Website: https://dragonpizza.de
Business Name: Pizza Dragon
1. Introduction
The protection of your personal data is very important to us.
Pizza Dragon
Hessenring 14A
64572 Büttelborn, Germany
Phone: 06152-9872882
Email: info@dragonpizza.de
If you have any questions regarding data protection, you can contact us using the details above.
2. General Information
We treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR/DSGVO, BDSG) and this privacy policy.
Our website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol in your browser’s address bar and the prefix “https://”.
We only process personal data where this is necessary to:
- operate our website,
- process your orders (takeout, home delivery), or
- Respond to your enquiries.
3. Data Collection on Our Website
3.1 Cookies
We use cookies that are technically necessary for the operation of our website and our online shop (e.g. WooCommerce session cookies, cart cookies, language settings). These cookies are required so that you can place products in the cart and complete an order.
The legal basis for these necessary cookies is Art. 6 (1) lit. b DSGVO (performance of a contract) and Art. 6 (1) lit. f DSGVO (our legitimate interest in a functional website).
For non‑essential cookies (e.g. analytics or marketing cookies such as Google Analytics, Facebook Pixel), we only set them after your explicit consent via our cookie banner. The legal basis in this case is Art. 6 (1) lit. a DSGVO (consent). You can withdraw your consent at any time via the cookie settings.
3.2 Server Log Files
Our hosting provider automatically collects and stores information in so‑called server log files, which your browser automatically transmits to us:
- Date and time of the request
- Visited page/URL
- Referrer URL
- Browser type
This data is processed for technical reasons, to ensure website stability and IT security. The legal basis is Art. 6 (1) lit. f DSGVO (legitimate interest).
3.3 Contact Form / Email Contact
If you contact us via the contact form, email or telephone, we process your details (name, contact data, message content) in order to handle your request.
The legal basis is Art. 6 (1) lit. b DSGVO (pre‑contractual or contractual measures) if your enquiry relates to an order, and otherwise Art. 6 (1) lit. f DSGVO (our legitimate interest in responding to enquiries). We store enquiries only as long as necessary to process them, or in accordance with statutory retention periods.
4. Hosting
Our website is hosted by an external provider. The hosting provider processes data on our behalf to provide a secure and reliable website.
We have concluded a data processing agreement (Auftragsverarbeitungsvertrag) with the hosting provider in accordance with Art. 28 DSGVO.
The legal basis for this processing is Art. 6 (1) lit. f DSGVO (our legitimate interest in a secure and efficient website).
5. Ordering, Customer Accounts & Payment (E‑Commerce)
5.1 Order Processing
When you place an order for takeout or home delivery via our website, by phone, or on-site, we process the following data:
- First and last name
- Delivery or billing address
- Telephone number and/or email address
- Order details (items ordered, price, time, delivery notes)
- Payment information depends on the payment method
This data is required to accept and process your order, deliver your food, and issue invoices.
The legal basis is Art. 6 (1) lit. b DSGVO (performance of a contract).
We store order and invoice data for the duration of statutory tax and commercial retention periods (usually 10 years).
5.2 Guest Checkout & Customer Accounts
You can place orders as a guest or create a customer account.
- Guest: We only store your data for the purposes outlined above and for the statutory retention periods.
- Customer account: We additionally store your login data and order history so you can view previous orders and order more quickly in the future.
The legal basis is Art. 6 (1) lit. b DSGVO (performance of a contract). You can request deletion of your customer account at any time, provided that no statutory retention obligations conflict.
5.3 Payment Providers
Depending on the payment methods offered (e.g. PayPal, credit card via Stripe, etc.), your payment data may be transferred directly to the respective payment provider.
For example:
- PayPal: PayPal (Europe)
- Stripe (if used): Stripe Payments Europe, Ltd.
The legal basis is Art. 6 (1) lit. b DSGVO (contract performance).
Each payment provider is responsible for its own data processing. Please also refer to the privacy policies of the respective providers.
6. Analysis Tools & Marketing
If we use tools such as Google Analytics, Matomo, or Facebook Pixel, this will only take place on the basis of your prior consent via the cookie banner (Art. 6 (1) lit. a DSGVO).
We use these tools, where enabled, to better understand how visitors use our website and to improve our offers and marketing.
You can revoke your consent at any time with effect for the future via the cookie settings.
7. Plugins & External Services
7.1 Maps (e.g. Google Maps)
If we embed map services (e.g. Google Maps) to show our restaurant location, your IP address and possibly further data are transmitted to the provider.
We only load such services if you have given your consent via the cookie banner or actively click on the map. The legal basis is Art. 6 (1) lit. a DSGVO (consent).
7.2 Fonts
To protect your data, we host fonts locally on our own server and do not load Google Fonts from Google servers. Therefore, no IP addresses are transmitted to Google solely for font display.
8. Newsletter
If we offer a newsletter, we will only send it to you if you have explicitly subscribed and confirmed your email address in a double‑opt‑in process.
We store your email address and, if provided, your name to address you personally. You can revoke your consent and unsubscribe at any time via the unsubscribe link in the newsletter or by contacting us.
The legal basis is Art. 6 (1) lit. a DSGVO (consent).
9. Your Rights
Under the GDPR, you have the following rights with regard to your personal data:
- Right of access (Art. 15 DSGVO)
- Right to rectification (Art. 16 DSGVO)
- Right to erasure (Art. 17 DSGVO)
- Right to restriction of processing (Art. 18 DSGVO)
- Right to data portability (Art. 20 DSGVO)
- Right to object to processing (Art. 21 DSGVO), in particular where processing is based on Art. 6 (1) lit. f DSGVO
- Right to withdraw consent (Art. 7 (3) DSGVO) with effect for the future
- Right to complain with a supervisory authority (Art. 77 DSGVO), in particular with the data protection authority responsible for your place of residence or for our place of business.
To exercise your rights, don’t hesitate to get in touch with us using the contact details above.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, services, or legal requirements. The current version is always available at https://dragonpizza.de/privacy-policy