Privacy policy

1. Controller

Controller within the meaning of the GDPR is:
Bäckerei Dannenmann GmbH
Stammheimer Straße 72, 70806 Kornwestheim, Germany
Phone: +49 7154 / 21451
Email: info@baeckerei-dannenmann.de

2. Hosting and content delivery

This site is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. See the IONOS privacy policy.

We use the content delivery network (CDN) of Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA, to deliver content faster and protect the site against attacks. Your IP address is processed in the process. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and performant site). Transfer to the USA is based on the EU Standard Contractual Clauses (Art. 46 GDPR) and the EU-US Data Privacy Framework. See the Cloudflare privacy policy.

3. Server log files

The web server automatically records information in server log files: IP address, date and time of the request, browser type, referrer URL, operating system. There is no merging with other data sources. Logs are deleted after at most 7 days. Legal basis: Art. 6(1)(f) GDPR (secure operation of the site).

4. Cookies and local storage

This site does not set any tracking or marketing cookies. Strictly necessary information is stored in your browser's Local Storage:

• dn-cookie-consent: your cookie choice (accept/decline) so that the notice does not appear on every visit.
• dn-theme: your preferred appearance (light/dark).

These entries stay exclusively in your browser — we never see them. You can delete them at any time via your browser settings. Legal basis: Art. 6(1)(f) GDPR (functionality of the site).

5. Contact by email or phone

When you contact us by email or phone, your details are stored to handle the request and any follow-up. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (handling general enquiries). We delete your data once the reason for storage no longer applies — statutory retention obligations (e.g. under HGB, AO) remain unaffected.

6. General contact form

Via our form at /anfrage/sonstiges (or /en/anfrage/sonstiges) you can send us messages. Data processed: name, email, phone (optional), subject, message.

The enquiry is delivered by email to info@baeckerei-dannenmann.de. There is no permanent storage in a database — retention only in the email inbox. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or (f) (handling the enquiry). Deletion at the latest after the conversation ends, unless statutory retention obligations apply.

7. Cake enquiry form (D'Patisserie)

Via the form at /anfrage/torte/formular you can request a custom cake. Data processed:

• Contact: name, email, phone (optional)
• Order details: occasion, pickup date, time, headcount, cake type, size, tiers, filling, flavour, outer cover, decoration, topper, allergies, free-text message
• Optional up to 3 uploaded reference images (JPEG/PNG/WebP/HEIC, max. 5 MB each)

The data is transferred to our internal order management server (erp.dpatisserie.de, hosted by IONOS SE in Germany) and stored there. Uploads are scanned for malware automatically; metadata (EXIF, GPS) is removed from images. Purpose: producing an individual quote and contract handling. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures and contract performance). Storage period: up to 12 months after the enquiry is closed, then deletion unless statutory retention obligations apply.

8. Anti-abuse protection (Cloudflare Turnstile)

Our forms are protected by Cloudflare Turnstile against automated abuse. When you load the form page, data such as IP address, referrer, browser signals and an anonymous token is transferred to Cloudflare to distinguish humans from bots. Provider: Cloudflare Inc. (USA). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protection against spam and abuse). See the Cloudflare privacy policy.

9. AI assistant (Chatbase, beta)

On /anfrage/torte/ki we offer an AI-powered chat assistant for cake enquiries (beta). The assistant is provided by Chatbase Inc. (548 Market St, PMB 20862, San Francisco, CA 94104, USA).

Important: the chat widget is loaded only after you click "Activate chat" — until then, no data is transferred. By activating you consent to the following data being sent to Chatbase: your chat input, technical connection data (IP address, browser type, timestamps), session identifier.

Purpose: providing and operating the chat assistant. Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 49(1)(a) GDPR for the transfer to the USA. You can withdraw consent at any time by leaving the page or stopping use; the withdrawal does not affect the lawfulness of processing prior to withdrawal. See the Chatbase privacy policy. As an alternative, the classic form (/anfrage/torte/formular) or contact by phone is available at all times.

10. Instagram feed (Behold)

On the home page we display recent posts from our Instagram profile @baeckerei_dannenmann. Posts are technically delivered by the service Behold (Behold Social Inc., Canada). Post data (texts, image URLs) is fetched server-to-server when the site is built and embedded in the page. When you load the page your browser fetches the associated image media from the Behold CDN (behold.pictures) — your IP address is transferred to Behold in the process. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in presenting our social media content). See the Behold privacy policy.

11. OpenStreetMap

To show our location on the contact page we embed an interactive map from OpenStreetMap (OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). When you load the contact page your IP address is transferred to OpenStreetMap servers to render the map. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in making our location easy to find). See the OpenStreetMap privacy policy.

12. Social media links

This site contains a link to our Instagram profile (Meta Platforms Ireland Limited). The mere presence of the link does not transfer any data to Meta. Once you click the link, the Instagram privacy policy applies.

13. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content (e.g. enquiries you send to us), this site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.

14. Your rights

You have the right to:

• access the personal data stored about you (Art. 15 GDPR)
• rectification of incorrect data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• withdraw consent (Art. 7(3) GDPR) — withdrawal does not affect the lawfulness of processing before withdrawal

To exercise your rights, please contact: info@baeckerei-dannenmann.de.

15. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

16. Changes to this privacy policy

We reserve the right to adjust this policy as the legal situation or the services we use change. The current version is always available at /datenschutz and /en/datenschutz.