privacy.

Controller and contact

Represented by Rieke du Toit.
Privacy enquiries: privacy@luw.energy
General enquiries: hello@coffeecommunitea.de
Phone: +49 162 785 0608

You may also exercise your rights using the postal address above.

Visiting the website

We host this static website using Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you request a page or asset, Cloudflare processes technical request data, including your IP address, requested URL, browser information and request time. This supports delivery, caching and protection against misuse.

The basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a reliable, secure information website. We do not use these requests to create individual marketing profiles. Further information is available in Cloudflare’s privacy policy.

Cookies, services and connections

Our website code sets no cookies and uses neither Local Storage nor Session Storage. We have not enabled Cloudflare Web Analytics. There are no analytics or marketing trackers, newsletter signup, remotely loaded fonts, embedded maps or other third-party embeds. Images, fonts, stylesheets and scripts are served from this website’s own domain.

Cloudflare may use technically necessary security cookies when a protection or challenge is triggered. These support security, rather than advertising. The applicable cookies and their lifetimes are described in Cloudflare’s cookie documentation.

There is no contact form and enquiries are not submitted to a website backend. A phone link opens your device’s calling function; an email link opens your email application. This does not automatically send a message.

If you follow an explicitly provided external link, such as the link to the data-protection authority, the destination website receives the technical data needed for that visit. The destination provider’s privacy notice applies there.

When you contact us

For an email, call or letter, we process the information you provide, such as your name, café, contact details, message and any attachments or conversation notes. We use it to handle your enquiry and discuss a possible collaboration.

General enquiries are handled under Article 6(1)(f) GDPR; our legitimate interest is to respond appropriately. For steps before entering a contract or a contract with you as an individual, Article 6(1)(b) may apply. Business communication with a company’s contact person is based on Article 6(1)(f). Legal duties are fulfilled under Article 6(1)(c).

Providing contact information is voluntary. Without a suitable way to reply, we may be unable to respond. Please do not send passwords, platform access tokens or unnecessary customer data.

Recipients and communication channels

Cloudflare receives website request data as our hosting and security provider. Its global network and subprocessors may process data outside the European Economic Area, including in the USA. Cloudflare’s data-processing terms describe transfer safeguards, including the EU–US Data Privacy Framework and standard contractual clauses where applicable. Processing exclusively within the EU is not promised.

Your enquiry is handled by the people responsible for it at R&R Spiele UG (haftungsbeschränkt). Phone and email providers participate in technical transmission. We share enquiry data with further recipients only where needed for the requested collaboration, required by law or supported by another valid legal basis.

Which communication providers process a particular message, and whether data is processed outside the European Economic Area, depends on the communication channel. Ask privacy@luw.energy about the channels we use and any applicable transfer bases.

How long data is needed

Cloudflare may retain technical request and security data. Retention depends on the service, settings, operational and security needs, and legal obligations described in its privacy policy and data-processing terms. We do not promise deletion immediately after each request or a fixed retention period.

We keep enquiries and related correspondence only for as long as needed to handle them and any resulting collaboration. We then delete them unless legal retention duties or necessary evidence for legal claims require otherwise.

The period depends on the content and purpose of the correspondence and applicable legal duties. There is no universal 30-day deletion period for emails or business records.

Your rights

Subject to the applicable legal conditions, you have rights to access, rectification, erasure, restriction of processing and data portability. Where processing is based on consent, you can withdraw that consent for the future.

Right to object: You may object at any time to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. The conditions are set out in Article 21 GDPR.

Contact privacy@luw.energy or the postal address above. No particular form or website account is required. Where necessary, we verify identity proportionately. We generally answer requests within one month; any legally permitted extension is communicated within that period.

You may complain directly to a data-protection supervisory authority. For private-sector organisations in Bavaria, the Bavarian State Office for Data Protection Supervision (BayLDA) is responsible. You do not need to contact us first.

Separate information for a later collaboration

This website does not carry out automated decision-making or profiling. It does not collect order data or access a merchant account.

Future delivery-channel management may involve other data and permissions. Responsibilities, access rights and any necessary data-processing agreements will be established separately before that access. This website notice does not replace those agreements or the delivery platform’s privacy notices.