Privacy policy
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
FAM Kaffeetechnik GmbH Jagdweg 1–3 01159 Dresden Germany Phone: +49 351 48618817 Email: info(at)fam-kaffeetechnik.de
FAM Kaffeetechnik GmbH Jagdweg 1–3 01159 Dresden Germany Phone: +49 351 48618817 Email: info(at)fam-kaffeetechnik.de
2. General information on data processing
We take the protection of your personal data seriously. Personal data means any information relating to an identified or identifiable natural person, for example your name, email address, telephone number, IP address or information that you provide to us as part of a service request.
We process personal data exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Depending on the processing activity, processing is carried out in particular on the basis of:
• Art. 6(1)(a) GDPR, where you have given us your consent,
• Art. 6(1)(b) GDPR, where processing is necessary in order to take steps at your request prior to entering into a contract or to perform a contract,
• Art. 6(1)(c) GDPR, where processing is necessary for compliance with a legal obligation, or
• Art. 6(1)(f) GDPR, where processing is necessary for the purposes of our legitimate interests or those of a third party and your interests, fundamental rights and freedoms do not override those interests.
We process personal data exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Depending on the processing activity, processing is carried out in particular on the basis of:
• Art. 6(1)(a) GDPR, where you have given us your consent,
• Art. 6(1)(b) GDPR, where processing is necessary in order to take steps at your request prior to entering into a contract or to perform a contract,
• Art. 6(1)(c) GDPR, where processing is necessary for compliance with a legal obligation, or
• Art. 6(1)(f) GDPR, where processing is necessary for the purposes of our legitimate interests or those of a third party and your interests, fundamental rights and freedoms do not override those interests.
3. Hosting and Shopify platform
This website is operated using the Shopify e-commerce platform.
For merchants within Europe, the provider is:
Shopify International Limited Ireland
Shopify provides the technical infrastructure used to make our website available and operate it.
When you visit our website, Shopify may in particular process the following data:
• IP address
• date and time of access
• pages and files accessed
• referrer URL
• browser type and browser version
• operating system
• device information
• language settings
• technical information about use of the website
This processing is necessary in order to provide the website, ensure its stability and security and detect technical errors.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable operation of our online services.
Where data is processed in order to take pre-contractual steps or to perform a contract, processing is additionally based on Art. 6(1)(b) GDPR.
Shopify processes data relating to persons in the European Economic Area initially through Shopify International Limited in Ireland. As part of the technical provision of its services, data may also be transferred to other companies within the Shopify group and to subprocessors used by Shopify.
In this context, personal data may also be processed outside the European Economic Area. For international data transfers, Shopify uses the safeguards provided for by applicable law, in particular adequacy decisions of the European Commission and Standard Contractual Clauses.
Further information on the processing of personal data by Shopify can be found in Shopify’s privacy documentation.
For merchants within Europe, the provider is:
Shopify International Limited Ireland
Shopify provides the technical infrastructure used to make our website available and operate it.
When you visit our website, Shopify may in particular process the following data:
• IP address
• date and time of access
• pages and files accessed
• referrer URL
• browser type and browser version
• operating system
• device information
• language settings
• technical information about use of the website
This processing is necessary in order to provide the website, ensure its stability and security and detect technical errors.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable operation of our online services.
Where data is processed in order to take pre-contractual steps or to perform a contract, processing is additionally based on Art. 6(1)(b) GDPR.
Shopify processes data relating to persons in the European Economic Area initially through Shopify International Limited in Ireland. As part of the technical provision of its services, data may also be transferred to other companies within the Shopify group and to subprocessors used by Shopify.
In this context, personal data may also be processed outside the European Economic Area. For international data transfers, Shopify uses the safeguards provided for by applicable law, in particular adequacy decisions of the European Commission and Standard Contractual Clauses.
Further information on the processing of personal data by Shopify can be found in Shopify’s privacy documentation.
4. Server log files
Each time our website is accessed, technical information is automatically recorded by the web server or by Shopify.
This may include in particular:
• IP address of the accessing device
• date and time of access
• page or file accessed
• amount of data transferred
• referrer URL
• browser type and browser version
• operating system
• internet service provider used
These data are required in order to deliver our website correctly, ensure technical security, detect errors and investigate misuse or attacks on our systems.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and uninterrupted provision of our website.
The data are stored only for as long as necessary for the purposes stated above, unless statutory obligations or security reasons require a longer retention period.
This may include in particular:
• IP address of the accessing device
• date and time of access
• page or file accessed
• amount of data transferred
• referrer URL
• browser type and browser version
• operating system
• internet service provider used
These data are required in order to deliver our website correctly, ensure technical security, detect errors and investigate misuse or attacks on our systems.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and uninterrupted provision of our website.
The data are stored only for as long as necessary for the purposes stated above, unless statutory obligations or security reasons require a longer retention period.
5. SSL/TLS encryption
For security reasons, our website uses SSL/TLS encryption. This is intended in particular to protect confidential content that you transmit to us against access by third parties.
You can recognise an encrypted connection, among other things, by the fact that the address line of your browser begins with “https://”.
You can recognise an encrypted connection, among other things, by the fact that the address line of your browser begins with “https://”.
6. Cookies and similar technologies
Our website uses cookies and similar technologies.
Cookies are small pieces of information that are stored on your device or that enable access to information already stored on your device.
Some of these technologies are technically necessary so that the website and its basic functions can be provided properly.
For example, Shopify may use technically necessary cookies for session management, security, shopping cart functions, language settings or privacy preferences. These may include cookies such as _shopify_essential, _shopify_test, _tracking_consent or localization.
Where the storage of information on your device or access to information already stored there is strictly necessary in order to provide a digital service expressly requested by you, this is based on Section 25(2) no. 2 TDDDG. The subsequent processing of personal data is based in particular on Art. 6(1)(f) GDPR or, where necessary for the performance of a contract or pre-contractual measures, on Art. 6(1)(b) GDPR.
Cookies or similar technologies that are not technically necessary are used only where the required consent has been obtained. In this case, storage or access is based on Section 25(1) TDDDG and the processing of personal data on Art. 6(1)(a) GDPR.
You can withdraw consent at any time with effect for the future via the privacy settings provided on our website.
Cookies are small pieces of information that are stored on your device or that enable access to information already stored on your device.
Some of these technologies are technically necessary so that the website and its basic functions can be provided properly.
For example, Shopify may use technically necessary cookies for session management, security, shopping cart functions, language settings or privacy preferences. These may include cookies such as _shopify_essential, _shopify_test, _tracking_consent or localization.
Where the storage of information on your device or access to information already stored there is strictly necessary in order to provide a digital service expressly requested by you, this is based on Section 25(2) no. 2 TDDDG. The subsequent processing of personal data is based in particular on Art. 6(1)(f) GDPR or, where necessary for the performance of a contract or pre-contractual measures, on Art. 6(1)(b) GDPR.
Cookies or similar technologies that are not technically necessary are used only where the required consent has been obtained. In this case, storage or access is based on Section 25(1) TDDDG and the processing of personal data on Art. 6(1)(a) GDPR.
You can withdraw consent at any time with effect for the future via the privacy settings provided on our website.
7. Contacting us
Our website provides various ways to contact us. In particular, you can contact us by email, telephone or via our contact forms.
When you contact us, we process the personal data you provide in order to handle your enquiry.
This may include in particular:
• name
• email address
• telephone number
• the content of your enquiry that you provide voluntarily
For service, repair or maintenance enquiries, additional information about your coffee machine or grinder may be processed, for example manufacturer, model, description of the fault, requested service, location or other information relating to the service case.
If your enquiry is aimed at entering into a contract or relates to an existing contract, processing is based on Art. 6(1)(b) GDPR.
For general enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to respond to and process enquiries from customers and prospective customers efficiently.
The data you provide will be deleted once your enquiry has been fully dealt with and there are no statutory retention obligations or other legitimate reasons requiring further storage.
If the enquiry results in a business or contractual relationship, statutory retention periods under commercial and tax law may apply.
When you contact us, we process the personal data you provide in order to handle your enquiry.
This may include in particular:
• name
• email address
• telephone number
• the content of your enquiry that you provide voluntarily
For service, repair or maintenance enquiries, additional information about your coffee machine or grinder may be processed, for example manufacturer, model, description of the fault, requested service, location or other information relating to the service case.
If your enquiry is aimed at entering into a contract or relates to an existing contract, processing is based on Art. 6(1)(b) GDPR.
For general enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to respond to and process enquiries from customers and prospective customers efficiently.
The data you provide will be deleted once your enquiry has been fully dealt with and there are no statutory retention obligations or other legitimate reasons requiring further storage.
If the enquiry results in a business or contractual relationship, statutory retention periods under commercial and tax law may apply.
8. Contact forms
Contact forms are available on our website, including forms for private and commercial service enquiries.
When you use a contact form, the data you enter are transmitted to us and processed.
Depending on the form used, this may include in particular your name, email address, telephone number and information about the device, the fault, the requested service or your company.
Mandatory fields are required so that we can process your enquiry. Any additional information is provided voluntarily.
For specific service and quotation requests, processing is based on Art. 6(1)(b) GDPR. For general contact enquiries, processing is based on Art. 6(1)(f) GDPR.
The technical processing and transmission of the form takes place via our Shopify infrastructure.
When you use a contact form, the data you enter are transmitted to us and processed.
Depending on the form used, this may include in particular your name, email address, telephone number and information about the device, the fault, the requested service or your company.
Mandatory fields are required so that we can process your enquiry. Any additional information is provided voluntarily.
For specific service and quotation requests, processing is based on Art. 6(1)(b) GDPR. For general contact enquiries, processing is based on Art. 6(1)(f) GDPR.
The technical processing and transmission of the form takes place via our Shopify infrastructure.
9. hCaptcha
We use hCaptcha to protect our contact forms against automated submissions, spam and misuse.
The provider is:
Intuition Machines, Inc. 1065 SW 8th St #704 Miami, FL 33130 USA
hCaptcha is used to determine whether input on our website is made by a natural person or generated automatically, for example by a bot.
For this purpose, hCaptcha may process various technical and behavioural information. This may include in particular:
• IP address
• date and time of the interaction
• browser type
• device type
• operating system
• interaction data such as mouse movements, scrolling, keyboard input or touch events
The processing is carried out to protect our website and forms against spam, automated attacks, attempted fraud and other misuse.
The legal basis for the processing of personal data is Art. 6(1)(f) GDPR. Our legitimate interest is the security of our website and the prevention of abusive or automated enquiries.
Where hCaptcha stores technically necessary information on your device or accesses information stored there, this is based on Section 25(2) no. 2 TDDDG. If storage or access is not technically necessary, it takes place only after prior consent in accordance with Section 25(1) TDDDG.
Intuition Machines, Inc. processes the data as a processor in connection with the provision of hCaptcha.
Processing of personal data in the United States cannot be ruled out. Intuition Machines, Inc. participates in the EU-U.S. Data Privacy Framework. In addition, Standard Contractual Clauses of the European Commission may be used for data transfers.
Further information on data processing can be found in hCaptcha’s privacy information.
The provider is:
Intuition Machines, Inc. 1065 SW 8th St #704 Miami, FL 33130 USA
hCaptcha is used to determine whether input on our website is made by a natural person or generated automatically, for example by a bot.
For this purpose, hCaptcha may process various technical and behavioural information. This may include in particular:
• IP address
• date and time of the interaction
• browser type
• device type
• operating system
• interaction data such as mouse movements, scrolling, keyboard input or touch events
The processing is carried out to protect our website and forms against spam, automated attacks, attempted fraud and other misuse.
The legal basis for the processing of personal data is Art. 6(1)(f) GDPR. Our legitimate interest is the security of our website and the prevention of abusive or automated enquiries.
Where hCaptcha stores technically necessary information on your device or accesses information stored there, this is based on Section 25(2) no. 2 TDDDG. If storage or access is not technically necessary, it takes place only after prior consent in accordance with Section 25(1) TDDDG.
Intuition Machines, Inc. processes the data as a processor in connection with the provision of hCaptcha.
Processing of personal data in the United States cannot be ruled out. Intuition Machines, Inc. participates in the EU-U.S. Data Privacy Framework. In addition, Standard Contractual Clauses of the European Commission may be used for data transfers.
Further information on data processing can be found in hCaptcha’s privacy information.
10. Processing in connection with service, maintenance and repair requests
If you request or commission maintenance, diagnostics, repairs, installation, consulting, training or another service from us, we process the personal data required for this purpose.
This may include in particular:
• contact details
• communication data
• device and machine data
• fault descriptions
• information on requested services
• appointment and order data
• where applicable, invoice and payment data
Processing is carried out in order to take pre-contractual steps and to perform the respective contract on the basis of Art. 6(1)(b) GDPR.
Where statutory retention obligations apply, further storage is based on Art. 6(1)(c) GDPR.
Depending on the type of document, records relevant under commercial and tax law may be subject to retention periods of six, eight or ten years.
This may include in particular:
• contact details
• communication data
• device and machine data
• fault descriptions
• information on requested services
• appointment and order data
• where applicable, invoice and payment data
Processing is carried out in order to take pre-contractual steps and to perform the respective contract on the basis of Art. 6(1)(b) GDPR.
Where statutory retention obligations apply, further storage is based on Art. 6(1)(c) GDPR.
Depending on the type of document, records relevant under commercial and tax law may be subject to retention periods of six, eight or ten years.
11. Communication by email and telephone
If you contact us by email or telephone, we process the data you provide in order to handle your enquiry.
When communicating by email, it cannot be completely ruled out that data may be processed or accessed by third parties during transmission. For particularly confidential information, we therefore recommend using an appropriate secure method of communication where necessary.
The legal basis depends on the content of the communication. For pre-contractual or contractual enquiries, it is Art. 6(1)(b) GDPR; for other communications, Art. 6(1)(f) GDPR.
When communicating by email, it cannot be completely ruled out that data may be processed or accessed by third parties during transmission. For particularly confidential information, we therefore recommend using an appropriate secure method of communication where necessary.
The legal basis depends on the content of the communication. For pre-contractual or contractual enquiries, it is Art. 6(1)(b) GDPR; for other communications, Art. 6(1)(f) GDPR.
12. Recipients of personal data
As a general rule, we disclose personal data only where there is a legal basis for doing so.
Recipients may include technical service providers and processors used by us, for example Shopify for the operation of our website and Intuition Machines, Inc. for the provision of hCaptcha.
Data may also be disclosed to service providers where this is necessary to process a specific order, or to authorities and public bodies where we are legally required to do so.
Service providers that process personal data on our behalf are, where legally required, bound by appropriate data processing agreements.
Recipients may include technical service providers and processors used by us, for example Shopify for the operation of our website and Intuition Machines, Inc. for the provision of hCaptcha.
Data may also be disclosed to service providers where this is necessary to process a specific order, or to authorities and public bodies where we are legally required to do so.
Service providers that process personal data on our behalf are, where legally required, bound by appropriate data processing agreements.
13. Transfers of data to third countries
When certain service providers are used, personal data may be processed outside the European Union or the European Economic Area.
This applies in particular to parts of Shopify’s infrastructure and to hCaptcha.
Such transfers take place only where the requirements of Art. 44 et seq. GDPR are met.
Relevant safeguards may include in particular an adequacy decision by the European Commission, certification of the relevant recipient under the EU-U.S. Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.
This applies in particular to parts of Shopify’s infrastructure and to hCaptcha.
Such transfers take place only where the requirements of Art. 44 et seq. GDPR are met.
Relevant safeguards may include in particular an adequacy decision by the European Commission, certification of the relevant recipient under the EU-U.S. Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.
14. Retention period
As a general rule, we store personal data only for as long as is necessary for the respective processing purpose.
Once the purpose of processing no longer applies, the relevant data are deleted unless statutory retention obligations, legitimate interests or other legal grounds require continued storage.
For business records, retention periods under commercial or tax law of six, eight or ten years may apply in particular.
Data processed exclusively on the basis of your consent are generally processed until you withdraw your consent, unless another legal basis permits continued processing.
Once the purpose of processing no longer applies, the relevant data are deleted unless statutory retention obligations, legitimate interests or other legal grounds require continued storage.
For business records, retention periods under commercial or tax law of six, eight or ten years may apply in particular.
Data processed exclusively on the basis of your consent are generally processed until you withdraw your consent, unless another legal basis permits continued processing.
15. Your rights
Subject to the applicable legal requirements, you have in particular the right to:
• access under Art. 15 GDPR to the personal data we process about you,
• rectification under Art. 16 GDPR of inaccurate or incomplete data,
• erasure under Art. 17 GDPR of your personal data,
• restriction of processing under Art. 18 GDPR,
• data portability under Art. 20 GDPR,
• object under Art. 21 GDPR to certain processing of personal data, and
• withdraw consent under Art. 7(3) GDPR with effect for the future.
You can contact us at any time to exercise your rights:
FAM Kaffeetechnik GmbH Jagdweg 1–3 01159 Dresden Email: info@fam-kaffeetechnik.de
• access under Art. 15 GDPR to the personal data we process about you,
• rectification under Art. 16 GDPR of inaccurate or incomplete data,
• erasure under Art. 17 GDPR of your personal data,
• restriction of processing under Art. 18 GDPR,
• data portability under Art. 20 GDPR,
• object under Art. 21 GDPR to certain processing of personal data, and
• withdraw consent under Art. 7(3) GDPR with effect for the future.
You can contact us at any time to exercise your rights:
FAM Kaffeetechnik GmbH Jagdweg 1–3 01159 Dresden Email: info@fam-kaffeetechnik.de
16. Right to object
Where personal data are processed on the basis of Art. 6(1)(f) GDPR, you have the right under Art. 21 GDPR to object to the processing at any time on grounds relating to your particular situation.
We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
17. Withdrawal of consent
You may withdraw consent you have previously given at any time with effect for the future.
The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.
The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.
18. Right to lodge a complaint with a supervisory authority
Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
The supervisory authority generally responsible for us is:
Saxon Commissioner for Data Protection and Transparency Maternistraße 17 01067 Dresden Germany Postal address: Postfach 11 01 32 01330 Dresden Germany
You may generally also contact another data protection supervisory authority that is competent for you.
The supervisory authority generally responsible for us is:
Saxon Commissioner for Data Protection and Transparency Maternistraße 17 01067 Dresden Germany Postal address: Postfach 11 01 32 01330 Dresden Germany
You may generally also contact another data protection supervisory authority that is competent for you.
19. Requirement to provide personal data
When you use our website purely for informational purposes, you are generally not required to actively provide personal data.
However, if you submit a service, repair, maintenance or other enquiry, or wish to enter into a contract with us, we require certain personal data in order to process your enquiry or perform the contract.
Without the required information, we may not be able to process the relevant enquiry or provide the requested service.
However, if you submit a service, repair, maintenance or other enquiry, or wish to enter into a contract with us, we require certain personal data in order to process your enquiry or perform the contract.
Without the required information, we may not be able to process the relevant enquiry or provide the requested service.
20. Automated decision-making
We currently do not carry out decision-making based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.
The automated technical check performed by hCaptcha serves solely to identify automated or abusive access and generally does not constitute an automated decision producing legal effects or similarly significantly affecting you within the meaning of Art. 22 GDPR.
The automated technical check performed by hCaptcha serves solely to identify automated or abusive access and generally does not constitute an automated decision producing legal effects or similarly significantly affecting you within the meaning of Art. 22 GDPR.
21. Current version and amendments to this Privacy Policy
We reserve the right to amend this Privacy Policy if the services we use, the technical functions of our website or the applicable legal requirements change.
The version of this Privacy Policy currently published on this website applies.
The version of this Privacy Policy currently published on this website applies.
Last updated: September 2026