Privacy Policy

The protection of your personal data is important to us. Below we inform you in accordance with Art. 13 and 14 GDPR about the nature, scope and purpose of the processing of personal data in connection with the use of this website.

1. Controller

Lofthouse Catering GmbH
Pirazzistraße 41, 63067 Offenbach am Main, Germany
Phone: +49 (0)69 / 90 55 96 96
Email: info@lh-catering.de

2. Hosting

This website is provided via the infrastructure of Lovable (Lovable AB, Sweden) and delivered via the global edge network of Cloudflare (Cloudflare, Inc., USA). With each visit, technically necessary server log data is processed (IP address, date and time, requested URL, user agent, referrer, HTTP status code). This data is required to deliver the website stably and securely and to defend against attacks (Art. 6 para. 1 lit. f GDPR, legitimate interest in secure operation). Transfers to third countries (incl. the USA) take place on the basis of EU standard contractual clauses.

3. Server log files

The access data mentioned is processed exclusively for security and operational purposes and is generally deleted or anonymised automatically after a short period. It is not merged with other data sources or evaluated for marketing purposes.

4. Contact

If you send us an enquiry via the contact form, email or telephone, we process the data you provide (name, contact details, content of the enquiry) to handle your request and for the case of follow-up questions. The legal basis is Art. 6 para. 1 lit. b GDPR (initiation/performance of a contract) or Art. 6 para. 1 lit. f GDPR (handling of other enquiries). Your data will be deleted as soon as it is no longer required for the purpose and no statutory retention obligations (in particular under commercial and tax law) apply.

5. Cookies

We distinguish between technically necessary cookies and consent-based cookies. Necessary cookies may be set by the hosting infrastructure to ensure security and availability; legal basis is § 25 para. 2 no. 2 TDDDG in conjunction with Art. 6 para. 1 lit. f GDPR. Consent-based cookies – in particular for analytics purposes (Google Analytics, see section 8) – are only set after your active consent via our cookie banner (§ 25 para. 1 TDDDG, Art. 6 para. 1 lit. a GDPR). You can change or withdraw your selection at any time via the cookie settings.

6. Web fonts (Google Fonts)

For a consistent display of fonts we use the web fonts loaded from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA). When calling up a page, your browser loads the fonts from Google servers, with your IP address being transmitted to Google. Legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in a consistent presentation of our content). Transfers to the USA take place on the basis of EU standard contractual clauses and, where applicable, the EU-US Data Privacy Framework. More information: policies.google.com/privacy.

7. Image CDN (Sanity)

Image content is delivered via the media CDN of Sanity (Sanity.io, Sanity AS, Oslo, Norway). When loading the images, your IP address is transmitted to the CDN server to enable delivery. Legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in performant delivery of visual content).

8. Web analytics with Google Analytics 4

On the basis of your consent (Art. 6 para. 1 lit. a GDPR, § 25 para. 1 TDDDG) we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies (incl. _ga, _ga_*) and similar technologies that enable an analysis of the use of the website (e.g. pages visited, dwell time, approximate region, device used).

We have activated IP anonymisation; your IP address is shortened by Google within the EU/EEA before it is transmitted to the USA. Advertising and personalisation signals are deactivated. A transfer of personal data to third countries (in particular the USA) cannot be completely ruled out; Google is certified under the EU-U.S. Data Privacy Framework, providing an adequate level of data protection within the meaning of Art. 45 GDPR. In addition, standard contractual clauses pursuant to Art. 46 GDPR exist.

Without your consent, no analytics take place and no analytics cookies are set. You can withdraw your consent at any time with effect for the future: open cookie settings. Further information can be found in the Google privacy policy.

9. Linked external content

Where this website contains links to external offerings (e.g. social media profiles), these connections are only established by an active click by you. The respective providers are responsible for data processing on the linked pages.

10. Recipients and processors

Personal data is only passed on to third parties insofar as this is necessary to fulfil our services or on the basis of a legal obligation. As processors within the meaning of Art. 28 GDPR we use in particular the hosting and infrastructure providers mentioned above. The required data processing agreements or standard contractual clauses exist with them.

11. Your rights

You have at any time the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and a right of objection (Art. 21 GDPR) against processing based on legitimate interests. Please contact us informally at info@lh-catering.de. You also have the right to lodge a complaint with a data protection supervisory authority – the Hessian Commissioner for Data Protection and Freedom of Information is responsible for us.

12. Currency

We adapt this privacy policy regularly to changes in the services used or legal requirements. The version available on this page applies.

Last updated: July 2026