Privacy Policy Online-Shop

We are delighted that you are interested in our company and products. Protecting your personal data is an important concern to us. We would therefore like to use this privacy policy to inform you about the nature of personal data and how and for which purpose it is used by Culinario Mortale – Kauffmann, Bischoff & Otani GbR in accordance with the requirements of the General Data Protection Regulation (GDPR) when running the online shop located at “www.culinario-mortale.co.uk” (hereafter referred to as “website” or “service”).

If you use our digital offer at https://online.culinario-mortale.co.uk, you can find the corresponding privacy policy at https://online.culinario-mortale.co.uk/privacy-policy.

Personal data is always processed in accordance with the General Data Protection Regulation and in accordance with the national data protection regulations applicable to us. If using a product or service on our online shop should require personal data to be processed, this will be done either on a legal basis or by asking for your consent.

We have taken appropriate technical and organisational measures to protect your data and its confidentiality, availability and integrity. Furthermore, we have reviewed the service providers commissioned by us and contractually obliged them to ensure a comparably appropriate level of protection. 

1. Definition of Terms

Our Privacy Policy uses the terms as defined in the General Data Protection Regulation (Article 4 GDPR).

2. Name and Address of the Controller

The body responsible for collecting, processing and using your personal dataThe body responsible for collecting, processing and using your personal data as defined by the General Data Protection Regulation is:

Bischoff, Kauffmann & Otani GbR
Württembergallee 29
14052 Berlin
Germany

Represented by the managing directors:
Florian Norbert Bischoff, Jens Kauffmann, Takeshi Otani

Tel.: +49 (0) 30 25 29 21 51
Email: mail@culinario-mortale.co.uk
Website: www.culinario-mortale.co.uk

3. Data protection officer

Bischoff, Kauffmann & Otani GbR has not appointed a data protection officer and is not legally obliged to do so. Since data protection is an important concern for us, you are welcome to contact the managing directors in matters of data protection, who will handle your request with priority and competence.

4. Category and Purpose of Data Processing

We process your personal data to inform you about our murder mystery games, to enable you to purchase our products, to provide you with assistance and support and, if requested, to contact you for other purposes. We also process your personal data to make our website available in the first place and to operate our services securely and efficiently. We process your personal data exclusively for these purposes.

Our website uses cookies and tracking technologies. Cookies are small text files that are stored on your device and that are used to reconstruct settings and other changes you have already made during your next visit. 

We distinguish between essential and non-essential cookies. You have the possibility to block the setting of cookies in your browser and to delete already set cookies. In this case, it is possible that certain features on the site will no longer function or will only function to a limited extent.

Upon visiting our site, we give you the opportunity to set your privacy preferences and to consent to or decline the use of non-essential cookies, tracking technologies and data processing. Your preferences and consent are stored in a technically necessary cookie (borlabs cookie). If you wish to revoke your consent, you can simply delete the said cookie in your browser. When you reload the website, you will be asked again for your consent.

Alternatively, you can also manage your consent and privacy settings by clicking on the button below:

Manage your privacy settings

We store your personal data only until the purpose of storing them has been fulfilled or if this is required due to legal obligations. If the purpose of the storage is fulfilled or has ceased to exist and all legal retention periods have expired, we will delete the stored data.

4.1 Security and availability of our service

In order to make our website available and to enable basic functionality, it is technically necessary to process personal data. For example, upon connection of your device to the servers where our website is hosted, the IP address of your device, its device id, operating system and browser version are automatically processed to ensure a secure connection.

This data may also be sent to servers in third countries, depending on the location from which you access our website. Your data will only be sent to third countries that have been confirmed by the European Commission as having an adequate level of data protection and whose national legislation guarantees a level of protection of personal data comparable to that provided by EU law.

Essential cookies are set on the device you use to access our website to ensure the basic functionality of our services. The processed data is device-related, but it is possible that it can be used to establish a connection to you. The legal basis for the processing is Art. 6 para. 1 b) GDPR (performance of a contract).

In order to guarantee the security and availability of our services we store IP address, device id, operating system and browser version used by your device, as well as  the date and time of your visit, the website from which you access our services (so-called referrer), your internet service provider (ISP) and the pages you view on our website. 

In order to ensure safe and uninterrupted operation of our services we use a Content Delivery Network (CDN). This is a network of servers that cache content and media in multiple locations around the world. When using our services, a connection is established between your device and the servers of our CDN.

The legal basis for the processing is Art. 6 para. 1 b) GDPR (performance of a contract).

4.2 Analytics

4.2.1 Google Analytics

If you have given your consent as described above, our website uses Google Analytics. This service enables us to track the use of our website by creating reports and thus to adapt our offer to the needs of our users.

Google Analytics sets its own cookies, which usually transfer the collected data to a server in the USA and process it there. 

Data generated and processed by Google Analytics include the IP address used by your device, the date and time of your visit, the browser type and operating system of your device, the website from which you access our website (referrer), your Internet Service Provider (ISP) and the pages you view, including the time spent on the pages.

We use the suffix “_gat._anonymizeIp”, which shortens your IP address by Google and makes it anonymous if the call to our website comes from an EU member state or from a state that is a signatory to the Agreement on the European Economic Area.

If you do not wish your data to be collected by Google Analytics, you will find a corresponding browser plug-in under the following link, with the help of which you can object to processing by Google: https://tools.google.com/dlpage/gaoptout 

Furthermore, you can decline your consent and block the setting of a cookie by Google Analytics as described above or withdraw your consent to tracking by Google Analytics at any time.

The legal basis for the processing is Art. 6 para. 1 a) GDPR (prior consent).

Google Analytics is a service operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

You can find more information about Google’s privacy policy at https://www.google.de/intl/en/policies/privacy/

4.3 Purchase and payment of our products

For the initiation, conclusion, processing and reversal of sales contracts, including any liability and warranty claims that may arise from this, we process your name, billing and delivery address, e-mail address, the details of the order, your selected payment method and payment service provider as well as the IP address used to place the purchase order.

The items that you as a customer have placed in your shopping basket are stored with the help of a cookie (essential cookie).

The legal basis for the processing is Art. 6 para. 1 b) GDPR (performance of a contract).

In order to fulfil your order, we may pass on personal data to the extent necessary to a fulfillment service provider, who carries out the shipment of the goods on our behalf.

The legal basis for the processing is Art. 6 para. 1 b) GDPR (performance of a contract).

Documents subject to retention under tax and commercial law shall be retained in accordance with the statutory retention obligations and deleted after expiry of the retention period. 

The legal basis is the respective tax and commercial law regulations on retention obligations and periods in conjunction with Art. 6 Para. 1 c) DSGVO (compliance with a legal obligation).

For the payment of your order you can choose between different payment service providers, which will then process your personal data as follows:

Paypal

Our online shop offers PayPal as a payment method. PayPal is a payment provider which allows payments to be made using virtual accounts. To pay via PayPal you either log into PayPal using your PayPal account, or use a different payment method that PayPal offers you.

If you select PayPal as a payment method during the order process and complete the purchase, we will transfer your name, email address, order details and IP address to PayPal.

The legal basis for the processing is Art. 6 para. 1 b) GDPR (performance of a contract).

As well as for payment processing, the data transferred also serves credit assessment and fraud prevention purposes. For these purposes, PayPal may transfer your personal data to credit agencies, external service providers or affiliated companies, insofar as this is necessary for the provision of services.

The legal basis for the processing is Art. 6 para. 1 f) GDPR (legitimate interests of the controller).

The PayPal service in Europe is operated by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

Further information on PayPal’s privacy policy can be found at https://www.paypal.com/gb/webapps/mpp/ua/privacy-full

Credit Card

Our online shop offers credit card as a payment method. We process credit card payments using the payment provider Stripe. When paying with credit card, you transfer the card number, expiry date and security code of your credit card to the company Stripe Payments Europe Ltd. 

With the help of a technical procedure the validity of your credit card data is checked and the payment is carried out. We will then receive immediate confirmation of the payment, which will enable us to ship the goods you have ordered straight away.

If you select credit card as a payment method during the order process and complete the purchase, we will transfer your name, email address, order details and IP address to Stripe. Stripe uses a cookie to support the payment processing (essential cookie).

The legal basis for the processing is Art. 6 para. 1 b) GDPR (performance of a contract).

As well as for payment processing, the data transferred also serves credit assessment and fraud prevention purposes. For these purposes, Stripe may transfer your personal data to credit agencies, external service providers or affiliated companies, insofar as this is necessary for the provision of services.

The legal basis for the processing is Art. 6 para. 1 f) GDPR (legitimate interests of the controller).

The Stripe service is operated by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

Further information on Stripe’s privacy policy can be found at https://stripe.com/gb/privacy

4.4 Customer Support

You can contact us by e-mail for customer support. We will display a corresponding e-mail address in appropriate places on the pages of our online shop for this purpose. The personal data you send us when making an e-mail enquiry (e.g. name, e-mail address, telephone number) is used exclusively for the purpose of corresponding with you and will only be processed for the purpose for which you contacted us. 

We also offer additional material for the products we sell. You have the option to download this material from https://www.culinario-mortale.co.uk/support. In order to make use of this option you will need a support code. This code is included with each of our products and is intended to ensure that only owners of our products can make use of this option. Deducing personal data about you based on the support code is neither possible nor intended.

The legal basis for the processing is Art. 6 para. 1 f) GDPR (legitimate interests of the controller).

5. Data Subject Rights

You can assert the following rights. Please send an e-mail to mail@culinario-mortale.co.uk for this purpose. Please note that we must establish and verify your identity in order for you to assert your rights.

5.1 Right to Object

You have the right to object to your data being processed at any time. This right applies prospectively. The data collected up to the point the right was asserted remains unaffected.

5.2 Right to Data Portability

You have the right to request for your data to be transferred from us to another location.

5.3 Right of Access

You have the right to request information about your data.

5.4 Right to Rectification, Erasure or Blocking

You have the right to have your data corrected, deleted or blocked. The latter applies in the event that the legal situation does not permit your data to be deleted.

5.5 Right of Restriction of Processing

You have the right to request that we restrict the processing of your data.

5.6 Right to Complain

You have the right to lodge a complaint with a supervisory authority about the processing of your data.

6. Changes to the Privacy Policy

As the data controller, we reserve the right to modify the privacy policy at any time with regard to applicable data protection regulations. The policy was last modified in July 2020.