Privacy Policy

1. Controller

The party responsible for data processing on this website is:

chocosite LLC
3833 Powerline Rd, Suite 201
Fort Lauderdale, FL 33309, USA

EU representative (Art. 27 GDPR):
Dirk Murrnautzky
Phone: +49 173 585 91 00
Email: dirk [at] chocosite [dot] info

2. General information

Protecting your personal data is important to us. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. Personal data is any data with which you can be personally identified.

We do not use external tracking or analytics tools such as Google Analytics or Facebook Pixel. For technical provision and simple internal evaluation, we only use the processing described below.

3. Hosting & server log files

Hosting provider

This website is hosted by:

ALL-INKL.COM - Neue Medien Muennich
Owner: Rene Muennich
Hauptstrasse 68
02742 Friedersdorf
Germany
Web: all-inkl.com
Privacy information: all-inkl.com/datenschutzinformationen

The use of ALL-INKL.COM is based on Art. 6(1)(f) GDPR, our legitimate interest in the secure and efficient operation of this website. We have concluded a data processing agreement with ALL-INKL.COM in accordance with Art. 28 GDPR.

Server log files

When you visit our website, the hosting provider automatically collects information transmitted by your browser. This includes:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address (shortened / anonymized)

This data is not combined with other data sources. Processing serves the technical provision and security of the website (legal basis: Art. 6(1)(f) GDPR). Log files are deleted after 14 days at the latest.

4. Our Own Visitor Analytics

To understand how the site is used, we operate our own privacy-friendly visitor analytics on our own infrastructure. No external analytics providers are involved; no Google Analytics, Facebook Pixel or advertising cookies are used, and no data is passed on to third parties.

What is recorded: the pages viewed and their order, the content sections that became visible within a page and therefore the last section reached, the broad origin of the visit (direct, Google, Bing, Instagram, Facebook, Pinterest, AI services, other), the device class (desktop, tablet, mobile), and the opening and successful submission of the contact form. Not recorded are form contents, your name, email address or IP address; the analytics never receives an IP address and never stores one.

Two randomly generated identifiers for visit and session are stored in your browser's local storage; a session ends after 30 minutes without activity. Individual visitor paths are deleted after no more than 72 hours. Only anonymous daily counters are kept permanently.

Consent: from Germany, the EU/EEA, the United Kingdom and Switzerland, and where the country of origin cannot be determined, we only record after your consent; the notice offers "Reject" and "Accept" as equally weighted options. From other countries, recording takes place without a prior dialogue and can be switched off at any time via "Privacy settings" in the footer. The country is determined exclusively on the server; the IP address is not passed to the analytics. The legal basis is Art. 6(1)(a) GDPR where consent is required, otherwise Art. 6(1)(f) GDPR.

5. Contact form & inquiries

If you contact us via the inquiry form or by email, the data you provide (name, email address, subject and message) will be stored for the purpose of processing your inquiry and possible follow-up questions.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent), which you give by submitting the form.

Storage period: Your inquiry data will be deleted as soon as it is no longer required for the purpose for which it was collected, at the latest after statutory retention periods have expired.

No further transfer to third parties takes place. The data is used exclusively to process your inquiry.

6. Email delivery via Brevo

We use Brevo to send our emails, especially confirmation and reply emails connected with inquiries through the contact form. The provider is Brevo GmbH, Koepenicker Strasse 126, 10179 Berlin, Germany.

In the course of email delivery, name, email address, inquiry content, sending time and technical delivery information may be processed. Brevo processes this data on our behalf so that we can reliably respond to your inquiry by email.

Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR. Where consent is required, processing is based on Art. 6(1)(a) GDPR.

We have concluded a data processing agreement with Brevo in accordance with Art. 28 GDPR. Further information on data protection at Brevo is available at brevo.com/legal/privacypolicy/.

7. Locally Hosted Fonts

This website uses web fonts stored locally on our own server for consistent font rendering. When you access the website, the font files are loaded exclusively from our own server.

No connection to Google servers is established for loading fonts, and no personal data is transmitted to Google in this context.

Legal basis: Art. 6(1)(f) GDPR - legitimate interest in a consistent, fast and privacy-friendly presentation of our website.

8. Link to Instagram

Our website contains a link to our Instagram profile. This is a simple reference. No Instagram content is embedded and no data is transmitted to Instagram unless you actively click the link.

Only after clicking the link do you leave our website and go to Instagram. From that point on, Instagram's privacy policy applies: privacycenter.instagram.com/policy.

9. SSL/TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can recognize an encrypted connection when the browser address line changes from "http://" to "https://" and by the lock symbol in your browser bar.

10. Your rights as a data subject

You have the right at any time to:

• Information about the data stored about you (Art. 15 GDPR)
• Correction of incorrect data (Art. 16 GDPR)
• Deletion of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent you have given (Art. 7(3) GDPR)

To exercise your rights, an informal message to our EU representative is sufficient.

11. Right to lodge a complaint with a supervisory authority

You have the right to complain to a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR). A list of supervisory authorities can be found at edpb.europa.eu/about-edpb/about-edpb/members_en.