Privacy policy

1. Controller

Mulham Attar, Eiscafé Al Attar, Am Berge 8, 18273 Güstrow, Germany. Telephone: 03843/776566. Email: info@eiscafe-alattar.de.

2. Website delivery, hosting and CDN

We use web hosting from Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. According to our hosting account information, the hosting server is located in Frankfurt am Main, Germany. When you visit our website, Hostinger processes technical access data, including IP address, access time, requested resource, device and browser information, country inferred from the IP address, data volume and response time. Error logs may include the time, error code and triggering request.

We also use Hostinger’s Content Delivery Network (CDN) for fast and reliable delivery of our website. Website content is cached on distributed servers, and technical connection data, in particular the IP address and requested resource, is processed. The Frankfurt location mentioned above refers to the hosting server; delivery through the CDN may involve additional server locations. Information about recipients and possible transfers outside the EEA is provided in section 6.

Processing serves website delivery, security and error analysis. Hostinger also provides server-side analysis of access logs. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, fast and reliable operation of the website.

Hostinger processes data under its data processing agreement. According to Hostinger, access logs and error logs for our web hosting are retained for seven days. Hostinger retains separate security logs for at least six months. According to Hostinger, retention beyond that period lasts only as long as necessary to fulfil its obligations. Further information about hosting and recipients is provided in section 6.

3. Cookies, fonts, animation, language and music

Our website uses no analytics or advertising cookies and no browser-based tracking services. Its flavour, motion, language and music controls do not set cookies or use local storage or session storage. Fonts, images and animation scripts are stored on our own webspace and delivered through our website, including the Hostinger CDN described in section 2. Your flavour selection and motion setting apply during the current page visit. Technical server logs are described in section 2. Further information is available under Cookies.

You select a language through a link to the corresponding language version. No cookie or permanent browser storage is used for this selection. The optional background music is loaded from our own webspace only when you press the music button. It can be paused at any time. Playback and volume settings are not stored permanently. No external music or streaming service is embedded.

4. Contact by email or telephone

If you contact us by email or telephone, we process your contact details and the content of your enquiry to respond. The legal basis is Article 6(1)(b) GDPR for contractual enquiries and Article 6(1)(f) GDPR and our legitimate interest in responding for other enquiries. Email links open your email application. For info@eiscafe-alattar.de, we use a mailbox set up with Hostinger. Sender and recipient addresses, message contents, attachments and technical communication data are processed. Hostinger’s data processing agreement also covers email services. We additionally use Google’s Gmail app to handle emails. Information about Google’s processing is available in the Google privacy policy. Enquiries are deleted when no longer required, unless statutory retention obligations or the defence of legal claims require further storage.

For gift voucher enquiries and table reservations, you can choose an email service. The selection window only prepares enquiry text and does not send any message itself. For Gmail, Outlook.com and Microsoft 365, the recipient, subject and message are passed to the selected provider via a link only after your selection; that provider’s privacy information then applies. For other providers, you can copy the text to your clipboard and open your mailbox. No webmail service is loaded before you choose one. This website does not persistently store your selection or the enquiry text. You send the message yourself from your email mailbox.

5. External links

We link to Google Maps, Instagram, Facebook and our separate Al Attar Eis website. Maps and social networks are not embedded. You visit the respective external website only when you open a link. Its own privacy information then applies.

6. Recipients and processing outside the EEA

Recipients may include our contracted hosting and communication providers and competent authorities where disclosure is legally required. For our web hosting, Hostinger identifies Google Cloud EMEA Limited, based in Ireland, as a subprocessor supporting internal tools and cloud infrastructure. Hostinger may use subprocessors to provide its services; its general list is published in Appendix 3 of the data processing agreement. The Frankfurt server location does not exclude further processing outside the European Economic Area. For such transfers, the agreement provides in particular for EU Standard Contractual Clauses where no adequacy decision or other applicable transfer basis applies. Information about contractual safeguards is available through that link or on request using our contact details.

7. Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent with effect for the future. Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Please use the contact details above. You may lodge a complaint with a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information of Mecklenburg-Vorpommern, Schloss Schwerin, Lennéstraße 1, 19053 Schwerin, Germany: www.datenschutz-mv.de.

8. Required data and automated decisions

Technical connection data is necessary to deliver the website. You provide contact details when making a voluntary enquiry. We do not use profiling or automated decision-making within the meaning of Article 22 GDPR on this website.