Privacy Policy

This Privacy Policy explains how we collect, use, and protect your personal data when you visit our website, in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Controller

Luciana Yurrebaso Consoli
operating under the business name Bretzel Brand Lab
Meisterhofstrasse 12
88250 Weingarten, Germany
Email: [email protected]

2. Hosting

Our website is hosted by Hostinger. When you visit, Hostinger automatically collects server log data such as your IP address, browser type, operating system, referrer URL, and access times. These technical data are necessary for ensuring website stability and security.

We have a Data Processing Agreement (DPA) in place with Hostinger to ensure that your data is handled securely and in accordance with GDPR requirements.

Legal basis for processing: Art. 6 (1) (f) GDPR (legitimate interest).

3. Cookies and consent management

We use Cookiebot by Usercentrics to manage cookie consent. This website uses only technically necessary cookies, which are essential for basic website functions and cannot be disabled. No tracking, analytics, or marketing cookies are used unless you explicitly consent via the cookie banner.

Cookiebot processes limited data related to your consent preferences, such as anonymized IP address, timestamp, and consent status. Legal basis: Art. 6 (1) (c) and (f) GDPR.

You may withdraw or modify your cookie consent at any time via the cookie settings on our website.

4. Contact form (Tally)

Our contact form is powered by Tally (Tally Solutions BV, Belgium). When you submit a form, the data you provide — including your name, email address, and message — is transmitted to and stored by Tally on our behalf.

We have a Data Processing Agreement in place with Tally. Your data is used solely to respond to your inquiry and is not shared with third parties for marketing purposes.

Legal basis: Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (pre-contractual communication).

5. Communication via WhatsApp

Our website includes a link to WhatsApp for direct contact. If you initiate communication via WhatsApp, your data will be processed by WhatsApp Ireland Limited and potentially its parent company Meta Platforms Inc. Please note that data may be transferred outside the EU.

Communication via WhatsApp is voluntary and based on your consent and/or pre-contractual communication pursuant to Art. 6 (1) (a) and (b) GDPR.

6. Data retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

7. Your rights

Under GDPR Articles 15–21, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise your rights, contact us at [email protected].

8. SSL/TLS encryption

Our website uses SSL/TLS encryption to protect all data transmission between your browser and our server.