Privacy Policy

1. Who We Are

Coffee Heaven GmbH ("Coffee Heaven", "we", "us", "our") is the data controller for the personal information you provide through this website. We are registered in Berlin, Germany. Our registered address is Pariser Platz 1, 10117 Berlin, Germany.

If you have questions about how we handle your data, contact our data protection team at hello@coffeeheaven.com.

2. What Data We Collect

We collect and process the following categories of personal data:

— **Identity Data**: your first name, last name, and title. — **Contact Data**: email address, phone number, and delivery address. — **Transaction Data**: details of products you have purchased and payment history. — **Technical Data**: IP address, browser type, device information, and cookies (see our Cookie Policy). — **Communications Data**: the content of messages you send us via email or the contact form.

We do not collect sensitive personal data such as health information, racial or ethnic origin, or political opinions.

3. How We Use Your Data

We use your personal data for the following purposes:

— To fulfil your orders and manage your account. — To process payments and prevent fraud. — To communicate with you about your orders, queries, and subscription. — To send you marketing communications if you have opted in (you can opt out at any time). — To improve our website through anonymised analytics. — To comply with legal obligations.

We will never sell your personal data to third parties.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

— **Contract**: processing is necessary to fulfil your purchase order or subscription. — **Legitimate Interests**: to improve our services and detect fraud, in a way that does not override your rights. — **Consent**: for marketing emails and non-essential cookies, where you have opted in. — **Legal Obligation**: where we are required to retain data by German or EU law.

5. Data Retention

We retain your data only for as long as necessary for the purposes it was collected:

— Order and transaction records are kept for 10 years in accordance with German commercial law (HGB §257). — Marketing consent records are kept until you withdraw consent. — Support correspondence is retained for 3 years.

After these periods, your data is securely deleted or anonymised.

6. Your Rights Under GDPR

As a resident of the European Economic Area, you have the following rights regarding your personal data:

— **Right of Access**: you may request a copy of the data we hold about you. — **Right to Rectification**: you may ask us to correct inaccurate data. — **Right to Erasure**: you may ask us to delete your data, subject to legal obligations. — **Right to Restriction**: you may ask us to limit how we process your data. — **Right to Portability**: you may request your data in a machine-readable format. — **Right to Object**: you may object to processing based on legitimate interests.

To exercise any of these rights, please contact us at hello@coffeeheaven.com. We will respond within 30 days. You also have the right to lodge a complaint with the Berlin Commissioner for Data Protection (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

7. Data Security

We take the security of your data seriously. We use industry-standard measures including TLS encryption, access controls, and secure hosting to protect your personal information. Despite these measures, no internet transmission is completely secure; we cannot guarantee absolute security.

8. Third Parties

We share your data only with service providers who assist in operating our business — for example, our payment processor, shipping partners, and email delivery service. All third parties are bound by data processing agreements and may only use your data as instructed by us. We do not transfer data outside the EEA without appropriate safeguards.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised effective date. Where changes are significant, we will notify you by email. We encourage you to review this page periodically.