Privacy notice

1. Controller

The controller is As It eats in Heaven GbR, Ruhrorterstraße 53, 47059 Duisburg, Germany. Contact: asiteatsinheaven@gmail.com.

2. Website visits and server logs

When you visit this website, the hosting provider processes connection data needed to deliver and protect the site. This may include your IP address, time of request, requested page, referrer, browser and device information, and status messages. We use this data to operate the website securely and reliably. The legal basis is Article 6(1)(f) GDPR (legitimate interests). Data is deleted when it is no longer needed for this purpose; security logs may be kept longer when investigating a specific incident.

3. Umami Cloud – audience measurement

We use Umami Cloud, provided by Umami Software, Inc., to measure page views, traffic sources and referrers, and selected clicks on contact and event links. Depending on the visit, data may include page URL and title, referrer and campaign details, timestamp, browser, operating system, device and language settings, and approximate location. Network information may be processed temporarily for transmission, security and approximate location. We do not send names, email addresses, phone numbers or message contents as click-event data. Umami says its standard tracker does not use cookies; we do not use user IDs, session replay or heatmaps. The legal basis is our legitimate interest in measuring site reach and understanding which contact and event links are used (Article 6(1)(f) GDPR). Retention depends on our Umami Cloud plan and account settings. Umami acts as our processor under its data processing agreement; the agreement and current subprocessors are listed at umami.is/dpa and umami.is/subprocessors. Depending on the service infrastructure, processing may take place in the United States; the agreement provides EU Standard Contractual Clauses for restricted transfers.

4. Cookies and consent

Under the current website configuration, we do not use optional advertising or marketing cookies. The Umami standard tracker is described by its provider as cookie-free. If we add services that store information on or access information from your device, we will ask for consent beforehand where the law requires it.

5. Contact through external services

This website links to WhatsApp, Instagram and Eventbrite. When you open one of these services, you leave our website and the provider processes data under its own privacy information. We do not embed these services as feeds, maps or checkout tools. A message sent through WhatsApp or Instagram goes directly to the provider you chose.

6. Eventbrite events and fonts

We retrieve upcoming event information server-side through the Eventbrite API. Your browser does not send your IP address to Eventbrite through an API request. If you click an Eventbrite link, Eventbrite’s privacy information applies. The fonts are served through Next.js and included locally when the website is built; your browser does not request them directly from Google.

7. Your rights

Subject to legal conditions, you may request access, correction, erasure, restriction of processing and data portability. Where we rely on legitimate interests, you may object on grounds relating to your particular situation. You may also lodge a complaint with a data protection supervisory authority.

8. Changes to this notice

We update this notice when the website, the services we use or legal requirements change.

Contact and supervisory authority

As It eats in Heaven GbR

Ruhrorterstraße 53 47059 Duisburg, Germany

Email: asiteatsinheaven@gmail.com

Supervisory authority in North Rhine-Westphalia: State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia