Privacy policy

Controller

The controller responsible for data processing on this website is:

Contact

Phone: 0157 30054022

Email: info@thetastelab.de

Hosting

When you visit this website, the server that delivers it processes technical data needed to show the pages and keep the site secure. This includes your IP address, the date and time of access, the page requested, and browser information such as the user agent. The hosting provider processes this data on our behalf.

The legal basis is our legitimate interest in operating a secure and reliable website (Article 6 (1) (f) GDPR). We keep these logs only for as long as that security purpose requires, and then delete them. This website is hosted by Vercel Inc. (United States). Vercel processes your IP address, the time of access, the page requested, and browser information on our behalf. That access data is processed in the United States. We rely on the European Commission’s standard contractual clauses and, where it applies, the EU–US Data Privacy Framework (Articles 44 to 49 GDPR).

Contact and enquiries

If you email us, call us, or use the enquiry form, we process the details you give us so we can answer you. On the form that is your name, email address, and message, and, if you add them, your phone number and the experience you are asking about. Name, email, and message are required to send the form. Phone and experience are optional.

The legal basis is Article 6 (1) (b) GDPR. The data is needed to take steps at your request before a possible booking. We do not use it for other purposes.

The enquiry is first received by this website on Vercel Inc. (United States), so your name, email address, phone number, and message are processed there on our behalf. We rely on the same safeguards as for hosting: the European Commission’s standard contractual clauses and, where it applies, the EU–US Data Privacy Framework (Articles 44 to 49 GDPR). The message is then delivered into our mailbox at STRATO AG (Germany, strato.de). Storing the email there stays in Germany and is not a transfer outside the European Union. If that delivery is unavailable, your device opens a draft email to info@thetastelab.de, and your own email provider sends it.

We keep enquiry messages for as long as we need them to handle your request and any follow-up. If a booking or invoice follows, we keep the related records for the period required by German commercial and tax law, then delete them.

Map

On the food-truck page we show a map made of tiles from OpenStreetMap (OpenStreetMap Foundation). Your browser loads those tiles from tile.openstreetmap.org. That sends your IP address and the time of the request to the tile server so the map can be displayed. The legal basis is our legitimate interest in showing where the truck is (Article 6 (1) (f) GDPR). The OpenStreetMap Foundation is based in the United Kingdom. The European Commission has adopted an adequacy decision for the United Kingdom.

Links that leave this site

WhatsApp and Instagram are services of Meta. Google Maps is a service of Google. Nothing is sent to them while you only read this site. If you choose to chat on WhatsApp, the name in the form can be included in the draft message, and Meta then processes that conversation under its own rules. If you choose to open Google Maps, Google receives the request, including your IP address and the location you opened. The same applies when you open our Instagram page: you leave this site, and that provider processes the visit under its own policy. The legal basis for offering these links is our legitimate interest in letting you reach us and find the truck (Article 6 (1) (f) GDPR).

Cookies

We store one cookie, named NEXT_LOCALE. It is a first-party cookie and it stores only the language code you are using (en, de, or ar), so the site can keep that language. It is strictly necessary for this preference (section 25 (2) TDDDG). It is not used for advertising or analytics. The cookie has no expiry date of its own, so your browser treats it as a session cookie and removes it when the session ends, unless your browser restores session cookies. We do not use local storage for tracking.

Your rights

You have the right to access your personal data, to have it corrected or erased, to restrict processing, and to receive the data you provided to us in a portable format where Article 20 GDPR applies. Where we rely on legitimate interest, you have the right to object under Article 21 GDPR. Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before you withdrew. You also have the right to lodge a complaint with a supervisory authority. To exercise your rights, contact us using the details above.

The authority for our establishment in Schifferstadt is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany (www.datenschutz.rlp.de).

We do not use your data for automated decision-making, including profiling, that produces legal effects or similarly significant effects for you.