Privacy policy
Name and contact details of the person responsible for data processing and the company's data protection supervisor
This data protection information applies to data processing by:
Café Libertad Kollektiv eG, Stresemannstraße 268, 22769 Hamburg
Email: info@cafe-libertad.de
Phone: +49 40 20906892
Fax: +49 40 20906893
Company data protection supervisor: Melanie Scheller
Contact: cafe-libertad@gmx.de
Address of data protection supervisor: Café Libertad Kollektiv eG, Stresemannstraße 268, 22769 Hamburg, Phone: +49 40 20906891
Collection and storage of personal data, type and purpose of this data's use
a) At the website
By visiting our website www.cafe-libertad.de, the browser installed on your computer is sending information to our website's server automatically. This information is stored temporarily in a so-called log file. The following information is collected without your contribution and stored until deletion:
• date and time of access,
• IP-Address of the calling computer,
• name and URL of the viewed file,
• source website of access (Referrer-URL),
• browser and, if applicable, operating system of your computer and name of your provider.
We are processing the data mentioned above for the following purposes:
• ensuring comfortable use of our website,
• evaluation of system security and stability, and
• other administrative purposes.
The legal basis for data processing is Art. 6 Abs. 1 S.1 lit. a. and b. DSGVO. Our legitimate interest is due to the purposes of data collection described above. We will not, in any case, use the data collected to identify you. Furthermore, our website is using cookies. Further information is provided in par. 4 and 5 of this privacy statement.
b) Using our contact form
If you have any questions, you can contact us using the contact form on the website. You must provide your email address; otherwise, we won't know the sender of the enquiry and can't respond. Further information on your part is voluntary. For data processing for contact purposes, refer to Art. 6 Abs. 1 S. 1 lit. a. DSGVO based on your voluntary agreement. The data collected from the contact form are deleted after your enquiry is answered.
c) Orders
If you have questions about your order or need invoice reminders, we will contact you using your contact data. Your order will be transferred to a stationary accounting system that produces invoices and delivery notes based on your data. In our packaging sector, we prepare your delivery for shipment using your data. Your address and, if applicable, phone number will be transmitted to the shipping company (DHL, UPS) for delivery. We transfer bank data into Lexware after you place your order. We store all data for different periods. All tax-relevant data will be stored for ten years.
d) Upon registration
When you register on our website, we collect certain personal data, such as your name, address, and contact and communication details, including your telephone number and email address. Once you have registered with us, you can access content and services – such as your order history – which would otherwise not be available to you. Registered users can also amend or delete the data provided during registration at any time. Naturally, we will also provide you with information at any time regarding the personal data we hold about you. We will also be happy to correct or delete this data at your request, provided that no statutory retention obligations are preventing us from doing so. To contact us in this regard, you can use the contact details provided at the beginning of this privacy policy.
e) Members of the cooperative
We enter names and addresses into the membership list to invite members to coop assemblies and to distribute information about the coop. Membership list data will not be deleted (§30 Abs. 2 2 S. 1 Nr. § GenG).
Data Transmission
Personal data are not forwarded to third parties unless there is a legal obligation or necessity regarding order processing and delivery. We only transmit data to third parties if:
• you have agreed according to Art. 6 Abs. 1 S. 1 lit. a. and/or b. DSGVO to fulfil contractual obligations and/or to execute pre-contractual measures and there is no reason to assume that an overriding and legitimate interest in non-disclosure exists,
• in cases of legal obligations according to Art. 6 Abs. 1 S. 1 lit. c DSGVO , and
• to the extent permitted by law and necessary for the settlement of contractual terms and conditions according to Art. 6 Abs. 1 S. 1 lit. b DSGVO.
Cookies
Our website uses cookies. Cookies are small files your browser generates automatically, and your device (notebook, tablet, phone or other) saves them if you visit our website. Cookies don't harm your device and don't contain viruses, trojans, or other malware. Information specifically connected with your device is saved in the cookie. However, this does not allow immediate access to your identity.
Cookies streamline your visit to our website, for instance by using so-called session cookies to track which pages you have already visited. These are deleted automatically when your visit is concluded. Furthermore, temporary cookies saved on your device for a fixed period are optimising user-friendliness. If you are re-visiting our site to make use of our services again, your previous visit is recognised automatically, and previous inputs and settings don't have to be entered again.
On the other hand, cookies statistically record and evaluate website use to optimise our services (see paragraph 5). These cookies enable us to recognise repeated website visits and are deleted automatically after a fixed period of time. The data processed by cookies are required to safeguard our own as well as third parties' legitimate interests regarding the purposes mentioned above, according to Art. 6 Abs. 1 S. 1 lit. b. DSGVO.
Most browsers accept cookies automatically. However, you can adjust your browser to prevent cookies from being saved on your computer or to show a notice before new cookies are generated. Total deactivation of cookies can interfere with using all features of our website.
Description of the cookies used
We use the following cookies on our website:
Cookie name: cfid
Purpose/function: ColdFusion session cookie, session control for editors
Retention period: 20 days
Essential: yes
Cookie name: cftoken
Purpose/function: ColdFusion session cookie, session control for editors
Retention period: 20 days
Essential: yes
Cookie name: MIO_ACCEPTTRACKINGCOOKIE
Purpose/function: Cookie Panel control, is set when tracking is accepted
Retention period: 30 days
Cookie name: MIO_DECLINETRACKINGCOOKIE
Purpose/function: Cookie Panel is set when tracking is rejected
Retention period: 30 days
Cookie name: MIO_ACCEPTMARKETINGCOOKIE
Purpose/function: Cookie Panel is set when marketing is accepted
Retention period: 30 days
Cookie name: MIO_DECLINEMARKETINGCOOKIE
Purpose/function: Cookie Panel is set when marketing is rejected
Retention period: 30 days
Cookie name: MIO_CLOSECOOKIEBANNER
Purpose/function: Cookie Panel control; is set when the cookie panel is closed without a selection being made
Retention period: 7 days
Cookie name: MIO
Purpose/function: CMS control, contains information on how to use the CMS (for example, language selection)
Retention period: 30 days
Essential: yes
Cookie name: CFID
Purpose/function: user session
Retention period: non-persistent browser cookie/browser session, user session (e.g.for booking appointments)
Essential: yes
Cookie-Name: CFTOKEN
Purpose/function: Benutzer Session
Retention period: non-persistent browser cookie/browser session, user session (e.g.for booking appointments)
Essential: yes
Cookie name: JSESSIONID
Purpose/function: user session
Retention period: non-persistent browser cookie/browser session, user session (e.g.for booking appointments)
Essential: yes
Cookie name: _pk_id.*
Purpose/function: Matomo Cookie, Matomo Tracking Cookie
Retention period: 1 year
Cookie name: _pk_ses.*
Purpose/function: Matomo Cookie, Matomo Tracking Cookie
Retention period: 30 minutes
Use of Matomo
This website uses Matomo (formerly Piwik), an open-source programme for the statistical analysis of visitor traffic. Matomo uses so-called cookies, i.e. text files stored on your computer that enable analysis of how the website is used. The information generated by the cookie regarding your use of the website is stored on a server in Germany. The IP address is anonymised immediately after processing and before it is stored.
You have the option to prevent the installation of cookies by changing the settings in your browser. Please note that, if you do so, not all functions of this website may be available. You can decide whether a unique web analytics cookie may be stored in your browser to enable the website operator to collect and analyse various statistical data.
Use of Cloudflare
We use Cloudflare, provided by Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA, on our website to improve the security and delivery speed of our website. This is in line with our legitimate interest (Article 6(1)(f) of the GDPR). For this purpose, Cloudflare uses cookies and processes user data. Cloudflare is a Content Delivery Network (CDN) and a suite of various security services. A CDN is a worldwide network of servers that delivers optimised content to users of our website. For this purpose, personal data (e.g. IP addresses, etc.) may be processed by Cloudflare. Cloudflare is the recipient of your personal data and acts as a data processor on our behalf. This is in line with our legitimate interest, as defined in Article 6(1)(f) of the GDPR, in not having to operate a CDN or specialised security services ourselves.
Cloudflare processes your data in the US, amongst other places. Cloudflare is an active participant in the EU-US Data Privacy Framework, which governs the lawful and secure transfer of personal data belonging to EU citizens to the US. Cloudflare uses Standard Contractual Clauses (SCCs) as set out in Article 46(2) and (3) of the GDPR. This is intended to ensure that European data protection standards are met even when your data is transferred to third countries, such as the US. Further information can be found at https://www.cloudflare.com/de-de/application/privacypolicy/ and https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en/. Cloudflare will store your personal data for as long as is necessary for the purposes described.
Information about the standard contractual clauses and Cloudflare’s use of the data can be found in the privacy policy at https://www.cloudflare.com/de-de/privacypolicy/.
Data security
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS. However, we are using adequate technical and organisational safety measures to protect your data from random or deliberate manipulation, partial or total loss, destruction or unauthorised access by third parties. Our safety measures are upgraded constantly corresponding to technological development.
Rights of the persons affected
You have the right:
• to have access to your personal data processed by us according to Art. 15 DSGVO. In particular, you are entitled to information on the purpose of processing, the type of personal data, the type of recipient your data have been or are disclosed to, the projected period of storage, the existence of your right to rectification, erasure and limitation of processing, the existence of your right of objection and appeal, the data's origin if not collected by us, and the existence of an automatised decision-making process including profiling and, if applicable, significant information on details thereof;
• to demand the immediate rectification of inaccurate data and the integration of personal data saved by us according to Art. 16 DSGVO;
• to demand the erasure of your personal data saved by us according to Art. 17 DSGVO unless the data processing is required to exercise the right of freedom of speech and information, to fulfil legal obligations, to exercise or defend legal claims;
• to demand limitation of processing of your personal data according to Art. 18 DSGVO insofar as the data's accuracy is contested and you refuse the erasure of the data despite their processing being illegal, and we no longer require the data while they are required to assert, exercise or defend legal claims in court or you have filed an objection against the data processing according to Art. 21 DSGVO;
• to have access to your personal data provided to us in a structured, customary and machine-readable format or to demand the transmission to another party responsible according to Art. 20 DSGVO;
• at any time to withdraw consent once given to collect, process and use your personal data according to Art. 7 Abs. 3 DSGVO. Any data processing based on this consent must not be continued in the future
• to complain to a regulatory authority according to Art. 77 DSGVO. In general, you can contact your local regulatory authority or the one responsible for our company.
Right of objection
If we process your personal data based on legitimate interests under Art. 6 Abs. 1 S. 1 lt. F DSGVO, you are entitled to file an objection according to Art. 21 DSGVO if there are reasons due to your special situation or you are objecting to direct marketing. In the latter case, you have a general right of objection, which you can exercise without providing special circumstances. If you would like to exercise your right of withdrawal or objection, an email to info@cafe-libertad.de will be sufficient.
Contacting the data protection supervisory authority:
You are entitled to information on the use of your personal data, such as rectification, erasure or limitation of processing (if no legal regulation applies). In addition, you have the right to complain to a supervisory authority:
Freie und Hansestadt Hamburg, Der Beauftragte für Datenschutz und Informationsfreiheit, Thomas Fuchs, Ludwig-Erhard-Straße 22, 20459 Hamburg, Telefon: +49 (0)40 42854 4040, E-Mail: mailbox@datenschutz.hamburg.de
Changes to our Privacy Policy
We reserve the right to amend this Privacy Policy to ensure it always complies with current legal requirements or to reflect changes to our services in the Privacy Policy, for example, when introducing new services. The new Privacy Policy will then apply to your next visit.
This privacy statement is currently valid as of June 2026.
