1. Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data includes all information that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Nadine Pollex, OCQ - Outdoor Cooking Queen | Owner: Nadine Pollex, Webergasse 7, 73728 Esslingen, Germany, Tel.: +49 (0)711 40 0 40 780, Fax: +49 (0)711 40 0 40 789, Email: [office@o-c-q.com](mailto:office@o-c-q.com). The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2. Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, meaning you do not register or otherwise transmit information to us, we collect only the data that your browser sends to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data transmitted in bytes
• Source/referrer from which you accessed the page
• Browser used
• Operating system used
• IP address used (where applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character sequence “https://” and the padlock symbol in your browser’s address bar.

3. Hosting & Content Delivery Network

For hosting our website and displaying its content, we use a provider that delivers its services either directly or through selected subcontractors exclusively on servers located within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits any unauthorized disclosure to third parties.

Cookies

To make your visit to our website more enjoyable and to enable certain functions, we use cookies—small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (“session cookies”), while others remain on your device for a longer period and allow site preferences to be saved (“persistent cookies”). You can find the storage duration of these cookies in the overview of your web browser’s cookie settings.

If personal data is also processed through individual cookies we use, such processing takes place either in accordance with Art. 6(1)(b) GDPR for the performance of a contract, in accordance with Art. 6(1)(a) GDPR if consent has been given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly, effective design of the site visit.

You can configure your browser to inform you when cookies are set and to decide individually whether to accept them, to exclude the acceptance of cookies for certain cases, or to block them in general.

Please note that refusing cookies may limit the functionality of our website.

Contacting Us

When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected when using a contact form can be seen in the respective form. This data is stored and used exclusively for the purpose of responding to your inquiry and for the technical administration associated with this process.

The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact aims at entering into a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your inquiry has been fully processed. This is the case when the circumstances indicate that the matter has been conclusively resolved and provided that no statutory retention obligations apply.

Use of Customer Data for Direct Advertising

6.1 Subscribing to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory detail required for sending the newsletter is your email address. Providing additional data is voluntary and used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means we will only send you an email newsletter once you have explicitly confirmed that you consent to receiving it. We will then send you a confirmation email asking you to confirm, by clicking a corresponding link, that you would like to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When registering for the newsletter, we store the IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration in order to trace any potential misuse of your email address at a later date. The data collected during newsletter registration is used exclusively for promotional purposes via the newsletter. You may unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned above. After successful unsubscription, your email address will be promptly removed from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use your data in any other way that is legally permitted and about which we inform you in this statement.

6.2 Sending Email Newsletters to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range via email. In this case, we do not require separate consent from you, in accordance with Section 7(3) of the German Unfair Competition Act (UWG). The processing of your data is therefore based solely on our legitimate interest in personalized direct advertising pursuant to Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send any emails.

You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time with effect for the future by notifying the controller mentioned at the beginning. You will only incur transmission costs according to the basic rates. Upon receiving your objection, the use of your email address for advertising purposes will be stopped immediately.

6.3 MailerLite

Our email newsletters are sent via the following provider: UAB “MailerLite”, J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania.

Based on our legitimate interest in effective and user-friendly newsletter marketing, we forward the data you provided when registering for the newsletter to this provider in accordance with Art. 6(1)(f) GDPR, so that they can manage the newsletter dispatch on our behalf.

With your explicit consent pursuant to Art. 6(1)(a) GDPR, the provider also conducts statistical performance analysis of newsletter campaigns using web beacons or tracking pixels in the emails sent. These can measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed but is not merged with other data sources. You may withdraw your consent to newsletter tracking at any time with future effect.
Ihre Einwilligung zum Newsletter-Tracking können Sie jederzeit mit Wirkung für die Zukunft widerrufen.

We have concluded a data processing agreement with the provider to protect our website visitors’ data and to prohibit disclosure to third parties.

Site Functionality

7.1 Instagram Plugins

Our website uses plugins from the social network operated by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interaction with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a “2-click” or “Shariff” solution.

This integration ensures that no connection to the provider’s servers is established when a page containing such plugins is accessed.

Only when you activate the plugins and thereby give your consent to data transmission in accordance with Art. 6(1)(a) GDPR does your browser establish a direct connection to the provider’s servers. In this process, information about your device (including your IP address), your browser, and your page history is transmitted to the provider and may be further processed there, regardless of whether you are logged into an existing user account.

If you are logged into an existing user account on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts. You can withdraw your consent at any time by deactivating the activated plugin through another click. The withdrawal does not affect data already transmitted to the provider.
Sie können Ihre Einwilligung jederzeit widerrufen indem Sie das aktivierte Plugin durch erneutes Anklicken wieder deaktivieren. Der Widerruf hat jedoch keinen Einfluss auf die Daten, die bereits an den Anbieter übertragen wurden.

Data may also be transferred to: Meta Platforms Inc., USA.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits any unauthorized disclosure to third parties.

For data transfers to the USA, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

7.2 Vimeo

This website uses plugins to display and play videos from the following provider: Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA.

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. Certain information, including your IP address, is transmitted to the provider in this process.

If playback of embedded videos is initiated via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.

If you are logged into a user account with the provider during your visit, your data will be directly associated with your account when you click on a video. If you do not wish this association to occur, you must log out of your account before clicking the playback button.

All of the processing activities mentioned above, particularly the use of cookies to read information on the device you are using, take place only if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by disabling this service via the “cookie consent tool” provided on the website.

For data transfers to the USA, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

7.3 Youtube

This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transferred to: Google LLC, USA.

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. Certain information, including your IP address, is transmitted to the provider in this process.

If playback of embedded videos is initiated via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.

If you are logged into a user account with the provider during your visit, your data will be directly associated with your account when you click on a video. If you do not wish this association to occur, you must log out of your account before clicking the playback button.

All of the processing activities mentioned above, particularly the use of cookies to read information on the device you are using, take place only if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by disabling this service via the “cookie consent tool” provided on the website.

For data transfers to the USA, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

7.4 Google Maps

This website uses an online map service offered by the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service used to display interactive maps in order to present geographical information visually. Using this service allows our location to be shown and makes it easier for you to plan your route.

As soon as you access the subpages in which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers. This may also involve transmission to servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this association to your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

The collection, storage, and evaluation of this data takes place in accordance with Art. 6(1)(f) GDPR based on Google’s legitimate interest in displaying personalized advertising, market research, and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google within the scope of using Google Maps, you also have the option to completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps and, therefore, the map display on this website cannot be used afterward.

Where legally required, we have obtained your consent for the above-described processing of your data in accordance with Art. 6(1)(a) GDPR. You may withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please follow the objection procedure described above.

For data transfers to the USA, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further information on Google’s data protection practices can be found here: https://business.safety.google/intl/de/privacy/ https://business.safety.google/intl/de/privacy/

7.5 FontAwesome

This site uses web fonts from the following provider to ensure uniform font display: Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA.

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. Certain information, including your IP address, is transmitted to the provider in this process.

The processing of personal data in the course of connecting to the font provider’s servers only occurs if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by disabling this service via the “cookie consent tool” provided on the website. If your browser does not support web fonts, a standard font from your device will be used instead.

For data transfers to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with the European level of data protection.

7.6 Google Web Fonts

This site uses web fonts from the following provider to ensure uniform font display: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. Certain information, including your IP address, is transmitted to the provider in this process.

Data may also be transferred to: Google LLC, USA.

The processing of personal data in the course of connecting to the font provider’s servers only occurs if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by disabling this service via the “cookie consent tool” provided on the website. If your browser does not support web fonts, a standard font from your device will be used instead.

For data transfers to the USA, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

7.7 Google reCAPTCHA

This website uses the CAPTCHA service provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to: Google LLC, USA.

For the visual design of the CAPTCHA window, the provider uses “Google Fonts,” i.e., fonts loaded from the internet by Google. No additional information is processed beyond what is already transmitted to Google through the ReCaptcha functionality.

The service checks whether an input is made by a natural person or abusively through automated processing, and blocks spam, DDoS attacks, and similar automated harmful actions. To ensure that an action is performed by a human and not an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this data to the provider’s servers for evaluation. Cookies may be used in this process—small text files stored in the browser of the device.

If the processing operations described above are based on cookies, such cookies are only set if you have explicitly given us your consent in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by disabling this service in the “cookie consent tool” provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual responsibility on the internet and preventing misuse and spam in accordance with Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider participates in the EU–U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

7.8 Applications for Job Postings via Email

On our website, we list current job vacancies in a separate section, for which interested candidates may apply by sending an email to the contact address provided.

Applicants must submit all personal data necessary for a thorough assessment, including general information such as name, address, and contact details, as well as performance-related evidence and, where applicable, health-related information. Details regarding the application requirements can be found in the respective job posting.

Upon receipt of an application via email, the data is stored and evaluated exclusively for the purpose of processing the application. If we have follow-up questions, we use either the applicant’s email address or telephone number. Processing is carried out based on Art. 6(1)(b) GDPR (and § 26(1) BDSG where applicable), under which participation in the application process is regarded as initiating an employment contract.

If special categories of personal data within the meaning of Art. 9(1) GDPR (e.g., health data such as information on severe disability) are requested from applicants as part of the application process, processing takes place in accordance with Art. 9(2)(b) GDPR so that we can exercise rights arising from employment law and social security and social protection law and fulfill our related obligations.

Additionally or alternatively, processing of special categories of data may also be based on Art. 9(1)(h) GDPR if it is carried out for purposes of preventive or occupational medicine, assessing the applicant’s working capacity, medical diagnosis, health or social care, or the management of systems and services in the health or social sector.

If an applicant is not selected or withdraws their application early, the transmitted data as well as all electronic correspondence, including the application email, will be deleted no later than 6 months after the corresponding notification. This retention period is based on our legitimate interest in answering any follow-up questions about the application and fulfilling any potential obligations to provide evidence under equal treatment regulations for applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6(1)(b) GDPR (and § 26(1) BDSG where applicable) for the purpose of carrying out the employment relationship.

Tools and Other Services

Cookie Consent Tool

This website uses a “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users upon accessing the site in the form of an interactive interface, allowing them to grant consent for specific cookies and/or cookie-based applications by ticking the corresponding boxes. Through the use of this tool, all cookies and services requiring consent are only loaded if the user provides such consent by selecting the relevant options. This ensures that such cookies are only set on the user’s device when consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as an IP address) is processed for the purpose of storing, assigning, or logging cookie settings, such processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies, and therefore in ensuring a legally compliant design of our online presence.

An additional legal basis for the processing is Art. 6(1)(c) GDPR, as we are legally obligated, as the data controller, to ensure that the use of non-essential cookies depends on the user’s consent.

Where required, we have concluded a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorized disclosure to third parties.

Further information about the operator and the configuration options of the cookie consent tool can be found directly within the corresponding user interface on our website.

Rights of the Data Subject

9.1 The applicable data protection law grants you the following rights (rights of access and intervention) with respect to the processing of your personal data by the controller. The legal basis referenced indicates the respective conditions under which these rights may be exercised:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent pursuant to Art. 7(3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

9.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS RESULTING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING MAY BE PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES.

Duration of Storage of Personal Data

The duration for which personal data is stored depends on the applicable legal basis, the purpose of processing, and—where relevant—any statutory retention periods (e.g., commercial or tax-related retention requirements).

When personal data is processed on the basis of explicit consent pursuant to Art. 6(1)(a) GDPR, the data is stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or pre-contractual obligations pursuant to Art. 6(1)(b) GDPR, such data will be routinely deleted after the retention periods expire, provided the data is no longer required for fulfilling or initiating a contract and/or no legitimate interest on our part exists to continue storing it.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, the data is stored until you exercise your right to object in accordance with Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, the data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise specified in the information provided in this statement regarding particular processing situations, stored personal data will be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.