Last updated: August 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
 

Braussie Coffee GmbH
Maiglöckchenweg 4
34346 Hann. Münden
Germany
Email: martin@braussiecoffee.com
 

2. General Information on Data Processing

We process personal data exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, names, business contact details, email addresses, IP addresses or information submitted to us via a contact or sample request form.
We process personal data only where there is a legal basis for doing so or where appropriate consent has been given. 
 

3. Hosting and Provision of the Website via Wix

This website is operated using the Wix.com platform.

 

In connection with the provision and technical security of the website, the following data in particular may be processed:

​

• IP address, 

• date and time of access, 

• pages and files accessed, 

• browser type and browser version, 

• operating system used, 

• device information, 

• referrer URL, and 

• technical log and security data.
   

Where processing is necessary for the technical provision and security of the website, it is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and technically error-free operation of our website.
Wix processes personal data of website visitors on our behalf and provides the technical infrastructure for the website.

The provider is, in particular:

Wix.com Ltd.
Yunitsman 5 St.
Tel Aviv
Israel

EU representative:

Wix Online Platforms Limited
1 Grant's Row
Dublin 2 D02HX96
Ireland

Wix may process data within the European Union, in Israel and, where applicable, in other countries. The European Commission has adopted an adequacy decision for Israel. Where personal data is transferred to other third countries, according to Wix such transfers are carried out using the transfer mechanisms and appropriate safeguards provided for under the GDPR.

Further information on data processing by Wix is available in Wix's privacy policy.

4. Contacting Us

If you contact us by email, telephone or through other communication channels, we process the data you provide in order to handle your enquiry.

This may include, in particular:
 

• name, 

• company, 

• business position, 

• email address, 

• telephone number, 

• content of your message, and 

• other information voluntarily provided.
   

Where the enquiry relates to the initiation or performance of a contractual relationship, processing is carried out on the basis of Article 6(1)(b) GDPR, insofar as this provision applies.

In the case of business communication with representatives of a company, processing may additionally be carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in handling business enquiries, communicating with prospective and existing business partners, and conducting our B2B business activities.

5. Contact and Sample Request Forms

Our website allows you to contact us using forms and, in particular, to request information or samples of available coffees.
The following data may be processed:

• first and last name, 

• company or roastery, 

• email address, 

• telephone number, where provided, 

• information regarding the coffees or samples requested, 

• other information entered in the form, and 

• time of the request.
   

The information is used to process your enquiry, check the availability of the requested coffees or samples, contact you and, where appropriate, initiate a business relationship.

The legal basis is Article 6(1)(b) GDPR where the enquiry is aimed at entering into or performing a contract. Otherwise, processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in processing B2B enquiries and communicating with prospective and existing business partners.

Form data submitted through our website is processed via Wix infrastructure and may be stored in our Wix account. 
 

6. Automatic Email Confirmations

After you submit a contact or sample request form, we may automatically send you a confirmation that your enquiry has been received.

For this purpose, we process in particular your email address and the information required for the relevant enquiry.

These messages are used solely to process and confirm your enquiry and do not constitute consent to receive marketing or advertising emails.

Processing is carried out on the basis of Article 6(1)(b) GDPR or Article 6(1)(f) GDPR. 

7. Processing of Customer and Business Partner Data

If an enquiry develops into a business relationship, we process the personal data required for quotations, orders, deliveries, invoicing, payments, customer service and contract administration.

This may include, in particular:
 

• name and business contact details, 

• company and position, 

• billing and delivery information, 

• order and contract data, 

• communication data, and 

• payment and accounting information.
   

Processing is carried out in particular on the basis of Article 6(1)(b) GDPR and for compliance with legal obligations pursuant to Article 6(1)(c) GDPR. 

8. Cookies and Similar Technologies

Our website uses cookies and comparable technologies.

Technically Necessary Cookies

Certain cookies and technical storage mechanisms are necessary to ensure the secure and functional operation of the website.

Where the storage of information on your device or access to information stored on your device is strictly necessary, this is carried out on the basis of Section 25(2) TDDDG.

Where personal data is processed in this context, processing is carried out in particular on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of the website.

Non-Essential Cookies

Non-essential cookies and comparable technologies, particularly those used for analytics, marketing or tracking purposes, are only used after you have given your prior consent through our cookie banner.

The storage of information on or access to information on your device is carried out in this case on the basis of Section 25(1) TDDDG. Subsequent processing of personal data is carried out on the basis of your consent pursuant to Article 6(1)(a) GDPR.

You can withdraw or modify your consent at any time with effect for the future through the cookie settings on our website.

9. Wix and Website Analytics

Where we use Wix analytics functions that evaluate website visitors' usage behaviour beyond technically necessary functions, these functions are only activated after you have provided the relevant consent.

This may include the processing of information relating to page views, duration of use, devices, browsers, approximate origin of access and interactions with the website.

The legal basis is your consent pursuant to Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Consent that has been provided may be withdrawn at any time with effect for the future through the cookie settings.

10. Social Media Profiles and Links to Social Networks

Braussie Coffee maintains corporate profiles on Instagram, Facebook and LinkedIn in order to provide information about our company, our coffees and our business activities and to communicate with customers, prospective customers and business partners.

When you visit or interact with our profiles on these platforms, personal data may be processed both by Braussie Coffee and by the respective platform operator.

This may include, in particular, profile and contact data, messages, comments, interactions as well as usage and device data collected by the respective platform operator.

Where we process personal data ourselves in connection with our social media profiles, this is done primarily for communication with prospective customers and business partners and to present our business activities. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in corporate communications and maintaining our business relationships. Where communication relates to the initiation or performance of a contract, processing may additionally be based on Article 6(1)(b) GDPR.

The respective platform operators may also process personal data for their own purposes, particularly for analytics, personalisation and advertising purposes. We generally do not have full control over the nature and extent of such independent data processing.

Our social media profiles are operated in particular on the following platforms:

Instagram and Facebook
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
LinkedIn

LinkedIn Ireland Unlimited Company
Wilton Plaza
Wilton Place
Dublin 2
Ireland

Further information regarding the processing of personal data and your rights can be found in the privacy policies of the respective providers.

Where our website merely contains a link to one of our social media profiles, visiting our website alone generally does not establish a direct connection to the respective platform. Only when you click the relevant link will you leave our website and establish a connection with the respective provider.
 
11. Recipients of Personal Data

Personal data is disclosed to external recipients only where this is necessary for the purposes described, where there is a legal obligation to do so, or where appropriate consent has been provided.

Recipients or categories of recipients may include, in particular:

​

• Wix as our website and hosting service provider, 

• IT and technical service providers, 

• email and communication service providers, 

• warehousing and logistics service providers where required for an order, 

• payment and banking service providers, 

• tax advisers and other professional advisers, and 

• authorities and public bodies where there is a legal obligation to disclose data.
   

Where service providers process personal data on our behalf, they are engaged in accordance with the requirements of Article 28 GDPR.

12. Transfers of Data to Third Countries

Where personal data is transferred to recipients outside the European Economic Area, such transfers are carried out only in accordance with the requirements of Articles 44 et seq. GDPR.

This may be based, in particular, on an adequacy decision of the European Commission, appropriate safeguards such as the European Commission's Standard Contractual Clauses, or another legally permitted basis.

13. Storage Period

We store personal data only for as long as necessary for the respective processing purposes or for as long as statutory retention obligations apply.

Data relating to general enquiries is generally deleted once the enquiry has been fully processed and there is no further business or legal need to retain the data.

If an enquiry develops into a business relationship, the data may be retained for longer in accordance with statutory commercial and tax retention obligations.

Commercial and business correspondence is generally subject to a statutory retention period of six years. Accounting records are generally subject to a retention period of eight years; certain commercial and tax documents may be subject to retention periods of up to ten years.

After expiry of the applicable retention period, the data will be deleted unless another legal basis exists for its continued storage. 

 

14. Your Rights

Subject to the applicable legal requirements, data subjects have, in particular, the following rights:
 

• Right of access to the personal data we process pursuant to Article 15 GDPR, 

• Right to rectification of inaccurate or incomplete data pursuant to Article 16 GDPR, 

• Right to erasure of personal data pursuant to Article 17 GDPR, 

• Right to restriction of processing pursuant to Article 18 GDPR, 

• Right to data portability pursuant to Article 20 GDPR, 

• Right to object to processing pursuant to Article 21 GDPR, and 

• Right to withdraw consent pursuant to Article 7(3) GDPR.
   

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal.

Right to Object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to such processing.

15. Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

The supervisory authority responsible for our registered office is:

The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Germany

Telephone: +49 (0)511 120-4500
Email: poststelle@lfd.niedersachsen.de

You may also contact any other data protection supervisory authority competent under Article 77 GDPR. 

16. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure.

Our website uses an encrypted HTTPS connection. This helps protect data transmitted between your browser and our website against unauthorised access during transmission.

17. Automated Decision-Making

We do not use decision-making based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.

 
18. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if our website, the services we use or the applicable legal requirements change.

The version currently published on this website shall apply.