Privacy Policy

Culinary Heights Catering is committed to protecting the privacy and security of personal data collected from users of our site and services. This policy outlines how we collect, use, protect, and handle personal information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data We Collect

We collect various types of information to provide and improve our services:

- Information you provide directly to us: This includes information you give us when you fill out forms on our site, request services, place orders, contact us, or otherwise interact with us. This may include your name, physical address, billing information, event details, dietary requirements, and other contact information.

- Information collected automatically: When you visit our site, we may automatically collect certain information about your device and browsing actions. This includes IP addresses, browser type, operating system, referring URLs, pages viewed, and the dates and times of visits. This data helps us understand how our site is used and improve user experience.

- Information from other sources: We may receive information about you from third-party services or public sources, which we may combine with the information we collect directly.

How We Use Your Data

We use the collected information for various purposes:

- To provide and manage our catering services, including processing orders, arranging delivery or setup, and providing customer support.

- To communicate with you regarding your inquiries, orders, or potential services.

- To send you information about our services, promotions, or updates, where you have consented to receive such communications or where there is a legitimate interest.

- To improve our site, services, and customer experience.

- To understand how our services are used and to develop new offerings.

- To comply with legal obligations and protect our legal rights.

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

- Performance of a contract: Processing is necessary for the performance of a contract for services with you or to take steps at your request before entering into a contract.

- Legitimate interests: Processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms. This includes improving our services, marketing, and ensuring the security of our operations.

- Consent: Processing is based on your explicit consent for specific purposes, such as sending marketing communications. You have the right to withdraw your consent at any time.

- Legal obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. The specific retention period depends on the nature of the data and the purpose of processing. When your personal data is no longer required, we will securely delete or anonymize it.

Data Security

We have implemented appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Despite our efforts, no security system is completely impenetrable, and we cannot guarantee the absolute security of your information.

Sharing Your Data

We may share your personal data with trusted third parties who provide services on our behalf, such as payment processors, delivery services, IT service providers, or marketing partners. These third parties are obligated to protect your data and use it only for the purposes for which we disclose it to them.

We may also disclose your information if required by law, court order, or governmental regulation, or if we believe that disclosure is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

Your Data Protection Rights

Under GDPR, you have several rights regarding your personal data:

- The right to access: You have the right to request access to the personal data we hold about you.

- The right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.

- The right to erasure (the right to be forgotten): You have the right to request the deletion of your personal data under certain conditions.

- The right to restrict processing: You have the right to request that we restrict the processing of your personal data under certain conditions.

- The right to object to processing: You have the right to object to the processing of your personal data under certain conditions.

- The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

- The right to withdraw consent: If we process your data based on your consent, you have the right to withdraw that consent at any time.

- The right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, place of work, or where an alleged infringement of the GDPR occurred.

Cookies and Similar Technologies

Our site uses cookies and similar technologies to collect information automatically. Cookies are small data files stored on your device that help improve your experience, analyze site usage, and support marketing efforts. You can control cookie preferences through your browser settings.

Contact Us

If you have any questions or concerns about this privacy policy or our data practices, or if you wish to exercise your data protection rights, please contact us via postal mail at the following address:

Culinary Heights Catering
175 Friedrichstraße
Berlin, Berlin 10117
Germany

Updates to This Policy

We may update this privacy policy periodically to reflect changes in our practices or legal requirements. We encourage you to review this policy regularly.