Privacy Policy

1. Data controller
Mr.MATCHA (sole trader)
Parkweg 120b, 9727 HC Groningen, Netherlands
Email: hallo@mrmatcha.de
Telephone: +31 (0)50-7440055

2. Hosting & server logs
We host our website with an external service provider. When you visit the pages, server logs (e.g. IP address in truncated form, date/time, URL accessed, referrer, user agent) are automatically processed to ensure secure and stable operation. Legal basis: Article 6(1)(f) of the GDPR (legitimate interest in stability, security and error analysis). The data is generally stored for a short period and then deleted.

3. Contact form & communication
Purpose: Processing of B2B enquiries (catering, retail, wholesale, wellness/spas). Mandatory fields: Company, contact person, email, telephone, country, message; additionally, consent to data processing (checkbox) and CAPTCHA. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in efficient communication). Retention period: until your enquiry has been fully processed or, at the latest, in accordance with statutory retention obligations.

4. Newsletter (Klaviyo)
We offer a B2B newsletter (double opt-in). Provider: Klaviyo. Legal basis: Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time with future effect (unsubscribe link in every email). As part of data processing on behalf of the controller, data (e.g. email address, preferences) is transferred to Klaviyo.

5. Cookies & Consent Management
We use a consent tool that allows you to make a selection regarding cookies and similar technologies. Categories: Essential, Functional, Statistics/Marketing. Legal basis for essential cookies: Art. 6(1)(f) GDPR (legitimate interest in a functional website). For statistics/marketing cookies, we process data only with your consent (Art. 6(1)(a) GDPR). You can change your selection at any time in the cookie settings.

6. Web analytics – Google Analytics (GA4)
We use Google Analytics (GA4) to analyse the use of our website on a pseudonymised basis. This involves the use of cookies and similar technologies (only with consent). The following data, among others, is processed: page views, interactions, approximate location, browser/device, referrer URL. IP addresses are generally truncated (IP anonymisation). Legal basis: Article 6(1)(a) GDPR (your consent). You can withdraw your consent at any time via the cookie settings.

Data transfers to third countries: Data may be transferred to the USA. We use the Standard Contractual Clauses (SCCs) provided by Google for this purpose in accordance with Article 46 of the GDPR. Further information can be found in Google’s privacy policy.

7. Recipients & Data Processing
We use service providers who process data on our behalf (e.g. hosting providers, newsletter services, analytics services). Data processing agreements have been concluded with these providers in accordance with Article 28 of the GDPR.

8. Retention period
Personal data will be deleted as soon as the purpose of the processing no longer applies and there are no conflicting legal retention obligations. For Google Analytics, the retention periods selected by us within the GA4 account apply.

9. Your rights
You have the rights to access, rectification, erasure, restriction of processing, data portability and objection (Article 21 GDPR). Where processing is based on your consent, you may withdraw this at any time with effect for the future.

10. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

11. Changes to this privacy policy
We reserve the right to update this privacy policy to adapt it to changes in the legal situation or to changes in the scope of our services.