Privacy

This English version is provided for your convenience. The legally binding text is the German one — in case of any discrepancy, the German version prevails.

Controller

Holz3 GmbH, Nachtigalstraße 29, 80638 München
Email: info@amcas-kebab.de, phone: 089 20001270

What happens when you simply visit

When you open this page, our server processes technically necessary access data (IP address, time, address requested, browser type). This serves secure operation and is deleted after a short time. The legal basis is our legitimate interest in trouble-free operation, Article 6(1)(f) GDPR.

Your basket

What you select is stored solely by your own browser (local storage), so that your selection survives a reload. This data only reaches us when you tap “Continue to checkout”. You can delete it at any time in your browser settings.

Ordering and payment

For your order we process your name, phone number, the time you want, your address in case of delivery, and your notes. The basis is performance of the contract, Article 6(1)(b) GDPR. The checkout runs through Shopify International Limited, 2nd Floor Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, where Shopify’s own privacy notice applies in addition. We never see your payment details.

Retention

We keep order data for as long as commercial and tax law require (as a rule up to ten years). We do not process it beyond that.

Cookies and consent

On your first visit we ask whether you allow analytics and marketing cookies. We store your answer for 180 days in the cookie “desativ_einwilligung”; without it we would have to ask on every visit. The only other cookie set without consent is Shopify’s technically necessary cookie for basket and checkout. You can change your decision at any time via “Cookie settings” at the bottom of the page.

With your consent: Shopify and Google Analytics

Only if you choose “Accept all” do we set Shopify’s analytics and marketing cookies, so that Shopify can count visits and attribute orders to their source (such as search or newsletter). We then also load Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies (“_ga”) to analyse how the site is used and to measure whether orders come about via Google. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent, Article 6(1)(a) GDPR and section 25(1) TDDDG. Without consent Google Analytics is not loaded.

Order source without cookies

If you arrive via a link with campaign parameters (for example from our newsletter), we keep these details without a cookie, only for the duration of your visit, and note them on the order. This shows us how an order came about without recognising you. The legal basis is our legitimate interest in evaluating our advertising, Article 6(1)(f) GDPR.

We load no fonts from third-party servers; the typeface is served from our own server.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Please contact us at the address above. You may also lodge a complaint with a data protection supervisory authority; the competent one is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht).