Kitchen Studio Privacy Policy

1. Data Controller

La Cuisine Küchenstudio OHG
Lange Straße 22, 74889 Sinsheim, Germany
Phone: +49 7261 862813 0
Email: [email protected]

2. General Information

We process personal data only to the extent necessary to provide this website, to handle inquiries, to carry out pre-contractual measures, to fulfill contractual obligations, or based on consent. Personal data refers to any information that can be used to identify a person directly or indirectly.

Data transmission over the Internet, particularly via email, may be subject to security vulnerabilities. Complete protection against access by third parties is not possible.

3. Hosting and Server Log Files

When you access this website, the web server processes technically necessary data. This may include the IP address, time of access, page or file accessed, amount of data transferred, browser type, operating system, and referrer URL.

This processing serves to ensure the secure and stable operation of the website, as well as to detect and prevent technical malfunctions and attacks. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and functional operation of the website. The data will be deleted as soon as it is no longer required for these purposes, provided that no security-related retention requirements or legal obligations preclude this.

4. Cookies and Consent Management

We use technically necessary cookies and similar storage technologies to the extent that they are required for the operation of the website or for explicitly requested functions. The legal bases are Section 25(2) of the German Telemedia Act (TDDDG) and, to the extent that personal data is processed, Article 6(1)(b) or (f) of the GDPR.

Non-essential analytics, marketing, and external media services are activated only after you have given your consent. The legal bases are Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. You may change or withdraw your consent at any time with future effect via the cookie settings.

5. Contact and Forms

If you contact us via email, phone, or through a form, we process the data you provide to handle your inquiry. The legal basis for pre-contractual or contractual matters is Article 6(1)(b) of the GDPR; in all other cases, it is Article 6(1)(f) of the GDPR. The data will be deleted as soon as the inquiry has been fully processed and there are no legal retention obligations or legitimate grounds for further storage.

6. Online Store, Orders, and Customer Account

For orders and bookings, we process, in particular, your name, billing and shipping addresses, contact information, products or events ordered, payment method, order status, and the communication necessary for contract fulfillment.

This processing is carried out for the purpose of entering into and fulfilling the contract in accordance with Article 6(1)(b) of the GDPR. Documents relevant under tax and commercial law are stored for the prescribed period in accordance with legal obligations under Article 6(1)(c) of the GDPR.

If a customer account is offered, we process the data entered during registration and use to provide the account and manage your orders. You may request its deletion, provided that this does not conflict with statutory retention obligations.

7. Payment via PayPal

If you select PayPal as your payment method, the data required for payment processing will be transmitted to PayPal. This may include your name, address, email address, invoice amount, currency, order number, and transaction details.

The service provider for customers in Germany is typically PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. This data transfer is necessary to carry out the selected payment transaction and thus to fulfill the contract in accordance with Article 6(1)(b) of the GDPR. PayPal processes data in part under its own responsibility under data protection law, in particular for payment processing, fraud prevention, identity and credit checks, and to fulfill legal obligations.

Further information: PayPal Privacy Policy

8. Payment via Stripe

If you select a payment method offered via Stripe, the data required for payment processing will be transmitted to Stripe. This may include, in particular, your name, billing address, email address, payment amount, currency, order number, payment information, IP address, and details regarding the device and the transaction.

The provider for customers in the European Economic Area is Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. The data is transmitted to carry out the payment transaction you have selected and thus to fulfill the contract in accordance with Article 6(1)(b) of the GDPR. Stripe also processes data in part under its own data protection responsibility, in particular for payment processing, fraud prevention, risk assessment, and compliance with legal obligations.

Stripe may involve affiliated companies and service providers outside the EU or the EEA. According to Stripe, this transfer is carried out based on the applicable legal transfer mechanisms.

Further information: Stripe Privacy Policy

9. Newsletter via Mailchimp

We use Mailchimp, a service provided by The Rocket Science Group LLC d/b/a Mailchimp, 405 North Angier Avenue NE, Atlanta, GA 30308, USA, a company of the Intuit Group, to send out our newsletter.

When you subscribe to the newsletter, we process your email address and, if applicable, any voluntary information you provide. In addition, the time of registration and confirmation, as well as your IP address, are logged to provide proof of consent. Registration is carried out via a double opt-in process.

The legal basis for sending the newsletter and any enabled performance tracking is your consent pursuant to Article 6(1)(a) of the GDPR. This logging is carried out to fulfill our record-keeping obligations under Article 6(1)(c) in conjunction with Article 7(1) of the GDPR.

You can unsubscribe from the newsletter at any time by clicking the unsubscribe link in each message or by notifying us. After unsubscribing, your email address may be stored in a block list to prevent further mailings.

With Mailchimp, data may be processed in the United States. Mailchimp declares its participation in the EU-U.S. Data Privacy Framework; in addition, standard contractual clauses may be used.

Further information: Intuit/Mailchimp Privacy Policy

10. Google Analytics

Provided you have given your consent, we use Google Analytics for statistical analysis of the website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may involve the processing of cookies or similar technologies, as well as information about your device, browser, website usage, and approximate region.

The legal bases are Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. The service is activated only after you have given your consent. You can revoke this consent at any time via the cookie settings. Processing by Google entities in the U.S. cannot be ruled out. Google bases data transfers on, among other things, the EU-U.S. Data Privacy Framework and, where applicable, additional appropriate safeguards.

Further information: Google Privacy Policy and Google Analytics

11. Google Ads and Conversion Tracking

With your consent, we use Google Ads, the advertising service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, formerly known as Google AdWords. This allows Google to determine whether a user arrived at our website via a Google ad and subsequently, for example, submitted an inquiry, subscribed to a newsletter, or placed an order.

To this end, cookies, pixels, or similar technologies, as well as usage, device, and conversion data, may be processed. If enabled, Google Ads may also be used for audience targeting and remarketing. We generally receive aggregated reports and cannot directly identify individual visitors from them.

The legal bases are Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. Google Ads is activated only after you have given your consent. You can revoke this consent at any time via the cookie settings. Processing in the U.S. cannot be ruled out; Google bases data transfers, among other things, on the EU-U.S. Data Privacy Framework and, where applicable, additional appropriate safeguards.

Further information: Google Privacy Policy and Google Ad Settings

12. YouTube Videos

Videos from YouTube may be embedded on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you activate or play a video, information such as your IP address, device and browser information, the page you visited, and details about your video usage may be transmitted to Google. If you are signed in to Google, Google may associate your usage with your account.

YouTube content is loaded only after you give your consent. The legal bases are Section 25(1) of the German Telemedia Act (TDDDG) and Article 6(1)(a) of the General Data Protection Regulation (GDPR). You can revoke your consent at any time via the cookie settings. Processing in the United States cannot be ruled out.

Further information: Google Privacy Policy and YouTube Terms of Service

13. Social Media Feeds via Elfsight

We may embed social media feeds and other external content via Elfsight. In doing so, program code from Elfsight is loaded, primarily to display content from our Instagram, Facebook, and LinkedIn accounts. Depending on future configurations, content from other platforms may also be embedded via Elfsight.

When the widget loads, information such as your IP address, browser and device information, the time of access, the referrer URL, and interactions with the widget may be transmitted to Elfsight. To retrieve and display posts, a direct connection to the respective integrated social media platform may also be established. This platform may process additional data and, if applicable, associate the use with an existing user account there.

Instagram and Facebook are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. For other platforms activated via Elfsight, the privacy policies of the respective providers also apply.

The Elfsight widget and the external content it contains are loaded only after you have given your consent. The legal basis for this is Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. You may revoke your consent at any time via the cookie settings. Without your consent, no social media content will be loaded via Elfsight.

Processing outside the EU or the EEA—particularly in the U.S.—cannot be ruled out by Elfsight and the connected platforms.

Further information: Elfsight Privacy Policy, Instagram Privacy Policy, Meta Privacy Policy, and LinkedIn Privacy Policy

14. Google Maps

Interactive maps from Google Maps may be embedded on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a map is loaded, information such as your IP address, browser and device information, location data—if you have enabled its use—as well as details about the page you are viewing and your interaction with the map may be transmitted to Google. If you are signed in to Google, Google may associate your use of the map with your account.

Google Maps is loaded only after you give your consent. The legal bases are Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. You can revoke your consent at any time via the cookie settings. Without your consent, only a placeholder will be displayed in place of the map. Processing by Google entities in the U.S. cannot be ruled out. Google bases such transfers, among other things, on the EU-U.S. Data Privacy Framework and, where applicable, additional appropriate safeguards.

Further information: Google Privacy Policy and Terms of Service for Google Maps

15. Google Calendar for Appointment Bookings

We may use Google Calendar to organize and manage booked consultation appointments or events. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you book an appointment, the information required for appointment management may be stored in our Google Calendar. This may include, in particular, your name, email address, phone number, the service booked, the date and time, any messages or booking notes, and an internal appointment or booking number. The processing is carried out for the purposes of scheduling appointments, confirming appointments, and organizational implementation. The legal basis is Article 6(1)(b) of the GDPR, insofar as the booking serves to initiate or fulfill a contract; otherwise, Article 6(1)(f) of the GDPR applies. Our legitimate interest lies in reliable appointment scheduling.

If synchronization occurs exclusively on the server side, simply visiting our website does not establish a direct connection between your browser and Google Calendar. If, however, a Google calendar or booking interface is embedded directly into the website, your IP address, browser and device information, as well as details about the page you are viewing, may be transmitted to Google as soon as the page loads. Such direct embedding is loaded only after you have given your consent. The legal bases in this case are § 25(1) of the German Telemedia Act (TDDDG) and Article 6(1)(a) of the GDPR.

Appointment data is deleted as soon as it is no longer necessary for conducting and documenting the appointment and provided that no legal retention obligations or legitimate interests preclude such deletion. Processing by Google entities in the U.S. cannot be ruled out. Google bases such transfers, among other things, on the EU-U.S. Data Privacy Framework and, where applicable, additional appropriate safeguards.

Further information: Google Privacy Policy and Google Calendar

16. Google Business Profile (formerly Google My Business)

We maintain a Google Business Profile and may display publicly available business information, events, or reviews from it on our website. The service is now called Google Business Profile; the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If the information is retrieved server-side by our system via an interface, cached, and displayed as our own website content, no direct connection is established between the visitor’s browser and Google simply by accessing our site. In doing so, we process the public content provided by Google and, where applicable, the name, profile picture, and review text published there. The display serves to provide information about our company and our services. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in presenting up-to-date information about our company and displaying publicly submitted reviews.

If, instead, a Google widget, a Google Map, or other external content is loaded directly in the browser, additional information—such as the IP address, browser and device information, and details about the page visited—may be transmitted to Google. Such direct integration is loaded only after you have given your consent. The legal bases in this case are § 25(1) of the German Telemedia Act (TDDDG) and Article 6(1)(a) of the GDPR.

If you interact with our company profile on Google—for example, by submitting a review, sending a message, or getting directions—further processing is also subject to Google’s privacy policy. Processing in the U.S. cannot be ruled out.

Further information: Google Privacy Policy and information about Google Business Profile

17. Facebook

If Facebook content or features are integrated and activated by you, a connection may be established with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. In particular, your IP address, browser and device information, the page you visited, and your interactions may be transmitted to Meta. For logged-in users, Meta may associate this information with your Facebook account.

The integration is loaded only after you have given your consent. The legal bases are Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. You can revoke your consent at any time via the cookie settings. Processing in the United States cannot be ruled out.

Further information: Meta Privacy Policy

18. X (formerly Twitter) – only when the integration is enabled

This section applies only if X features or content are actually enabled on our website. The service is not currently actively integrated.

If integration is enabled in the future, data such as IP address, browser and device information, pages visited, and interactions may be transmitted to X. The provider is X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. For logged-in users, X may associate the usage with the respective account.

The integration may only be loaded after you have given your consent. The legal bases would be Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. Consent may be revoked at any time via the cookie settings. Processing outside the EU or the EEA cannot be ruled out.

Further information: X’s Privacy Policy

19. Recipients and Transfers to Third Countries

We use service providers only to the extent necessary for the purposes stated. Where legally required, they are contractually bound as data processors. Transfers to countries outside the EU or the EEA take place only if the legal requirements are met, in particular based on an adequacy decision, appropriate safeguards such as standard contractual clauses, or a statutory exception.

20. Retention Period

We store personal data only for as long as necessary for the respective purpose. Afterward, it is deleted or anonymized, provided that no legal retention obligations, the assertion or defense of legal claims, or other permissible reasons preclude this.

21. Your Rights

Subject to the statutory requirements, you have the right to:

• access under Article 15 of the GDPR,
• Rectification pursuant to Art. 16 of the GDPR,
• Erasure under Article 17 of the GDPR,
• Restriction of processing under Article 18 of the GDPR,
• Data portability under Article 20 of the GDPR,
• Objection under Article 21 of the GDPR, and
• Withdrawal of consent with future effect pursuant to Article 7(3) of the GDPR.

You may also lodge a complaint with a data protection supervisory authority, in particular at your usual place of residence, your workplace, or the location of the alleged infringement.

22. Objection to Direct Marketing

If personal data is processed on the basis of legitimate interests, you may object on grounds relating to your particular situation. You may object at any time, without providing a reason, to processing for the purposes of direct marketing.

We object to the use of the contact information published in the legal notice for the purpose of sending unsolicited advertising.

23. Up-to-Date Status

We update this Privacy Policy when the services we use, technical processes, or legal requirements change. The version currently published on this website applies.