Data Protection Statement

We appreciate your trust and use the utmost care and highest security standards to protect your personal data from unauthorized access. Our data protection provisions comply with the German Data Protection Act (BDSG), the German Telecommunications Act (TMG), and the European General Data Protection Regulation (GDPR).

Below you can find more information on the way in which we handle your data that is collected when you use our website. If and when our website has links to other websites, we do not have any influence or control over the contents of the link and the data protection provisions that apply to these contents. We recommend that you review the privacy policies of the website links so that you can determine if and to what extent personal data is collected, processed, used or made accessible to third parties.


The controller within the meaning of data protection law is Pfalzgraf Konditorei GmbH, Zeißstraße 6, 72285 Pfalzgrafenweiler.

Email: info(at)

Telephone: +49 7445 8510 0

Contact information for the data protection officer:

Michael Gembus

data protection officer

Support & Consulting GmbH

Schulstraße 13

72250 Freudenstadt




Data processing as a result of visiting our website

If you visit our website, our web server will temporarily save information about each access in a log file. The following data is collected and saved until it is automatically erased:

- IP address of the requesting computer

- Date and time of access

- Domain visited

- Name and URL of the accessed file 

- Volume of data transferred 

- Notification about whether access was successful

- Identification data about the browser and operating system being used

The processing of this data is undertaken for the purpose of enabling the website to be used (establishing a connection), system security, technical administration of the network infrastructure, and optimizing internet services. We cannot assign this data to specific individuals. Merging this data with other sources of data is not carried out and the data is also erased after a statistical analysis is performed. The legal basis for saving the data or log files temporarily is Article 6 paragraph 1, letter f) of the GDPR. 


Contact form and contacting us by email

If you use the contact form or send us an email for your inquiries, we will save your information from the request form or your email, including the contact information you indicated there for the purpose of processing your request and for follow-up questions. Under no circumstances will we pass on this data to a third party without your consent.  The legal basis for the processing of data is our legitimate interest in responding to your inquiry pursuant to Article 6, paragraph 1, letter f) of the GDPR and Article 6, paragraph 1, letter b) of the GDPR if your inquiry has the aim of concluding a contract with us. Your data will be erased after the final processing of your request has been completed as long as there are not any legal retention obligations which prevent its erasure.


Use of cookies

We use so-called cookies on various pages of our website in order to make visiting our website appealing and to enable the use of certain functions. Cookies are small text files which are saved on your end device. Some of the cookies we use will be erased again after you end your browser session, i.e., when you close your browser (so-called session cookies). Other cookies will remain on your end device and they enable us or our partner companies to recognize your browser the next time you visit the website (so-called persistent cookies).

Cookies serve in part to simplify website processes by saving your settings (e.g. maintaining the options already selected). If and when personal data is also processed by individual cookies used by us, the processing occurs either to execute a contract pursuant to Article 6, paragraph 1, letter b) of the GDPR   or to protect our legitimate interests in providing the best possible functionality of the website and in structuring your visit to the website in a customer-friendly and effective manner pursuant to Article 6, paragraph 1, letter f) of the GDPR. 

You can set up your browser in such a way that you can be informed when cookies are used and can decide about which individual cookies you want to accept, or you can accept cookies for certain situations, or you can disable cookies all together.  If you do not accept cookies, the functionality of our website may be limited.


Pseudoanonymization of user profiles for web analysis

This website uses Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses so-called cookies, short text files which are saved on your computer and which make it possible to analyze your use of our website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and saved there. In the event that IP anonymization is activated on this website, your IP address will be shortened by Google within a member state of the European Union or in another signatory country which is party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website in order to compile reports about website activities and to provide the operator of the website other services associated with the use of the website and the internet.  The IP address transmitted by your browser during Google Analytics will not be merged with other data from Google. You can prevent cookies from being saved by selecting the corresponding settings in your browser software; please be advised that when you do this you may not be able to use all of the functions on this website. 

Additionally, you can prevent the data which is generated by the cookie and relates to your use of the website (incl. your IP address) from being recorded and processed by Google by clicking on the following link, downloading the browser plug-in, and installing it on your computer:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland


Sending newsletters 

If you would like to be sent the newsletter offered on the website, which contains up-to-date information on our products and services, we will need your email address, which is required information. 

We use the so-called opt-in procedure for sending newsletters. This means that we will only send you our newsletter by email if you have explicitly confirmed that you consent to being sent newsletters.

With your confirmation, you are giving us your consent in accordance with Article 6, paragraph 1, letter a) of the GDPR to be able to use your personal data for the purpose of sending the newsletters that you requested.

When you register for the newsletter, we will save the date and time of registration and confirmation as well as the email address required for sending it so that we will be able to retrace any potential abuse at a later date.

You can cancel the newsletter at any time by going to the link provided in each newsletter or by sending an email to the controller indicated above. Once your deregistration is successful, your email address will be erased from our newsletter mailing list unless you have explicitly agreed to the continued use of the collected data or the continued processing of your data is otherwise permitted by law. 


Transferring data and recipient

Your personal data will not be transferred to a third party unless

 - we have explicitly informed you thereof in the description of the data processing in each case.

 - you have explicitly given your consent pursuant to Article 6, paragraph 1, page 1, letter a) of the GDPR.

 - the transfer of data is required for asserting, exercising or defending legal rights pursuant to Article 6, paragraph 1, p. 1, letter f) of the GDPR and there are no grounds to believe that you have an overriding interest warranting protection that relates to the non-disclosure of your data.

 - there is an event where the transfer of data is subject to a legal obligation pursuant to Article 6, paragraph 1, p. 1, letter c) of the GDPR and provided it is required for winding up a contract with you in accordance with Article 6, paragraph 1, p. 1, letter b) of the GDPR.

We also use external service providers for performing our services that we have carefully selected and commissioned in writing. They are bound to follow our instructions, are monitored on a regular basis, and have also entered into order processing contracts with us if necessary pursuant to Article 28 of the GDPR. They are service providers who provide web hosting services and maintenance and support for our IT systems, etc. These service providers will not pass on this data to third-parties.


Storage period for personal data

The storage period for personal data is determined by applicable legal retention periods (e.g., under commercial and tax law). After the respective retention period expires, the corresponding data is erased on a routine basis. If and when data is required for the fulfillment or initiation of a contract or we have a legitimate interest in continuing to save this data, the data will be erased when it is no longer required for these purposes or when you make use of your right to object or to revoke your consent.


Your rights

Below you will find more information on the rights of the persons concerned which the applicable data protection law gives you against the controller with respect to the processing of your personal data:

You have the right to obtain information about your data which is processed by us under Article 15 of the GDPR. In particular, you can receive information about the purposes of processing, the categories of personal data, the categories of recipients we have disclosed or will disclose your data to, the scheduled storage period, the existence of a right to correct or  delete information,  to limit the processing, or to object to the processing, the existence of a right to file a complaint, and the origin of your data provided it was not collected by us, as well as the existence of  automated decision-making, including profiling, and if applicable, to request conclusive information on the details about profiling. 
You have the right to demand that any incorrect personal data about you which we have saved be corrected or completed immediately under Article 16 of the GDPR.

You have the right to demand that the personal data we have saved about you be erased under Article 17 of the GDPR, provided processing is not required for exercising a right to freedom of expression and information, for fulfillment of a legal obligation, for reasons of public interest, or for the assertion, exercise or defense of legal claims.

You have the right to demand that the processing of your personal data be limited under Article 18 of the GDPR if the correctness of the data about you is disputed, the processing is unlawful but you refuse to have it deleted and we no longer need the data, but you need it for asserting, exercising or defending legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR.

You have the right to receive the personal data which you provided us in a structured, commonly available, and machine-readable format or to request that it be transferred to another controller under Article 20 of the GDPR. 

You have the right to file a complaint with a supervisory authority under Article 77 of the GDPR. As a general rule, you can contact the supervisory authority of the German state where our company has its registered office, which is indicated above, or if necessary, the supervisory authority where you normally reside or work.

You have the right to revoke any consents you have issued under Article 7, paragraph 3 of the GDPR. You have the right to revoke the consent you gave once to the processing of data at any time for future effect. In the event you revoke your consent, we will immediately erase the data concerned, provided its continued processing cannot be supported by a legal basis for processing without consent. Revoking consent will not affect the legality of the processing already carried out in the period between when consent was given until it was revoked.


Right of objection

If and when your personal data has been processed by us on the basis of legitimate interests in accordance with Article 6, paragraph 1, p.1 letter f) of the GDPR, you have the right to object to the processing of your personal information under Article 21 of the GDPR provided this is done for reasons which arise as a result of your particular situation.  If your objection concerns the processing of personal data for the purpose of direct advertising, you have a general right of objection with no obligation to specify a specific situation.

If you would like to make use of your right to object to the processing of your personal data or would like to revoke your consent, please send an email to info(at)

Changes to our privacy notice

We reserve the right to adapt and update this privacy notice as required while observing applicable data protection regulations. In this way, we can adapt the notice to current legal requirements and to take our services into account, e.g., when we introduce new services. The most recent version of the privacy notice shall apply to your visit.


Privacy notice as of February 13, 2020