Privacy Policy
TITO Coffee
Last updated: February 2026
1. Data Controller
Simon Tito
Habla Vida Coffee
Schliemannstraße 43
10437 Berlin
Phone: +49 155 67158816
Email: info@titocoffee.de
2. General Information
The protection of your personal data is important to us. Data processing is carried out exclusively in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection regulations (in particular the German Federal Data Protection Act (BDSG)).
3. Purposes and Legal Bases of Processing
We process personal data for the following purposes:
Provision and technical operation of our website
(Art. 6 para. 1 lit. f GDPR – legitimate interest)
Processing inquiries and carrying out pre-contractual measures
(Art. 6 para. 1 lit. b GDPR)
Contract processing (e.g., coffee catering, offers, invoicing)
(Art. 6 para. 1 lit. b GDPR)
Fulfillment of legal obligations (e.g., tax-related retention obligations)
(Art. 6 para. 1 lit. c GDPR)
Web analytics (Google Analytics – only with consent)
(Art. 6 para. 1 lit. a GDPR)
4. Categories of Processed Data
Depending on the use of our website, we process:
Inventory data (name, company, address)
Contact data (email address, telephone number)
Content data (messages in the contact form)
Usage data (pages visited, Access times)
Meta/communication data (IP address, device information)
5. Hosting (DreamHost)
Our website is hosted by the following provider:
DreamHost LLC
417 Associated Rd #324
Brea, CA 92821
USA
DreamHost processes personal data (e.g., IP addresses) to provide the server infrastructure.
Legal basis:
Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and stable operation of the website)
Since DreamHost is a US company, data may be transferred to the USA. This transfer is carried out exclusively on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR (e.g., standard contractual clauses).
6. Server Log Files
When you visit our website, the following data is automatically collected:
IP address
Date and time of access
Browser type and version
Operating system
Referrer URL
Hostname of the accessing computer
This data is used exclusively to ensure smooth operation and IT security.
Legal basis: Art. 6 para. 1 lit. f GDPR
Storage period: generally 7 days
7. Contacting Us (Contact Form / Email / Telephone)
When you contact us, your information will be stored to process your request.
Legal basis:
Art. 6 para. 1 lit. b GDPR (pre-contractual measures)
or Art. 6 para. 1 lit. f GDPR (legitimate interest in communication)
The data will be deleted as soon as it is no longer required for the purpose of processing and there are no legal retention obligations.
8. Offer and Contract Processing (Coffee Catering)
As part of offer and contract processing, we process the following data in particular:
Contact person data
Event data
Billing address
Payment information
Legal basis:
Art. 6 para. 1 lit. b GDPR (performance of a contract)
Art. 6 para. 1 lit. c GDPR (statutory retention obligations)
Retention:
Data relevant under tax and commercial law is generally stored for 10 years.
9. Google Analytics
This website uses Google Analytics, a web analytics service provided by:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
Google Analytics uses cookies, which enable an analysis of website usage. The information generated may be transmitted to Google servers in the USA.
We use Google Analytics exclusively with activated IP anonymization.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent via cookie banner)
You can withdraw your consent at any time via the cookie tool.
Further information:
https://policies.google.com/privacy
Optional browser plugin for deactivation:
https://tools.google.com/dlpage/gaoptout?hl=de
Storage period for usage data: generally 14 months.
10. Integration of external content (specified and legally compliant)
We integrate the following external content:
a) Google Fonts
Google Fonts are hosted locally on our server.
No connection to Google servers is established when the website is accessed.
Therefore, no IP address is transmitted to Google.
Legal basis: Art. 6 para. 1 lit. f GDPR
(Note: If Google Fonts is not hosted locally, explicit reference to data transfer to a third country and consent would be required. Local hosting is strongly recommended.)
b) Social Media Links
Our website contains links to our social media profiles (e.g., Instagram, LinkedIn).
No data is automatically transferred to these providers when you visit our website.
11. Social Media Fan Pages – Joint Controllership (ECJ C-210/16)
We maintain company profiles on:
Instagram (Meta Platforms Ireland Ltd.)
LinkedIn
12. Transfers to Third Countries – Transparency pursuant to Art. 13 para. 1 lit. f GDPR
The following providers may process data outside the EU/EEA:
Service
Third Country
Guarantee
DreamHost
USA
SCC pursuant to Art. 46 GDPR + TIA
Google Analytics
USA
EU-US Data Privacy Framework or SCC
Meta (Instagram/Facebook)
USA
EU-US Data Privacy Framework or SCC
USA
EU-US Data Privacy Framework or SCC
Details regarding the safeguards used can be provided upon request.
13. Cookies
Our website uses cookies.
Technically necessary cookies:
Art. 6 para. 1 lit. f GDPR
Analytics cookies (Google Analytics):
Only with your consent pursuant to Art. 6 para. 1 lit. a GDPR
You can manage or disable cookies at any time via your browser or the cookie banner.
14. WordPress & Elementor
Our website is based on WordPress and built with Elementor. Technically necessary data (e.g., IP address) may be processed to display content correctly.
Legal basis: Art. 6 para. 1 lit. f GDPR.
15. Disclosure to third parties
Personal data is only disclosed if necessary, e.g., to:
Tax advisors / Accounting firms
Banks / Payment service providers
IT and hosting providers (data processors pursuant to Art. 28 GDPR)
Disclosure only occurs within the framework of legal requirements.
16. Transfers to Third Countries
If data is processed outside the EU/EEA (e.g., the USA), this will only occur under the conditions of Articles 44 et seq. GDPR (e.g., standard contractual clauses or an adequacy decision).
17. SSL/TLS Encryption
This website uses SSL/TLS encryption for security reasons. You can recognize this by the “https://” in your browser’s address bar.
18. Your Rights
You have the following rights under the GDPR:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent (Art. 7 para. 3 GDPR)
To exercise your rights, please contact us at:
info@titocoffee.de
19. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
The supervisory authority in your federal state is usually responsible.
20. Current status of this privacy policy
This privacy policy is current as of February 2026.