Privacy policy
This privacy policy applies to the website www.hellochef.online
Person responsible:
Hello Chef – Maximilian Julian Kangni
Mangfallstraße 25
81547 Munich
support@hellochef.menu
1.) Processing of personal data
We process your personal data on the website as follows, among other things (for further data processing on the website, please refer to the following sections of this privacy policy):
Log files when visiting the website
When you use our website, our hosting provider logs so-called “log file” data every time you access the server, such as the name of the website accessed, the previously visited page (“referrer” URL), product and version information of the browser and operating system used, requesting provider, date and time of access, search engines used, country of access, amount of data transferred, names of downloaded files and IP address.
The legal basis for processing is Article 6 paragraph 1 f) GDPR. Our legitimate interest in storing the log file data is to ensure system security, including the investigation of misuse. The IP addresses are deleted after a maximum of 7 days, unless they are required for longer due to a security-related incident, e.g. for clarification or for evidence purposes.
Contact inquiries:
When you receive contact inquiries, we process your personal data such as name, address, email address, telephone number, etc., which we need to answer your inquiry.
The legal basis for processing your personal data in the context of contact inquiries is Art. 6 Para. 1 b) General Data Protection Regulation.
When you receive contact inquiries, we store your personal data for as long as it is necessary to process your inquiry, plus an appropriate retention period for follow-up queries.
The provision of this personal data is not required by law or contract or necessary for the conclusion of a contract. If you do not provide us with this data, however, we will not be able to answer your contact inquiry or - in the case of limited contact details - not via all requested communication channels.
Registration/orders from customers:
When you register or place orders, we process your personal data such as name, address, email address, telephone number, date of birth, self-selected user name, payment details, etc., which we need to fulfill the contractual relationship with you or to carry out pre-contractual measures that are carried out at your request.
We store your personal data collected as part of registration or orders for as long as it is necessary to fulfill the contractual relationship (if applicable, including the provision of the customer account) and/or to carry out pre-contractual measures that are carried out at your request and/or with regard to warranty, guarantee or similar obligations and/or with regard to statutory retention periods.
The legal basis for the processing of your personal data collected as part of registration or orders is Art. 6 Para. 1 b) and Art. 6 Para. 1 c) General Data Protection Regulation.
The provision of this personal data is not required by law or contract. However, it is necessary for the conclusion of the contract, i.e. the implementation of the registration or order, insofar as the relevant information is mandatory (instead of just voluntary) in our registration/order process.
Private chefs: Registration/orders:
When you register and/or commission us as a private chef, we process personal data such as name, address, email address, telephone number, date of birth, self-selected user name, payment details or similar, insofar as we need this to fulfill the contractual relationship with you or to carry out pre-contractual measures that are carried out at your request.
We store your personal data collected as part of registration or orders for as long as it is necessary to fulfill the contractual relationship (if applicable, including the provision of the customer account) and/or to carry out pre-contractual measures at your request and/or with regard to warranty, guarantee or similar obligations and/or with regard to statutory retention periods.
If the data processing takes place with your consent, the legal basis is Article 6 paragraph 1 a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6 paragraph 1 b) GDPR (performance of the contract).
Newsletter:
If you sign up for our newsletter, we process the data collected, such as your email address, title, etc., for the purpose of sending the newsletters.
The legal basis for processing your personal data when sending our newsletter is Art. 6 Para. 1 a) General Data Protection Regulation.
We store the personal data that we need to send the newsletter until you revoke your consent to receive the newsletter.
If information is mandatory (instead of just voluntary) when registering for the newsletter, we cannot accept your newsletter registration without this information.
2.) Use of cookies
In this section we will inform you about the use of cookies on our website.
a) Description and functionality
Cookies are small text files that are stored on the user's computer and that enable an analysis of the user's use of the website.
b) Own cookies
We use cookies to make using the website easier and more convenient for visitors or to enable certain functions in the first place.
The legal basis for the processing of your personal data by us in connection with the use of cookies is Art. 6 Para. 1 f) General Data Protection Regulation (“legitimate interest”). The legitimate interest arises from the purposes mentioned above.
When using cookies, we store your personal data for as long as it is necessary to make using our website easier and more convenient.
c) Third-party cookies
The website may also use cookies from third parties to collect or receive information from our website and other places on the Internet and then use this information to offer, for example, web tracking services, rating services or advertisements targeted to specific groups.
When using cookies, your personal data will be stored for as long as it is necessary to achieve the purposes described above.
If the data processing for the purposes described above is carried out with your consent, the legal basis is Article 6 Para. 1 a) GDPR (consent). Otherwise, data processing is carried out on the basis of Article 6 paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes mentioned above.
d) Revocation/Objection/Settings
You have the option at any time to revoke your consent to the setting of cookies or to object to data processing by cookies by deleting the cookies in your browser settings.
You can also set your browser so that cookies are only accepted if you agree to them.
As far as ad cookies are concerned, you can block and/or manage many of them via the following services:
www.aboutads.info/choices/
www.youronlinechoices.com/uk/your-ad-choices/
www.networkadvertising.org/managing/opt_out.asp
However, if you reject cookies, you may not be able to use certain website functions, services, applications or tools.
3.) Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. Google bases this data transfer on the EU standard contractual clauses.
If IP anonymization is activated on this website, however, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. Unless cookies are set on the website only with the granting of a corresponding consent, you can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
The data processed as part of the use of Google Analytics is automatically deleted after 1 month.
If the data processing takes place with your consent, the legal basis is Article 6 Paragraph 1 a) GDPR (consent). Otherwise, the data processing takes place on the basis of Article 6 Paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes stated below.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
4.) Google Tag Manager
On our website we use the Google Tag Manager of Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
The Google Tag Manager is a tool from Google for integrating, managing and further using Google services and third-party services on our website for analysis, website optimization and/or advertising purposes. These services are integrated into our website using tags (i.e. additional programming that is inserted into the source code of our website).
According to Google, the Tag Manager itself (which implements the tags) does not access the data collected via the tags.
You can find more detailed information on data processing on the Google website:
https://www.google.com/intl/de/tagmanager/faq.html
https://www.google.com/intl/de/tagmanager/use-policy.html
https://policies.google.com/privacy?hl=de&gl=de
You can object to your data being recorded by the Google Tag Manager at any time. See letter d. in the “Cookies” section of this privacy policy.
5.) Facebook Pixel / Facebook Custom Audience
Facebook Custom Audience is used on individual pages of our website. This service is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (hereinafter "Facebook"). The data collected is transmitted to the provider's servers in the USA. Facebook bases this data transmission on the EU standard contractual clauses.
Facebook Custom Audience enables target group-oriented advertising on Facebook. The Facebook Pixel also makes it possible to assign which visits to our website are made by clicking on our Facebook ads. Facebook Custom Audience and Facebook Pixel therefore serve the purposes of analysis, optimization and the economic operation of our online advertising.
When using Facebook Custom Audience via the customer list, our customer list is transmitted to Facebook and converted into fixed character strings using a so-called hash process. Facebook can use this data to compare which of our customers are also members of Facebook and then display Facebook advertising to these customers or to a portion of these customers selected according to certain characteristics (e.g. age or interests) or to a comparable target group.
When using Facebook Custom Audience using the pixel process, an invisible Facebook pixel is integrated into our website, which transmits, among other things, the Facebook user ID of the user (logged in to Facebook) and data on the use of our website to Facebook. This allows Facebook to track the online behavior of users of our website. Facebook can show users registered there targeted advertisements (for example, for a product that was not purchased after the order process was canceled).
As part of a so-called "extended comparison", data (e.g. name, first name, email address, date of birth, etc. of users registered with us) is also transmitted to Facebook, which enables Facebook to determine whether visitors to our website who are not logged in to Facebook are Facebook members (in order to include such Facebook members in the target group advertising mentioned above).
If the data processing for the purposes described above takes place with your consent, the legal basis is Article 6 paragraph 1 a) GDPR (consent). Otherwise, the data processing takes place on the basis of Article 6 paragraph 1 f) GDPR ("legitimate interests"), whereby the legitimate interests lie in the purposes mentioned above.
Revocation/ objection/ settings:
- Facebook pixel: see letter d. in the “Cookies” section of this privacy policy
– Facebook Custom Audience via the customer list: e.g. by email to the email address mentioned at the beginning of this privacy policy
– In your Facebook account you can also set which types of ads are shown to you on Facebook.
You can find more detailed information in Facebook’s privacy policy:
https://de-de.facebook.com/policy.php
6.) Rights of the data subject
According to Art. 15 of the General Data Protection Regulation, you have the right to request information about the processing of your personal data (“right of information of the data subject”).
According to Art. 16 of the General Data Protection Regulation, you have the right to request the correction and deletion of incorrect personal data concerning you (“right to rectification”).
According to Art. 17 of the General Data Protection Regulation, you can request the deletion of personal data concerning you if one of the reasons listed there applies (“right to be forgotten”).
Likewise, according to Art. 18 of the General Data Protection Regulation, you have the right to request the restriction of the processing of personal data concerning you if one of the conditions listed there applies (“right to restriction of processing”).
According to Art. 20 of the General Data Protection Regulation, you have the right to have personal data concerning you made available to you and to have this data transmitted to another responsible party (“right to data portability”).
Revocation of consent: see the “Right of Withdrawal” section in this data protection declaration.
Right of objection: See the “Right of objection” section in this data protection declaration.
You have the right to complain to the responsible supervisory authority. The responsible supervisory authority is the Bavarian State Commissioner for Data Protection (BayLfD), Prof. Dr. Thomas Petri, postal address: PO Box 22 12 19, 80502 Munich, street address: Wagmüllerstraße 18, 80538 Munich
7.) Right of withdrawal
You can withdraw your consent to the processing of your personal data at any time, e.g. by email to the email address mentioned above. This does not affect the legality of the processing carried out on the basis of the consent until the withdrawal.
8.) Right of objection
Insofar as our data processing is based on Article 6 paragraph 1 f) GDPR (“legitimate interests”), you have the right to object to the processing of your personal data in accordance with Article 21 GDPR.
9.) Sharing your data
Unless already stated elsewhere in this privacy policy, we will share your personal data with the following recipients or categories of recipients
– Shipping service providers
– Credit rating service providers
– Payment service providers
– Marketing service providers