This is an English translation provided for your convenience. This company is based in Germany, and the German-language version of this privacy policy is the legally binding one.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Waffelshop Dresden GmbH
Berliner Str. 40
01067 Dresden, Germany
Phone: +49 351 31 29 29 97
Email: office@waffel.shop
2. General information on data processing
We generally only process personal data of our users to the extent necessary to provide a functioning website and our content and services. Personal data is generally only processed with the user's consent, or insofar as processing is permitted by law (e.g. Art. 6 (1)(b), (f) GDPR).
3. Hosting and server log files
When you visit this website, our hosting provider automatically collects information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources and is deleted once it is no longer required for the purpose for which it was collected. Processing is based on Art. 6 (1)(f) GDPR, arising from our legitimate interest in the technically error-free presentation and security of our website.
Hosting provider for this website: Millenium Arts
4. Cookies, tracking and fonts
This website only uses technically necessary cookies that are set as a result of your own action. No analytics, tracking or marketing services are used.
| Cookie | Purpose | Retention |
|---|---|---|
waffelshop_lang |
Remembers your chosen language (German/English) when you use the language switch. | 1 year |
waffelshop_notice |
Remembers that you have acknowledged this cookie notice, so it doesn't appear again. | 1 year |
Both cookies are only set when you actively click the language switch or the "Got it" button. They serve solely to operate the feature you chose and are technically necessary pursuant to § 25 (2) no. 2 TTDSG (German Telecommunications and Telemedia Data Protection Act); no separate consent is required for them. You can delete these cookies at any time via your browser settings.
The fonts used on this website are hosted locally on our own server. No connection to Google or other font providers is established when the page is loaded.
5. Contacting us
If you contact us by email or phone, we will store the information you provide (e.g. name, contact details, message) in order to process your enquiry and in case of follow-up questions. The legal basis for this is Art. 6 (1)(b) GDPR, insofar as the enquiry relates to a contract or its initiation, and otherwise Art. 6 (1)(f) GDPR, based on our legitimate interest in responding to enquiries.
We do not pass on this data without your consent. The data is deleted once it is no longer required to fulfil its purpose, generally once your enquiry has been fully dealt with, provided no statutory retention obligations apply.
6. Social media
On our website we link to our profiles on Facebook, Instagram and TikTok. These are plain links to the respective platforms; no data is transmitted to the providers merely by including these links. Only once you click one of the links and visit the respective platform does that provider's own privacy policy apply:
- Meta Platforms Ireland Limited (Facebook, Instagram)
- TikTok Technology Limited (TikTok)
7. Google reviews and directions
On our site we link to our Google Maps listing (for directions) and to the option of leaving us a review via Google. Clicking one of these links takes you away from our website to Google (Google Ireland Limited or Google LLC, as applicable), where Google's own privacy policy applies. We do not transmit any personal data as part of this.
8. Your rights as a data subject
You have the following rights with respect to us regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent given (Art. 7 (3) GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The supervisory authority responsible for us is the Saxon Data Protection Commissioner (Sächsischer Datenschutzbeauftragter).
9. Currency and amendment of this privacy policy
This privacy policy is currently valid (as of: September 2026). It may become necessary to amend this policy as we develop our website further or due to changes in legal requirements. The current version of this privacy policy can always be found on this page.