Privacy Policy
1) Introduction and contact information for the data controller
1.1We are pleased that you are visiting our website and thank you for your interest. Below, we provide information about how we handle your personal data when you use our website. Personal data refers to any information that can be used to identify you personally.
1.2The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Espresso Perfetto GmbH, Heinrich-Hertz-Str. 27 A, 40699 Erkrath, Germany, Tel.: 021130142500, Fax: 021130142501, Email: info@espressoperfetto.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data collection when visiting our website
2.1When you use our website for informational purposes only—that is, if you do not register or otherwise provide us with information—we collect only the data that your browser transmits to the website server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website we visited
- Date and time of access
- Amount of data sent in bytes
- Source/link that brought you to this page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete evidence of unlawful use.
2.2For security reasons and to protect the transmission of personal data and other confidential information (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the padlock icon in your browser address bar.
3) Hosting & Content Delivery Network
To host our website and display its content, we use a provider that delivers its services—either directly or through selected subcontractors—exclusively on servers located within the European Union.
All data collected on our website is processed on these servers, unless different data recipients are specified below for specific data processing activities.
We have entered into a data processing agreement with the service provider that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
4) Cookies
To make your visit to our website more enjoyable and to enable the use of certain features, we use cookies—small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.
If personal data is processed through individual cookies we use, such processing is carried out in accordance with Article 6(1)(b) of the GDPR for the purpose of performing the contract, pursuant to Article 6(1)(a) of the GDPR in the event that consent has been given, or pursuant to Article 6(1)(f) of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website as well as a user-friendly and effective design of the site visit.
You can configure your browser to notify you when cookies are set, allowing you to decide on a case-by-case basis whether to accept them, or to block cookies in specific cases or generally.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Making Contact
When you contact us (e.g., via the contact form or email), we process your personal data solely for the purpose of handling and responding to your inquiry, and only to the extent necessary for that purpose.
The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted when it is clear from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations preclude this.
6) Use of Customer Data for Direct Marketing
6.1Signing Up for Our Email Newsletter
If you subscribe to our email newsletter, we will send you regular updates about our offers. The only required information for receiving the newsletter is your email address. Providing additional information is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which ensures that you will only receive the newsletter once you have explicitly confirmed your consent to receive it by clicking on a verification link sent to the email address you provided.
By clicking the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR. In doing so, we store the IP address assigned to you by your Internet Service Provider (ISP), as well as the date and time of your registration, so that we can investigate any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time by clicking the link provided in the newsletter or by sending a message to the data controller listed at the beginning of this notice. Once you have unsubscribed, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to the continued use of your data or we reserve the right to use your email address for promotional purposes beyond this, which is permitted by law and about which we inform you in this statement.
After you unsubscribe from the newsletter, your email address may be stored in a so-called block list and cross-referenced with recipient lists for future newsletters to technically prevent you from receiving newsletters that require your consent again. This processing is based on our legitimate interest in preventing unsolicited promotional emails in accordance with Article 6(1)(f) of the GDPR.
6.2Email Notification of Product Availability
For items that are temporarily out of stock, you can sign up to receive email notifications when they become available. We will send you a one-time email notification regarding the availability of the item you have selected. The only required information for receiving this notification is your email address. Providing additional information is voluntary and may be used to address you personally. For email communications, we use the so-called double opt-in procedure, which ensures that you will only receive a notification once you have explicitly confirmed your consent by clicking on a verification link sent to the email address you provided.
By clicking the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR. In doing so, we store the IP address assigned to you by your Internet Service Provider (ISP), as well as the date and time of your registration, so that we can investigate any potential misuse of your email address at a later date. The data we collect when you sign up for our email notification service regarding product availability is used strictly for the intended purpose.
You may unsubscribe from availability notifications at any time by sending a message to the contact person listed above. Once you have unsubscribed, your email address will be immediately removed from our mailing list set up for this purpose, unless you have expressly consented to the continued use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.
7) Data Processing for Order Fulfillment
To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data we collect will be disclosed to the contracted shipping company and the contracted financial institution in accordance with Article 6(1)(b) of the GDPR.
If we are obligated to provide you with updates for goods containing digital elements or for digital products based on a relevant contract, we will process the contact information you provided when placing your order in order to personally notify you in accordance with our legal obligations to provide information under Article 6(1)(c) of the GDPR. Your contact information will be used strictly for the specific purpose of communicating updates we are obligated to provide and will be processed by us for this purpose only to the extent necessary for the respective information.
8) Online Marketing
Google AdSense
This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files stored on your computer that enable an analysis of your use of the website. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, which can be used to record, collect, and evaluate simple actions such as visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) regarding your use of this website is generally transmitted to a Google server and stored there. This may also involve a transfer to the servers of Google LLC in the United States.
Google uses the information obtained in this way to analyze your usage behavior with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not combined with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on Google’s behalf.
All processing described above, in particular the collection of information from the device you are using via cookies and/or web beacons, will only take place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your visit to the site.
You may withdraw your consent at any time with future effect by disabling this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
Further information about Google's privacy policy is available here: https://business.safety.google
9) Retargeting/Remarketing and Conversion Tracking
Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use Google Ads to draw attention to our offerings on external websites through advertisements (known as Google AdWords). Based on the data from these advertising campaigns, we can determine how successful individual advertising measures are. Our goal is to show you ads that are of interest to you, make our website more appealing to you, and ensure a fair calculation of the associated advertising costs.
The conversion tracking cookie is set when a user clicks on a Google Ads ad. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used to identify you personally. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie—which includes your IP address—is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
When using Google Ads, personal data may also be transferred to the servers of Google LLC in the United States.
For details on the processing triggered by Google Ads conversion tracking and how Google handles data from websites, please see here: https://policies.google.com
All processing described above, in particular the use of cookies to read information from the device you are using, will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
You can also permanently opt out of Google Ads conversion tracking by downloading and installing the Google browser plugin available at the following link:
https://support.google.com
In order to deliver more targeted advertising to users whose data we have obtained through business or business-like relationships, we use a customer matching feature within Google Ads. To do this, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and phone numbers) to Google. Google does not have access to plaintext data; instead, it automatically encrypts the information in the customer files during the transmission process using a special algorithm. Google can then use the encrypted information solely to associate it with existing Google accounts that the data subjects have created. This enables the delivery of personalized advertising across all Google services linked to the respective Google account.
Customer data is transmitted to Google only if you have given us your explicit consent to do so in accordance with Article 6(1)(a) of the GDPR. You may revoke this consent at any time, effective for the future. Further information on Google’s data protection measures regarding the customer matching feature can be found here: https://support.google.com
Google's Privacy Policy can be viewed here: https://business.safety.google
For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
10) Rights of the Data Subject
10.1Under applicable data protection law, you have the following rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data; please refer to the cited legal basis for the respective conditions for exercising these rights:
- Right of access pursuant to Article 15 of the GDPR;
- Right to rectification under Article 16 of the GDPR;
- Right to erasure under Article 17 of the GDPR;
- Right to restriction of processing pursuant to Article 18 of the GDPR;
- Right to information under Article 19 of the GDPR;
- Right to data portability pursuant to Article 20 of the GDPR;
- Right to withdraw consent pursuant to Article 7(3) of the GDPR;
- Right to lodge a complaint under Article 77 of the GDPR.
10.2RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, fundamental rights and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.
11) Retention period for personal data
The length of time personal data is stored is determined by the applicable legal basis, the purpose of processing, and—where applicable—the relevant statutory retention period (e.g., retention periods under commercial and tax law).
When processing personal data based on explicit consent pursuant to Article 6(1)(a) of the GDPR, the data in question will be stored until you withdraw your consent.
If there are statutory retention periods for data processed in connection with contractual or quasi-contractual obligations pursuant to Article 6(1)(b) of the GDPR, such data will be routinely deleted upon the expiration of the retention periods, provided that it is no longer necessary for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.
When processing personal data on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing pursuant to Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(2) of the GDPR.
Unless otherwise specified in the other information contained in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
