1.Responsible

Thamm Catering GmbH
Pascalstraße 13–14
10587 Berlin
Deutschland

Owner: Matthias Thamm
Phone: 030 65839897
Mobile: 0176 60770485
E-Mail: info@thamm-catering.de
Requests: anfrage@thamm-catering.de
Website: www.thamm-catering.de

2. General Information on Data Processing

We take the protection of your personal data very seriously. We process personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Personal data is any data that can be used to identify you personally.

The GDPR requires that data subjects be informed during data collection, particularly regarding controllers, purposes, legal bases, recipients, storage duration, and their rights. (General Data Protection Regulation (GDPR))

3. Hosting and Server Log Files

When you visit our website, the provider of the pages automatically collects and stores information in so-called server log files. These include, in particular:

• IP address
• Date and time of the request
• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer

Processing is carried out for the technically error-free provision of the website and to ensure stability and security on the basis of Art. 6 Para. 1 lit. f GDPR. The GDPR permits processing if it is necessary to protect legitimate interests, provided that the overriding interests of the data subject do not conflict. (General Data Protection Regulation (GDPR))

Hosting provider: [Insert name, address and, if applicable, country of the hosting provider]

If a data processing agreement has been concluded with the hosting provider, processing is carried out on the basis of Art. 28 GDPR.

4. Contact Form and Contact via E-mail or Telephone

If you contact us via contact form, e-mail, or telephone, we process your details to handle your inquiry and in case of follow-up questions. In particular, the following data may be processed:

• Name
• E-mail address
• Telephone number
• Event date
• Event location
• Type of event
• Number of people
• Your message

Insofar as your inquiry is directed towards the conclusion of a contract or pre-contractual measures, processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR.

Otherwise, it is carried out on the basis of our legitimate interest in the efficient processing of incoming inquiries in accordance with Art. 6 Para. 1 lit. f GDPR. (General Data Protection Regulation (GDPR))

The data you send to us will remain with us until the purpose for data storage no longer applies, you request us to delete it, or statutory retention obligations prevent deletion.

5. Cookies and Consent Management

Our website uses cookies and similar technologies. Some of these are technically necessary, while others serve the purposes of analysis, reach measurement, personalization, or advertising.

According to § 25 TDDDG, the storage of information in terminal equipment or access to it is generally only permitted with consent, unless a technically necessary exception applies. For the subsequent processing of personal data, an additional legal basis under Art. 6 GDPR applies. (Gesetze im Internet)

Technically necessary cookies are set on the basis of Art. 6 Para. 1 lit. f GDPR.

Analysis, statistics, and marketing cookies, as well as comparable technologies, are only used on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. You can revoke this consent at any time with effect for the future. (Gesetze im Internet)

Consent tool / cookie banner used: [Insert name of the cookie banner, e.g., Usercentrics, Borlabs, Complianz, Cookiebot]

The consent tool stores your selection in order to document your consent or rejection in a traceable manner.

6. Google Analytics

Insofar as you have given your consent, we use Google Analytics, a web analysis service from Google. Google Analytics uses cookies or comparable technologies that enable an analysis of your use of the website.

According to its own information, Google Analytics processes first-party cookies, device/browser-related data, IP addresses, and activities on the website to create statistics on user interactions.

Google also points out that international data transfers may take place for certain configurations. (Google Help)

Use is based exclusively on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. (General Data Protection Regulation (GDPR))

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

A transfer of data to the USA cannot be ruled out. Google LLC is listed in the EU-U.S. Data Privacy Framework. (dataprivacyframework.gov)

You can revoke your consent at any time via our consent tool.

7. Meta Pixel / Facebook Ads

Insofar as you have given your consent, we use the Meta Pixel on our website to measure the effectiveness of our advertising measures on Facebook and Instagram and to create target groups for advertising.

When using Meta Business Tools, personal data may be transmitted to Meta.

Meta refers to a Global Data Transfer Addendum in its Business Tools Terms; Meta also provides Data Processing Terms. Meta Platforms, Inc. is also listed in the EU-U.S. Data Privacy Framework. (Facebook)

Processing is based exclusively on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TDDDG. (General Data Protection Regulation (GDPR))

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland

You can revoke your consent at any time with effect for the future.

8. Google Maps

Google Maps may be integrated on our website to display our location.

When using Google Maps, personal data, in particular your IP address or technical usage data, may be transmitted to Google.

Google Maps Platform describes its own GDPR support for its services. (Google Maps Platform)

The integration of Google Maps is only based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR and, insofar as information on your terminal device is accessed, additionally on the basis of § 25 Para. 1 TDDDG. (General Data Protection Regulation (GDPR))

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

A data transfer to the USA cannot be ruled out. Google LLC is listed in the EU-U.S. Data Privacy Framework. (dataprivacyframework.gov)

9. Social Media Presence on Facebook and Instagram

We maintain publicly accessible profiles on Facebook and Instagram to communicate with interested parties, customers, and business partners and to provide information about our services.

When visiting our social media pages, personal data is processed not only by us but also by the respective platform operators.

Meta explains in its privacy policy how information is collected, used, shared, stored, and transferred. (Facebook)

Processing is carried out on the basis of our legitimate interest in professional external presentation and communication in accordance with Art. 6 Para. 1 lit. f GDPR.

Insofar as consent is requested by the platform operator, processing is based on Art. 6 Para. 1 lit. a GDPR. (General Data Protection Regulation (GDPR))

10. Instagram Feed / Social Plugins

If content from Instagram or Facebook is directly integrated on our website, a connection to the servers of the respective provider may be established when the corresponding page is accessed.

In the process, IP addresses, browser data, and usage data in particular may be transmitted to the provider.

Such external integrations should only be loaded on the basis of prior consent if this triggers non-necessary access to terminal devices or data transfers.

The legal basis is then Art. 6 Para. 1 lit. a GDPR in conjunction with § 25 Para. 1 TDDDG. (General Data Protection Regulation (GDPR))

11. WhatsApp Contact

If you contact us via WhatsApp, we process your telephone number, your name, your message, and any other content you transmit to handle your request.

WhatsApp points out that this is communication with a company; furthermore, users can block companies or set preferences.

According to the WhatsApp Business Messaging Policy, companies must provide the necessary notices, consents, and a published privacy policy. (WhatsApp Business)

Depending on the content of your inquiry, processing is carried out on the basis of Art. 6 Para. 1 lit. b GDPR or Art. 6 Para. 1 lit. f GDPR. (General Data Protection Regulation (GDPR))

Provider: WhatsApp Ireland Limited or WhatsApp LLC

A transfer to third countries, in particular the USA, cannot be ruled out. WhatsApp LLC refers to certification in the EU-U.S. Data Privacy Framework. (WhatsApp.com)

12. Newsletter

If you subscribe to our newsletter, we process the e-mail address you provide and any other voluntary information to regularly send you information about our services, offers, and events.

The newsletter is sent exclusively on the basis of your consent in accordance with Art. 6 Para. 1 lit. a GDPR.

Consent can be revoked at any time with effect for the future, for example via the unsubscribe link in the newsletter or by sending a message to us. (General Data Protection Regulation (GDPR))

Newsletter provider: [Insert name and address of the provider, e.g., Mailchimp, Brevo, CleverReach]

If you use Mailchimp: Mailchimp states that it is certified under the EU-U.S. Data Privacy Framework and additionally uses Standard Contractual Clauses in its Data Processing Addendum. (Mailchimp)

We store your data until you unsubscribe from the newsletter or until the purpose no longer applies.

13. Applications

If you send us an application, we process the personal data you transmit exclusively for the purpose of conducting the application process.

This includes, in particular:

• Name
• Contact details
• Application documents
• Curriculum vitae
• Certificates
• Other information provided by you

In Germany, § 26 BDSG additionally applies to employee data. According to this, personal data of employees may be processed if this is necessary for the decision on the establishment of an employment relationship. (Gesetze im Internet)

The legal basis is therefore Art. 6 Para. 1 lit. b GDPR in conjunction with § 26 BDSG, and in the case of voluntary additional information, possibly also your consent in accordance with Art. 6 Para. 1 lit. a GDPR. (General Data Protection Regulation (GDPR))

If no employment relationship is established, your documents will be deleted after the application process has been completed, provided that no statutory retention obligations or legitimate interests prevent deletion.

14. Recipients of Data

Your personal data will only be passed on if this is permitted by law. Recipients may include, in particular:

• Hosting providers
• Website service providers
• Analysis and marketing service providers
• Newsletter service providers
• IT and communication service providers
• Tax consultants, legal advisors, or other processors

Insofar as we use service providers, this is done, where applicable, on the basis of a data processing agreement.

15. Storage Duration

We store personal data only as long as is necessary for the respective processing purposes or as long as statutory retention obligations exist.

If the data is no longer required for the purpose for which it was collected and there are no conflicting retention obligations, it will be deleted.

16. Your Rights

Under the GDPR, you have the following rights in particular:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to revoke granted consent with effect for the future

The right to object to direct marketing arises explicitly from Art. 21 GDPR; in the event of an objection, the data may no longer be processed for this purpose.

The Federal Commissioner for Data Protection also explicitly explains this right. (BfDI)

To exercise your rights, an informal notification to us is sufficient, e.g., via e-mail to info@thamm-catering.de.

17. Right to Lodge a Complaint with the Supervisory Authority

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

For Berlin, this is the:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
E-mail: mailbox@datenschutz-berlin.de

18. Status of this Privacy Policy

Status: April 12, 2026