Privacy Policy

Controller

Pita Fresh GmbH & Co.KG
Kleine Rittergasse 43, 60594 Frankfurt am Main
Email: info@mypita-frankfurt.de

Hosting

This website is hosted by Netlify (Netlify, Inc., USA). When you access the site, Netlify processes technically necessary server log data (IP address, timestamp, requested resource, user agent). The legal basis is Art. 6(1)(f) GDPR (secure and stable operation). Data may be transferred to the USA in the process. Netlify is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR), and additionally uses standard contractual clauses. We have a data processing agreement with Netlify pursuant to Art. 28 GDPR; it forms part of Netlify’s terms of service.

Cookies and consent

This website only uses Google Analytics if you agree in the banner. We store your choice for six months in a cookie called “cc_cookie” on your device. The cookie contains only your choice, the time it was made and its expiry date, the banner version and the language, but no identifier that could be used to recognise you; we do not analyse it or pass it on. The legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (proof of consent). The website sets other cookies only for Google Analytics and only with your consent; beyond that, it loads no third-party content.

Change cookie settings

Web analytics with Google Analytics

If you agree, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). We want to understand how many people visit our website, where they come from and which content they use, so that we can improve it.

The following data is processed: pages viewed, date and time, time spent, whether you scroll to the end of a page, the page you came from, clicks on ordering, phone, directions and social media links (only which service, which shop and where on the page), whether the contact form was submitted (not its content), device type, browser, operating system, screen resolution, language and the approximate location (country, region, city) that Google derives from your IP address. According to Google, Google Analytics 4 does not log or store IP addresses of users in the EU. Google Analytics recognises your device by a random ID in a cookie; your name, email address and phone number are not transmitted.

Google Signals, the link to Google advertising services and personalised advertising are switched off. Data that can be linked to your device is deleted by Google automatically after 14 months; aggregated statistics without such a link are kept. Cookies: “_ga” and “_ga_<ID>”, each with a lifetime of 13 months from your last visit. There is no automated decision-making within the meaning of Art. 22 GDPR.

The legal basis is your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). Consent is voluntary: without it, Google Analytics is not loaded and you can still use the website without restriction. You can withdraw it at any time with effect for the future via “Cookie settings”; the cookies are then deleted. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

We have concluded a data processing agreement with Google (Art. 28 GDPR). In the course of processing, data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which there is an adequacy decision of the European Commission (Art. 45 GDPR). More information: policies.google.com/privacy and business.safety.google/adsprocessorterms.

Fonts

All fonts are served locally from our own server. There is no connection to Google Fonts or other external font services, and no data is transferred to third parties.

Contact form

If you write to us via the contact form, we process the data you provide (name, email address, message) solely to handle your enquiry. Transmission and storage take place via Netlify Forms; Netlify automatically checks submissions using the Akismet spam filter (Automattic Inc., USA). Here too, data may be transferred to the USA; Automattic is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6(1)(a) and (b) GDPR. You can withdraw your consent at any time with effect for the future, for example by emailing us. We delete the data as soon as it is no longer required for the purpose, unless statutory retention periods apply.

Email, phone and job applications

If you contact us by email or phone, or apply for a job by email via our jobs page, we process your details and documents to handle your request or application. The legal basis is Art. 6(1)(b) GDPR where a contract or a possible employment relationship is concerned, otherwise Art. 6(1)(f) GDPR (responding to enquiries). We delete the data as soon as it is no longer required — application documents once the application process has ended, unless legal obligations or the defence of possible claims require otherwise.

External links

Links to Instagram, TikTok, Google Maps and delivery services are plain links. Preview images of our latest videos are hosted on our own server. No content from these providers is loaded and no data is transferred before you actively click the link. After clicking, the privacy policy of the respective provider applies.

Your rights

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR); the authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit)

This translation is provided for convenience; the German version is legally binding.