Privacy Policy

Last updated: January 2026

We appreciate your interest in our website. Protecting your personal data is important to us. Below we explain which data we process, for what purposes, and what rights you have.

1. Controller

Cafe Factory
Forstenrieder Allee 61
81476 Munich
Phone 089 143 36 866
Email info@fac-tory.com

2. General Information on Data Processing

We process personal data only where necessary, for example to provide the website, to communicate with you, or to comply with legal obligations.
The legal basis is in particular Article 6(1) GDPR.

3. Access Data / Server Log Files

When you visit our website, information is automatically collected by the hosting provider (e.g. IP address, date and time of access, pages accessed, referrer URL, browser type, operating system).
Purpose: technical operation, stability, and security of the website.
Legal basis: Article 6(1)(f) GDPR (legitimate interest).
Retention period: according to the hosting provider’s specifications.

4. Cookies and Consent Management (Complianz)

Our website uses cookies. Technically necessary cookies are required for the operation of the website.
Other cookies (e.g. statistics or marketing cookies) are only used with your explicit consent.
We use a consent management tool (Complianz) to manage your choices. You can give, withdraw, or adjust your consent at any time.

Legal bases:
- Article 6(1)(c) GDPR (legal obligation)
- Article 6(1)(f) GDPR (operation and security of the website)
- Article 6(1)(a) GDPR (consent) for optional cookies

5. Contact

If you contact us by email, phone, or via a contact form, we process your information to handle your request.

Processed data may include:
- Name
- Email address
- Phone number
- Message content

Legal bases:
- Article 6(1)(b) GDPR (pre-contractual measures)
- Article 6(1)(f) GDPR (legitimate interest in communication)

Your data will be deleted after your request has been fully processed, provided there are no statutory retention obligations.

6. Google Reviews (Google Reviews Widget)

Our website may include content from Google Reviews (e.g. via a widget). When such content is loaded, personal data (e.g. IP address, technical information) may be transmitted to Google.
This content is only loaded after you have given your consent via the consent tool.

Legal basis:
- Article 6(1)(a) GDPR (consent).

Without your consent, these contents will not be loaded.

7. Data Recipients

Personal data is only shared where necessary (e.g. hosting providers) or where consent has been given.

8. Third-Country Transfers

Personal data is transferred to third countries only where legally permitted and where appropriate safeguards exist (e.g. standard contractual clauses) and, where required, with your consent.

9. Data Retention

Personal data is stored only for as long as necessary for the respective purposes or as required by law.

10. Your Rights

You have the right to:

  • Access (Article 15 GDPR)
  • Rectification (Article 16 GDPR)
  • Erasure (Article 17 GDPR)
  • Restriction of processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Object to processing (Article 21 GDPR)
  • Withdraw consent at any time (Article 7(3) GDPR)
  • Complaint with a supervisory authority (Article 77 GDPR)

You also have the right to lodge a complaint with a supervisory authority.

11. Supervisory Authority

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27 (Schloss)
91522 Ansbach
https://www.lda.bayern.de

12. Updates to This Privacy Policy

We reserve the right to update this privacy policy if legal requirements change or if our website is modified.