of the party, the number of guests, your delivery wishes, your e-mail address and your notes. We use this information to put together a quote and plan the event.
If no order follows, we delete the enquiry after six months. If an order is placed, the statutory retention periods apply.
7. Contact form, e-mail and phone
If you reach us through the contact form, by e-mail or by phone, we store your details to handle your request. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise point (f), based on our legitimate interest in answering you. Once the matter is dealt with, we delete the message, at the latest after six months.
We keep job applications for up to six months after the process is finished, then they are deleted. The legal basis is § 26 of the German Federal Data Protection Act (BDSG).
8. Food traceability
As a food business we are required by Regulation (EC) No 178/2002 to document the path our goods take. These records concern our suppliers and product batches, not you as a customer. For loose goods sold in the shop we don’t collect any personal data.
9. Recipients of data
We only pass on your data if it is necessary to fulfil the contract or because of a legal obligation. Recipients may be our hosting provider, our tax advisor, our e-mail provider and, for card payments, the payment service provider. No data is transferred to countries outside the European Union.
10. Your rights
You have the right at any time to:
- Access to the data stored about you under Article 15 GDPR
- Correction of inaccurate data under Article 16 GDPR
- Erasure under Article 17 GDPR, unless a retention obligation stands in the way
- Restriction of processing under Article 18 GDPR
- Data portability under Article 20 GDPR
- Object to processing under Article 21 GDPR
- Withdraw consent you have given, with effect for the future
A phone call or an e-mail is enough, we don’t need a form. We’ll reply within one month.
11. Right to lodge a complaint with the supervisory authority
If you believe that the processing of your data violates the GDPR, you can complain to a supervisory authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority), Promenade 27, 91522 Ansbach.
12. External links and maps
On the Contact page we describe the way to us in words. No map service is loaded and no data is sent to third parties. If a later version includes a map service, it will only load after you explicitly click, and with its own notice in this section.
13. Changes to this policy
We update this privacy policy when our website or the law changes. The version published on this page always applies. Version date: January 2026.
We’ll explain it over the phone, too.
If you want to know what we’ve stored about you, give us a call. It usually takes less than five minutes.