Skip to content
Shawarma Damaskus
en

Privacy policy

1. Controller

Data Controller within the meaning of the GDPR (DSGVO):
Shawarma Damaskus
Owner: Mohamad Rawda
Stummrigestraße 2, 37671 Höxter
Phone: +4952716922850
Email: mohrawda4@gmail.com

2. What Data We Process

We set no advertising or tracking cookies and use no personal analytics tools (e.g., Google Analytics). For anonymous page view analytics, we use Vercel Web Analytics – this service operates without cookies and without identifying individual visitors; see Section 3.

Storage on your device: For the site to work, your shopping cart and the name and phone number you enter in the order form are stored locally in your browser. That data leaves your device only when you submit an order. If you sign in, a session cookie is also set, which keeps you signed in. Both are technically necessary for functions you requested (§ 25(2)(2) TDDDG) and therefore require no consent; you can delete them at any time through your browser.

Customer account and orders: When you sign in with Google, we store your Google account identifier, email address, name and profile picture in our database – from the moment you sign in, not only when you order. When you place an order we additionally store the items ordered with quantities and prices, the total, pickup or delivery, the requested time, an order reference, the processing status and the link to your account. This lets you see your own orders under “My Orders” and lets the owner manage incoming orders. Legal basis: Art. 6(1)(b) GDPR (order processing) and Art. 6(1)(f) GDPR (abuse prevention).

The name and phone number you provide are not stored in our database – they are transmitted only with the order notification to the owner, so that he can reach you to confirm.

When accessing the website, the hosting provider (Vercel Inc., 340 Pine Street, Suite 603, San Francisco, CA 94104, USA) automatically logs the following data on the server: IP address (anonymized), requested URL, date/time of access, browser type, and operating system. This data is used solely to ensure technical operation and is not merged with other data sources. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest). Further details can be found in the Vercel Privacy Policy in Section 3 below.

3. External Services

Vercel Web Analytics

For anonymous traffic measurement, we use Vercel Web Analytics (Vercel Inc., USA). The service uses no cookies and no unique identifiers to recognize visitors; only aggregated access numbers that cannot be traced back to individual persons are collected. Legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in reach measurement). Further information: Vercel Privacy Policy.

Google Sign-In (Order Verification)

To protect orders against spam and fake submissions, visitors must sign in with a Google Account before submitting an order list (Google LLC, USA). In doing so, Google provides us with your account identifier, email address, name and profile picture. This data is stored in our database and your orders are linked to your account – see Section 2. Legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in fraud prevention). Further information: Google Privacy Policy.

Google Fonts

This website loads fonts locally. No requests are sent to Google servers.

Google Maps (Link)

On the contact page, there is a link to Google Maps. Clicking it leaves our website; Google Maps is a service by Google LLC (USA). Privacy notice: The Google Privacy Policy applies (see Google Sign-In above).

Lieferando (Link)

The "Order Now" button redirects to lieferando.de (Takeaway.com Deutschland GmbH). Privacy notice: https://www.lieferando.de/privacy-policy

WhatsApp (Link)

The WhatsApp button is a simple wa.me link. Clicking it opens the WhatsApp app or website (Meta Platforms, Inc., USA). Privacy notice: https://www.whatsapp.com/legal/privacy-policy

Facebook (Link)

In the footer, there is a link to the restaurant's Facebook page (Meta Platforms, Inc., USA). Clicking it leaves our website. Privacy notice: https://www.facebook.com/privacy/explanation

Phone (tel:-Link)

The phone number as a clickable link transmits no data to us – your device simply opens your phone app.

4. Retention

Order records are retained in accordance with the statutory retention periods under German commercial and tax law (§ 257 HGB, § 147 AO). This retention is a legal requirement; the legal basis is Art. 6(1)(c) GDPR (compliance with a legal obligation).

Your customer account (name, email address, profile picture) exists for as long as you use it. You may have it deleted at any time by informal email – see Section 6. After deletion, order records subject to statutory retention remain, but are no longer linked to your account.

5. Your Rights (GDPR)

You have the right to:

  • Information about your stored data (Art. 15 GDPR)
  • Rectification of incorrect data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)

Complaints may be lodged with the competent supervisory authority: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (ldi.nrw.de).

6. Privacy Contact

For privacy inquiries, please contact:
Mohamad Rawda
Stummrigestraße 2, 37671 Höxter
Email: mohrawda4@gmail.com