Privacy Policy
This privacy notice applies to the use of our website and informs you, as a data subject within the meaning of data protection law and as a user of this website, about the processing of personal data. Personal data consists of individual details about personal or factual circumstances of a specific or identifiable natural person.
Who are we?
The controller responsible for data protection is:
Casertas Pizza GmbH | Pizzeria Luigi Gesellschaft mit beschränkter Haftung (GmbH)
Represented by: Ana Martins De Oliveira
Address: Dotzheimer Straße 53, 65197 Wiesbaden, Germany
Phone: +49 611 47446
Email: info@pizzeria-luigi.de
Commercial Register: District Court (Amtsgericht) Wiesbaden, HRB 32742
Data Protection Officer: We have appointed a data protection officer. You can reach them at: info@pizzeria-luigi.de
General Information & Cookies
We use cookies on our website. Cookies are small (text) files that are created and stored on your terminal device (e.g., smartphone, notebook, tablet, PC). Most cookies are “session cookies,” which are deleted after your visit ends. In individual cases, however, these cookies provide information to automatically recognize the user again. By means of a “cookie ID,” websites and servers can be assigned to the specific internet browser in which the cookie was stored.
Cookies serve to improve the user-friendliness of our website and to enable a technically error-free and optimized state. If you do not agree to the use of cookies, you can restrict or completely deactivate their use in your browser settings. In the event of restriction or deactivation, the use of this website may be limited.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR, provided the cookies are technically necessary for the provision of our offer. Our legitimate interest follows from the aforementioned purposes for data collection. If we use cookies that are not technically necessary, this only occurs based on your express consent. Some cookies are deleted as soon as you close your browser (transient cookies). Other cookies (persistent cookies) remain on your device and allow us to recognize your browser. These cookies are automatically deleted after a predefined duration.
What access data do we collect?
When you visit our website, we collect the following data for technical reasons regarding every access to the offer:
Name of the retrieved website
IP address of the requesting computer
Date and time of retrieval
Transferred data volume
Browser type and version
Operating system used by the user
Referrer URL (the website from which the user visited this site)
Requesting provider
We collect this data solely for the purpose of enabling you to visit our website. We generally store this data for 90 days, provided no specific retention periods prevent deletion or processing is necessary for other reasons (e.g., law enforcement). Once the reason for processing no longer exists, the data is deleted.
Data Security (SSL/TLS)
This website uses the SSL (Secure Socket Layer) procedure in conjunction with the highest level of encryption supported by your browser (usually 256-bit). If your browser does not support 256-bit encryption, 128-bit v3 technology is used. You can recognize an encrypted transmission by the key or lock symbol in your browser’s status bar. We also use technical and organizational security measures to protect your data against manipulation, loss, or unauthorized access by third parties.
Contact
You can contact us via various communication channels such as email, phone, or post. We store your data for the purpose of processing your inquiry. Data is not passed on to third parties. The processing is based on Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest) or Art. 6 para. 1 sentence 1 lit. b GDPR if the contact aims at concluding a contract. We delete this data once your inquiry is resolved and no legal retention obligations apply.
Borlabs Consent Manager
We use a consent management tool from Borlabs GmbH, Hamburg. This software solution helps us obtain, manage, and document your consent for processing personal data. The tool uses a technically necessary cookie (borlabs-cookie) to store your settings. The cookie itself does not process personal data.
Reviews
If you have given us your express consent according to Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your email address to send you a review reminder. This consent can be revoked at any time by contacting us or Trusted Shops directly.
Google Maps
We use the Google Maps API (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to display interactive maps and our location. Information about your use (including your IP address) is transmitted to Google servers in the USA. If you are logged into a Google account, Google can associate this with your profile. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR. Data processing only occurs if you have previously given consent. Google LLC is certified under the Data Privacy Framework. You can deactivate Google Maps by turning off JavaScript in your browser.
Online Shop
When ordering via our shop, we process data such as name, delivery address, and payment information.
Purpose: Order processing.
Legal Basis: Art. 6 para. 1 sentence 1 lit. b GDPR.
Retention: We store this data until the order is completed and warranty periods have expired, or as required by tax law.
Data Transfer: We share your name and address with transport service providers for delivery purposes (Art. 6 para. 1 sentence 1 lit. b GDPR).
WooCommerce
We use the WooCommerce shop system provided by Aut O’Mattic A8C Ireland Ltd., Dublin.
Data Processing: Data is transmitted to and processed by Aut O’Mattic. This may include processing in the USA, based on Standard Contractual Clauses (Art. 46 GDPR).
Cookies: WooCommerce sets cookies to manage your shopping cart and identification.
Legal Basis: Art. 6 para. 1 lit. f GDPR (legitimate interests).
External Payment Providers
For processing payments, we transfer data to:
PayPal: PayPal (Europe) S.à.r.l. et Cie, S.C.A., Luxembourg. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.
Marketing, Analysis, and Tracking
We use analysis services to improve our website. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR (consent).
Google Analytics 4 (GA4)
This service analyzes website usage. Your IP address is anonymized (“AnonymizeIP”). Google uses this information to evaluate your use of the website and compile reports. You can prevent data collection by using the browser plugin found at: https://tools.google.com/dlpage/gaoptout?hl=en.
Social Networks
We maintain presences on social networks (Facebook, Instagram) to interact with users. These platforms process personal data, often for market research and advertising purposes.
Facebook (Meta): http://de-de.facebook.com/about/privacy
Instagram (Meta): https://help.instagram.com/519522125107875
Your Rights as a Data Subject
You have the following rights regarding your personal data:
Right to withdraw consent
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
Effective Date: Tuesday, January 27, 2026 – 6:27 PM
Made with love in Jena and with the friendly support by Landgraf Datenschutz GmbH.
