privacy policy

Last updated: 22 September 2026 · Applies to barbereit.de and www.barbereit.de.

1. Controller and contact

Ante Milardovic und Tomislav Milardovic GbR, represented by partners Ante Milardovic and Tomislav Milardovic, Mariendorfer Damm 320, 12107 Berlin. Email: info@barbereit.de, phone: 030 / 741 22 19.

2. Hosting and technical provision

We host this website with IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When a page is accessed, the hosting provider processes technically necessary connection data, particularly the IP address, date and time, requested file, volume of data transferred, browser, operating system and, where applicable, referring page. This enables delivery and secure, stable operation of the website (Article 6(1)(f) GDPR).

According to IONOS, server log files are available for a maximum of eight weeks and IP addresses are anonymised in them. Further information: IONOS – information on log files. Technical service providers process data as required to provide their services. Images, fonts and the calculator are served from our own webspace. No external maps, videos or social media feeds are embedded.

3. Calculator, drink selection and enquiries

Price calculations and drink selection initially take place in your browser. Only when you click “Send enquiry” are your name, email address, optional phone number, event details, message, calculator choices and drink selection transmitted over an encrypted connection to our server at IONOS SE. The entries are checked there and sent to info@barbereit.de using authenticated email delivery. You do not need an email app on your device.

The form does not permanently store enquiry contents on the webserver or write them to its own enquiry logs. They are stored in the business email inbox for processing. In addition, we transfer your name, email address, optional phone number, event details and enquiry text as a case into our catering management system, where we keep quotes, orders and order confirmations. This system is operated by Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA) as a processor under Article 28 GDPR; processing outside the EU cannot be ruled out and is based on the European Commission's standard contractual clauses and the EU-U.S. Data Privacy Framework certification (Articles 45 and 46 GDPR). The hosting provider’s technical server logs are unaffected; see section 2.

To protect against automated enquiries, we use an invisible checking field and a time lock, without an external captcha service. A technically necessary session contains only a random token, timestamps and sending status, not form contents. The session cookie expires when the browser closes; the server-side session expires after no more than 30 minutes and is deleted through regular session cleanup. An additional pseudonymised blocking value used to limit sending frequency contains no enquiry contents and expires after 24 hours. Legal bases: Article 6(1)(f) GDPR and section 25(2), no. 2 TDDDG.

We process your enquiry to prepare a quote and, where applicable, perform a contract under Article 6(1)(b) GDPR; for business contacts and general enquiries, under Article 6(1)(f) GDPR. Recipients are our responsible team, IONOS as hosting and email provider, and Cloudflare as operator of our catering management system. We delete enquiries that do not result in an order once processing is complete and no statutory retention duties or necessary defence of legal claims prevent deletion. Business and tax records subject to retention requirements are kept for the statutory periods, particularly under section 147 AO and, where applicable, section 257 HGB. The checkbox acknowledges that you have read the privacy notice; it does not sign you up for advertising.

If JavaScript is disabled or sending fails, you can use the email link. In that case, your details reach us only when you send the email in your email app. Copied or downloaded enquiry texts remain on your device and can be deleted by you. The WhatsApp link opens that service only when clicked and contains no prefilled personal data. You send any message yourself there; WhatsApp’s privacy terms also apply.

4. Your cookie and analytics choice

Google Analytics is off by default. The Google service loads only after you choose “Allow analytics”. If you decline, our analytics function neither loads Google tags nor sends analytics data to Google. The calculator and enquiry form work independently of your choice.

We store your choice in local browser storage under barbereit_privacy_v1 for 180 days, along with the timestamp and privacy notice version. This necessary storage allows us to apply your choice without asking again on every visit (section 25(2), no. 2 TDDDG; Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR where consent is documented). If you clear browser storage or use a different browser, we will ask again.

Cookie settings

You can use this button or the link of the same name at the bottom of the page to decline at any time and withdraw consent for future processing. We then turn off Analytics, delete Analytics cookies accessible to this website and reload the page. Withdrawal does not affect the lawfulness of processing before withdrawal.

5. Google Analytics 4 – only with consent

For optional usage statistics, we use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal bases are your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG.

We measure page visits, calculator use, review of an estimate, successful enquiry submission and clicks on email, phone and catering links. The “generate_lead” event fires only after the mailserver successfully accepts an enquiry and analytics consent has been given; it does not prove a booking or actual inbox delivery. An email click does not mean a message was actually sent or a booking completed. Our Analytics integration does not send form entries such as names, email addresses, phone numbers, preferred dates, venue addresses or message texts to Google. The contents of the email link are not measured either.

Google processes cookie identifiers, usage events, timestamps and technical browser and device data. The IP address is processed to establish the connection and estimate geographical location. Google states that individual IP addresses of EU users are not logged or stored. We transmit page addresses without query parameters or fragments, and referring websites as domains only. Google Signals, personalised advertising and automatic form-interaction tracking are disabled in our integration. We do not send a User-ID or user-provided advertising data.

User and event data in our Analytics property are retained for two months; automatic renewal on new activity is disabled. They are then removed according to Google’s deletion cycle. Aggregated standard reports are not affected by this retention setting and may remain available for longer.

Processing by Google LLC in the USA is possible. Google LLC is certified under the EU–US Data Privacy Framework; Google also cites standard contractual clauses for other necessary transfers. Transfers take place within the applicable safeguards under Articles 44 onwards GDPR, particularly Article 45 or 46 GDPR. Further information: Google – data transfers, Google privacy policy and Google Analytics – privacy in the EU.

6. Links to other websites

Links, particularly to the Adlermühle catering calculator, lead to separate websites. The destination is accessed only when you click. Its own privacy notices and consent settings apply there.

7. Your rights

Subject to statutory requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You can withdraw consent for the future at any time (Article 7(3)). Please use the contact details above; for Analytics, you can use the cookie settings directly.

Right to object: You can object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation (Article 21 GDPR). You may object to direct marketing at any time.

You can lodge a complaint with a data protection supervisory authority (Article 77 GDPR), particularly the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin. We do not use website data for automated decisions with legal effects or similarly significant effects on you.