Privacy Policy

1. Controller

The controller for data processing on this website is:

People of Coffee GmbH

Neutorplatz 8, 46535 Dinslaken, Deutschland

Phone: +49 151 47005995

Email: poc.dinslaken@gmail.com

2. Your rights as a data subject

You have the following rights regarding the personal data concerning you:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

3. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority includes: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2–4, 40213 Düsseldorf

4. Hosting and server log files

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. The provider processes technical data transmitted automatically by your browser on our behalf. We have concluded a data processing agreement with the provider. Where data is transferred to a third country, this takes place on the basis of EU-Standardvertragsklauseln (Art. 46 Abs. 2 lit. c DSGVO).

On each visit the following data is stored in server log files: page requested, date and time, volume of data transferred, notification of successful retrieval, browser type and version, operating system, referrer URL and the truncated IP address.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free provision and security of the website. Log files are deleted after 30 days at the latest.

5. Cookies and consent management

Cookies are small text files stored on your device. We distinguish between strictly necessary cookies and cookies that require consent.

We set strictly necessary cookies on the basis of § 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR. These include storing your language selection and your cookie choice.

All other cookies and comparable technologies — in particular for statistics, marketing and external media — are only set after your explicit consent pursuant to § 25 (1) TDDDG and Art. 6 (1) (a) GDPR. The corresponding scripts are not loaded before you consent.

You can withdraw or adjust your consent at any time via the “Cookie settings” link in the footer. On withdrawal we delete the related cookies immediately. The lawfulness of processing carried out up to the point of withdrawal remains unaffected.

• poc_consent — People of Coffee — stores your cookie choice — 6 months — necessary
• NEXT_LOCALE — People of Coffee — stores the selected language — 12 months — necessary
• _ga, _ga_* — Google — distinguishing visitors for reach measurement — up to 24 months — statistics
• _fbp — Meta — attributing website visits to advertising campaigns — 3 months — marketing

6. Google Analytics 4

Only after your consent do we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that enable an analysis of your use of the website. IP anonymisation is enabled, so your IP address is truncated by Google within the EU or EEA. We additionally use Google Consent Mode v2: no analytics or advertising cookies are set before your consent.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Transfers to the USA take place on the basis of the EU-US Data Privacy Framework or the EU standard contractual clauses. Data is deleted after 14 months at the latest.

7. Meta Pixel

Only after your consent do we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. It allows us to measure the effectiveness of our adverts and to build audiences.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. For the collection and transfer of the data we and Meta are joint controllers within the meaning of Art. 26 GDPR.

8. Google Maps

We embed map sections via Google Maps of Google Ireland Limited. The map only loads after you have explicitly consented to loading external media (two-click solution). No data is transmitted to Google before that.

When the map loads, your IP address and usage data are transmitted to Google. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

9. Fonts

The fonts used are served locally from our own server. There is no connection to Google Fonts servers and no data is transmitted to Google.

10. Contacting us

If you contact us by email, phone or WhatsApp, we process the data you provide in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR for pre-contractual enquiries, otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries.

When contacting us via WhatsApp, the privacy terms of WhatsApp Ireland Limited additionally apply. We delete the data once your enquiry has been fully handled and no statutory retention obligations apply.

11. Social media links

Our website links to our profiles on Instagram and TikTok. These are plain links, not embedded content. Data is only transmitted to the respective provider once you click a link. We have no influence over that processing.

12. SSL/TLS encryption

For security reasons this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.

13. Currency of this policy

This privacy policy is currently valid. As our website develops or legal requirements change, it may become necessary to amend it.