PRIVACY POLICY

Gourmare GmbH takes data protection seriously. You can use this website without providing personal data. If you write to us or use the contact form, we process the data you send so that we can respond. We do so in line with the GDPR and other data-protection law that applies to us.

This policy explains what we process, for what purposes, and what rights you have. Internet transmissions are never completely secure; you may also contact us by telephone.

1. Name and address of the controller

The controller within the meaning of the GDPR is:

Gourmare GmbH
Winterhuder Weg 29
22085 Hamburg - Germany
e-mail: collande@gourmare-seafood.de
Phone: +49 (0)2152 55114-17
Web: www.gourmare-seafood.de

2. Cookies and local storage

This website does not use non-essential cookies and does not load analytics, advertising, or tracking scripts. We do not set a cookie consent banner because no such technologies are used.

Your browser may still store technical data that is strictly necessary for the delivery of the website (for example temporary cache entries managed by the browser itself). We do not use cookies or comparable technologies for reach measurement, profiling, or marketing.

3. Collection of general data and information (server logs)

This website is hosted by IONOS SE (Germany / European Union). When you visit the site, the hosting environment records technical access data in server log files. According to IONOS, this may include browser type and version, operating system, referrer URL, pages or files requested, date and time of access, and similar technical data. Visitor IP addresses in these logs are anonymised by the host for data-protection reasons.

Gourmare GmbH does not use these log data to draw conclusions about individual visitors for marketing purposes. They are processed to deliver the website, ensure stability and security, and — where necessary — to investigate abuse or attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, reliable operation of the website). IONOS keeps access log data available for a maximum of eight weeks. Further information: IONOS privacy policy and IONOS notes on log files.

4. Contact form and e-mail

You may contact us by e-mail or via the contact forms on this website. The forms collect the data you enter (typically e-mail address, telephone number, subject, and message). Fields marked as required must be completed so that we can process your enquiry. Legal basis: Art. 6(1)(b) GDPR where the enquiry relates to pre-contractual steps or an existing contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries you initiate).

Submitting the contact form does not send an email from your own mail account. Your entries are transmitted to our website server; we then deliver the enquiry by our own email system to our mailbox at collande@gourmare-seafood.de. Website hosting and that mailbox are provided by IONOS SE (Germany / European Union). We do not use a separate form-delivery service. The recipient address is fixed on the server and cannot be changed via the form. You can also write to us directly by e-mail or telephone if you prefer not to use the form.

To reduce spam and abuse we apply technical measures such as a honeypot field, input validation, a short minimum time before submit, and rate limiting. Rate limiting may temporarily process a hashed form of your IP address on the server (legal basis: Art. 6(1)(f) GDPR). These anti-abuse records are kept only as long as needed for that purpose (typically up to one hour for the rate-limit window).

We use the personal data from your enquiry only to handle and respond to it. We do not sell this data. Enquiries that do not lead to a contract are stored in our business e-mail system for up to twelve months after the last correspondence and are then deleted. If an enquiry leads to a business relationship (for example an offer, order, or invoice), we retain the correspondence for the statutory commercial and tax retention periods (in Germany typically six or ten years). You may request erasure sooner; we will delete what we can and tell you if a legal retention duty still applies.

5. Fonts and third-party resources

Fonts used on this website (Belleza, Montserrat, Tenor Sans) are hosted on our own servers. We do not load fonts from Google Fonts, Bunny Fonts, or other third-party font CDNs when you open a page.

The contact page includes a static map image hosted by us. An optional 'Open map' link leads to Google Maps. Clicking that link leaves our website; Google's own terms and privacy policy then apply.

6. Legal bases

We process personal data only where a legal basis in Art. 6 GDPR applies:

Art. 6(1)(b): to take steps at your request before a contract, or to perform a contract (for example an enquiry about our products, an order, or delivery).

Art. 6(1)(c): where we must keep records under commercial or tax law.

Art. 6(1)(f): to operate a secure, reliable website (server logs and anti-abuse measures) and to answer enquiries that are not (yet) contractual. Those legitimate interests are the operation of this site and responding to messages you send us.

The website and the contact form do not rely on consent (Art. 6(1)(a)).

7. How long we store personal data

Contact-form and e-mail enquiries follow the periods in section 4. Server logs follow section 3. For other personal data, we keep it only as long as needed for the purpose, or for the applicable legal retention period, and then delete it.

8. Do you have to provide personal data?

You do not have to use the contact form or send us personal data in order to browse this website. If you want us to answer an enquiry, the required form fields are needed for that purpose. If we later conclude a contract, some data may be required by law or by the contract (for example tax and invoice details). If you do not provide it, we may be unable to answer you or to enter into or perform the contract.

9. Your rights

You have the following rights under the GDPR. To exercise them, write to the contact details in section 1:

Confirmation and access (Art. 15): you can ask whether we process personal data about you and receive a copy.

Rectification (Art. 16): you can ask us to correct inaccurate data or complete incomplete data.

Erasure (Art. 17): you can ask us to delete your data, unless we must still keep it (for example a statutory retention duty).

Restriction (Art. 18): you can ask us to limit how we use your data in the cases set out in the GDPR.

Portability (Art. 20): where it applies, you can receive data you provided to us in a common machine-readable format, or ask us to transmit it to another controller where technically feasible.

Objection (Art. 21): you can object to processing based on Art. 6(1)(f). We will then stop that processing unless we demonstrate compelling legitimate grounds that override your interests, or the processing is for legal claims.

We do not use automated decision-making or profiling that produces legal or similarly significant effects (Art. 22).

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR).