Privacy notice
This page explains how personal data is processed on crowncandy.de.
1. Controller
CrownCandy
Owner: Slava Siegfried
Laimbacherstr. 39
95447 Bayreuth
Germany
+49 178 1917902
mail@crowncandy.de
2. Purpose of this website
This website informs visitors about CrownCandy, current machine locations, and opportunities to collaborate as a location partner. There is no public customer account and no public checkout on this website.
3. Server log files
When this website is accessed, the server processes technically necessary data such as IP address, date, time, requested URL, user agent, and referrer where provided. This processing is required for reliable delivery, security, and troubleshooting.
4. Cookies and sessions
The public website uses one cookie to store your choice in the cookie banner. If analytics cookies are enabled in the banner, they are only set after your consent. Django's administration area also uses technically necessary session and security cookies so authorized users can log in and manage content.
5. Consent logs
When you make a choice in the cookie banner, we store that decision server-side together with the timestamp, version, language, requested page, referrer, shortened IP-related connection information, and user agent so we can document consent and trace banner changes.
6. External content and links
This website contains links to external services such as Google Maps, Instagram, TikTok, WhatsApp, and email applications. A connection to the relevant provider is only established after you actively click a link. The privacy information of the respective service then applies.
7. Fonts
This website loads web fonts from Google Fonts. As part of that process, your IP address may be transferred to Google so the font files can be delivered.
8. Contact requests
If you use the contact form, email, or WhatsApp, we process the information you send solely to handle your request and any follow-up communication. Contact form submissions are stored in the protected administration area of this website so they can be processed internally.
9. Legal bases
Depending on the case, processing is based on Art. 6(1)(b) GDPR for pre-contractual or contractual communication, Art. 6(1)(f) GDPR for the secure and efficient operation of this website, and Art. 6(1)(c) GDPR where legal obligations apply.
10. Storage period
We store personal data only for as long as required for the respective purpose or as long as statutory retention obligations apply.
11. Your rights
Under the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to certain processing activities. You also have the right to lodge a complaint with a data protection authority.