Skip to main content Skip to search Skip to navigation

Privacy Policy for the website shop.feinesahnefischfilet.de

This is a translation of our German privacy policy (Datenschutzerklärung) for your convenience. In case of any discrepancies, the German version shall prevail.

Contents

1. Controller and general information
2. Your rights
3. Withdrawal of consent and right to object
4. Visiting our website
5. Cookies and consent management
6. Orders in our web shop
7. Payment processing
8. Shipping and disclosure to event organisers
9. Customer account
10. Online withdrawal
11. Contacting us
12. Newsletter
13. Product recommendations by e-mail to existing customers
14. Links to social networks
15. YouTube videos
16. Meta Pixel

1. Controller and general information

1.1 Below we inform you about the processing of personal data when you use our website and our web shop. Personal data is any data that can be related to you personally, e.g. name, address, e-mail address or user behaviour.

1.2 The controller within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR) is:

True Rebel GmbH
Große Bergstraße 193
22767 Hamburg
Germany
Phone: +49 (0) 176 626 00 196
E-mail: fsf@truerebel.de
Website: https://shop.feinesahnefischfilet.de

1.3 Where we use service providers for individual functions or use your data for advertising purposes, we inform you below in detail about the respective processing operations, the legal bases and the storage period. Service providers acting on our behalf (e.g. for hosting our web shop) have been carefully selected and contractually bound in accordance with Art. 28 GDPR. Our web shop is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, on servers located in Germany.

1.4 To prevent unauthorised access to your data by third parties, the connection to our web shop, in particular the ordering process, is encrypted using TLS.

1.5 You are neither legally nor contractually obliged to provide your data. However, without the data marked as mandatory, we cannot conclude or perform a contract with you.

1.6 We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR. For the credit check carried out by PayPal for the "Pay Later" payment method, see section 7.2.

2. Your rights

2.1 You have the following rights with regard to the personal data concerning you:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent given (Art. 7(3) GDPR)

2.2 To exercise your rights, you can contact us using the contact details stated above.

2.3 You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR). The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit).

3. Withdrawal of consent and right to object

3.1 If you have consented to the processing of your data, you can withdraw this consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.

3.2 Where we base the processing of your data on legitimate interests (Art. 6(1)(f) GDPR), you can object to the processing on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

3.3 You can object to the processing of your data for direct marketing purposes at any time without giving reasons. We will then no longer process your data for this purpose.

4. Visiting our website

4.1 If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server. This data is technically necessary to display our website to you and to ensure its stability and security:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Access status/HTTP status code
  • Amount of data transferred
  • Website from which the request originates
  • Browser, operating system and its interface
  • Language and version of the browser software

4.2 The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website and ensuring its stability and security.

4.3 We store this data with an anonymised IP address for 7 days in so-called log files. After that, we restrict processing; the data is deleted after 4 weeks.

5. Cookies and consent management

5.1 We use cookies and similar technologies on our website. Cookies are small text files that are stored in your browser and through which certain information flows to the body that sets the cookie. Cookies cannot run programs or transfer viruses to your device.

5.2 Types of cookies: Transient cookies (in particular session cookies) are automatically deleted when you log out or close your browser. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can delete cookies at any time in your browser settings.

5.3 Strictly necessary cookies: Some cookies are essential for the operation of our web shop. These include in particular the cookie "JTLSHOP", which we use to store the data of your purchase (e.g. items in the shopping cart, quantity, selected payment and shipping method) during your visit. These cookies are stored on the basis of Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG); the subsequent processing is based on Art. 6(1)(b) GDPR, as it serves to process your order or to carry out pre-contractual measures.

5.4 Cookies and services requiring consent: We only use all other cookies and services, in particular embedded YouTube videos (see section 15) and services for marketing purposes (see section 16), with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

5.5 JTL Consent Manager: To obtain and manage your consent, we use the JTL Consent Manager integrated into our shop system. When you first visit our website, you can choose which services you consent to. Your choice is stored in your browser so that we can take it into account and demonstrate it on future visits. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (demonstrating consent). You can change your choice or withdraw your consent with effect for the future at any time via the privacy settings on our website.

5.6 Overview of the cookies and storage technologies used:

JTLSHOP
Provider: True Rebel GmbH
Purpose: Stores shopping cart, login status and ordering process during your visit
Storage period: End of browser session
Category: Necessary

Consent settings
Provider: True Rebel GmbH (JTL Consent Manager)
Purpose: Stores your choice in the cookie banner
Storage period: Until deleted in your browser or until you change your choice
Category: Necessary

PayPal cookies
Provider: PayPal
Purpose: Secure payment processing and fraud prevention during checkout
Storage period: Depending on the cookie, see PayPal's privacy statement
Category: Functional (selection in the Consent Manager, only during checkout)

YouTube cookies
Provider: Google
Purpose: Playing embedded videos, storing player settings (see section 15)
Storage period: Session up to 6 months
Category: External media (only with consent)

_fbp
Provider: Meta
Purpose: Recognising visitors for advertising on Facebook and Instagram (see section 16)
Storage period: 90 days
Category: Marketing (only with consent)

5.7 You can also set your browser to reject certain or all cookies. Please note that you may then not be able to use all functions of our web shop.

6. Orders in our web shop

6.1 When you place an order in our web shop, we need the following data to conclude the contract and process your order. Mandatory fields are marked separately; all other information is voluntary:

  • First name and surname
  • Billing and delivery address including country
  • E-mail address
  • Payment data
  • Company name (optional)
  • State/region (optional)
  • Phone number (optional)

6.2 We process this data to handle your order, including shipping, payment, invoicing and, where applicable, warranty claims and the reversal of the contract. The legal basis is Art. 6(1)(b) GDPR.

6.3 Your order data is processed and stored in our merchandise management system. Due to commercial and tax law requirements (Section 257 German Commercial Code (HGB), Section 147 German Fiscal Code (AO)), we are obliged to retain your order, address and payment data for six, eight or ten years, depending on the type of document. The legal basis is Art. 6(1)(c) GDPR. Once your order has been processed and the warranty period has expired, we restrict processing, i.e. your data is only used to comply with these legal obligations and is then deleted.

7. Payment processing

7.1 Payment in advance (bank transfer): If you pay in advance, you transfer the invoice amount to our bank account. We process the payment information transmitted by your bank (e.g. name, IBAN, amount, payment reference) to allocate your payment.

7.2 PayPal Checkout: We process all other payment methods (PayPal, credit or debit card, Apple Pay, Google Pay, Pay Later and country-specific payment methods) via PayPal. The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. For this purpose, we transmit the data required for payment (in particular name, address, e-mail address, order number and invoice amount) to PayPal. For the "Pay Later" payment method, PayPal may carry out a credit check. For more information, please see PayPal's privacy statement: https://www.paypal.com/uk/legalhub/privacy-full

7.3 Apple Pay and Google Pay: If you use Apple Pay or Google Pay, data is additionally processed by the respective wallet provider: Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, or Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Their privacy policies also apply.

7.4 The legal basis for the transfer of data to payment service providers is Art. 6(1)(b) GDPR.

8. Shipping and disclosure to event organisers

8.1 We use shipping service providers to deliver our goods. We transmit your name and delivery address to them. We only pass on your e-mail address or phone number if this is necessary for delivery or if you have given your consent. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(a) GDPR respectively.

8.2 When you buy concert tickets, we transmit the necessary data (in particular name, order number and, where applicable, e-mail address) to the respective event organiser if this is necessary for depositing the tickets at the box office, for admission or for handling a cancellation or postponement of a concert. The legal basis is Art. 6(1)(b) GDPR.

9. Customer account

9.1 You can voluntarily create a customer account in which we store your data for future purchases. To create an account, your name, your e-mail address and a password of your choice are required. You log in with your e-mail address and your password. In your customer account you can view and change the data stored about you at any time, view your orders and save items for a later purchase using the "wish list" function.

9.2 The legal basis is Art. 6(1)(b) GDPR.

9.3 You can delete your customer account yourself at any time when you are logged in (https://shop.feinesahnefischfilet.de/Konto). Alternatively, you can send us an e-mail to fsf@truerebel.de and we will delete your customer account for you. The data in your customer account will then be deleted unless statutory retention obligations apply (see section 6.3).

10. Online withdrawal

10.1 If you withdraw from your contract using our online withdrawal form ("Vertrag widerrufen" / "Withdraw from contract"), we process the data provided there (in particular name, order number, e-mail address and your details regarding the withdrawal) together with the date and time of receipt. We use this data to process your withdrawal, to reverse the contract and to send you an acknowledgement of receipt by e-mail.

10.2 The legal basis is Art. 6(1)(c) GDPR in conjunction with Section 356a of the German Civil Code (BGB) (legal obligation to provide the withdrawal function and to acknowledge receipt) and Art. 6(1)(b) GDPR (reversal of the contract).

10.3 We store the data for as long as is necessary for processing and, beyond that, within the scope of statutory retention obligations (see section 6.3).

11. Contacting us

11.1 If you contact us by e-mail, phone or via a contact form, we store the data you provide (your e-mail address, where applicable your name and phone number, and your message) in order to deal with your request.

11.2 Where your request relates to an order or a contract, the legal basis is Art. 6(1)(b) GDPR. Otherwise, the processing is based on our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

11.3 We delete the data as soon as storage is no longer necessary, or restrict processing if statutory retention obligations apply.

12. Newsletter

12.1 If you subscribe to our newsletter, we use your e-mail address and any other data you provide voluntarily (e.g. your first name) to send you regular information about our products, promotions and news by e-mail. The legal basis is your consent (Art. 6(1)(a) GDPR).

12.2 For registration we use the so-called double opt-in procedure: after you sign up, we send you an e-mail with a confirmation link. You will only be added to the mailing list after clicking on this link. In order to be able to prove your registration, we store the time of registration and confirmation as well as your IP address (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR).

12.3 To send the newsletter, we use the service Brevo provided by Brevo SAS, 106 boulevard Haussmann, 75008 Paris, France. Brevo processes your data on our behalf on servers in the EU (Art. 28 GDPR). Brevo also enables us to analyse whether a newsletter was opened and which links in it were clicked. This analysis is based on your consent to receive the newsletter (Art. 6(1)(a) GDPR), which we point out to you when you sign up. For more information, please see Brevo's privacy policy: https://www.brevo.com/legal/privacypolicy/

12.4 You can unsubscribe from the newsletter at any time, e.g. via the unsubscribe link in every newsletter or by e-mail to fsf@truerebel.de. After you unsubscribe, we will remove your e-mail address from the mailing list. We may retain proof of your previous consent until the expiry of the limitation periods.

13. Product recommendations by e-mail to existing customers

13.1 If we have received your e-mail address in connection with an order, we may send you information about our own similar products by e-mail even if you have not subscribed to the newsletter (Section 7(3) German Act against Unfair Competition (UWG)). The legal basis is our legitimate interest in direct marketing (Art. 6(1)(f) GDPR).

13.2 You can object to this use of your e-mail address at any time without incurring any costs other than the transmission costs at the basic rates, e.g. via the unsubscribe link in every e-mail or by e-mail to fsf@truerebel.de.

14. Links to social networks

14.1 On our website we link to the profiles of the band Feine Sahne Fischfilet on Facebook, Instagram, X (formerly Twitter), TikTok and YouTube. These links do not establish a connection to the providers' servers. Only when you click on a link will you be redirected to the respective provider. We have no knowledge of which data the providers then process. For information on this, please see the providers' privacy notices:

15. YouTube videos

15.1 Videos from the YouTube platform may be embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

15.2 The videos are only loaded once you have consented via the JTL Consent Manager (see section 5.5). Only then is a connection to YouTube's servers established. In the process, YouTube receives in particular your IP address and information about which page of our website you visited, and may store cookies in your browser. If you are logged in to YouTube or Google, YouTube can assign this information to your user account. Where possible, we embed videos in privacy-enhanced mode (youtube-nocookie.com).

15.3 The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future in the privacy settings on our website.

15.4 Google also processes data in the USA. The transfer is based on the European Commission's adequacy decision on the EU-US Data Privacy Framework, under which Google LLC is certified. For more information, please see Google's privacy policy: https://policies.google.com/privacy?hl=en

16. Meta Pixel

16.1 Description of processing: With your consent, we use the "Meta Pixel" service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta") on our website. The Meta Pixel allows us to display advertisements on Facebook and Instagram specifically to users who have shown an interest in our offering, e.g. by previously visiting our website. It also allows us to evaluate the effectiveness and reach of our advertising, for example whether users reached our website via an ad. For this purpose, a connection to Meta's servers is established when you visit our website, and Meta may store cookies in your browser. If you are logged in to Facebook or Instagram, Meta can assign your visit to your user account. For us, the data collected is anonymous and does not allow any conclusions to be drawn about your person.

16.2 Purpose: The processing is carried out to display targeted advertising for our own offerings on Facebook and Instagram and to evaluate its effectiveness and reach.

16.3 Legal basis: The processing is based exclusively on your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which we obtain via the JTL Consent Manager (see section 5.5). Your consent is voluntary. We and Meta are joint controllers for the collection and transmission of data to Meta (Art. 26 GDPR); the corresponding agreement can be found at https://www.facebook.com/legal/controller_addendum.

16.4 Storage period and withdrawal: The cookies set by Meta are deleted after up to 90 days, depending on the cookie. You can withdraw your consent at any time with effect for the future in the privacy settings on our website (see section 5.5). In addition, you can set which ads are shown to you in your Facebook or Instagram account at https://www.facebook.com/adpreferences.

16.5 Recipients and transfers to third countries: Meta also processes your data in the USA. The transfer is based on the European Commission's adequacy decision on the EU-US Data Privacy Framework, under which Meta Platforms, Inc. is certified. For more information, please see Meta's privacy policy: https://www.facebook.com/privacy/policy

Last updated: October 2026