Privacy notice

1. Data controller

Express Trading GmbH is responsible for the processing of personal data that we determine. For privacy enquiries and to exercise your rights, please use the contact details below.

2. Website and technical delivery

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit, STRATO processes technical connection data, particularly your IP address, the requested page or file and the time of access. Depending on the request, this may include browser information, referrer and technical status or error data. Processing enables delivery, stability and security of the website. The legal basis is our legitimate interest in a secure, functioning website under Article 6(1)(f) GDPR.

STRATO processes these data on our behalf under a data processing agreement pursuant to Article 28 GDPR. Web hosting takes place in Germany. According to STRATO, visitor IP addresses are stored for no more than seven days to detect and prevent attacks. The access logs made available to us contain anonymised IP addresses. No user account is required to use this website.

3. Language selection and cookies

When you select German, Italian or English, the website stores your choice in the “gambetto-locale” cookie. It contains only the language code de, it or en and expires no later than one year after your last language selection. It maintains your language across pages and is not used for advertising profiles.

Storage supports the language function you expressly request (section 25(2), no. 2 of the German TDDDG). To the extent personal data is processed, Article 6(1)(f) GDPR is the legal basis for providing this setting. You can delete or block the cookie in your browser; without a saved choice the site displays in German.

When you close the cookie notice, the website sets the session cookie “gambetto-cookie-notice” with the value v1. Its sole purpose is to hide the notice for this browser session; this is not consent to tracking. You can reopen it using “Cookie notice” in the footer. Storage only occurs after closing the notice, to implement your expressly requested display preference (section 25(2)(2) TDDDG; Article 6(1)(f) GDPR where personal data is involved). The cookie has no fixed expiry; session restoration may preserve it after a browser restart.

4. Contacting us

If you email us, we process your sender address, message and any information you voluntarily provide to handle your enquiry. Article 6(1)(b) GDPR applies to pre-contractual or contractual enquiries where you are personally a party to the contract. For other enquiries and communication with business contacts, we rely on our legitimate interest in responding under Article 6(1)(f) GDPR.

Providing information is voluntary; without sufficient contact details and information we may be unable to respond. Once the enquiry is resolved, data is deleted unless statutory retention duties or justified legal needs require otherwise.

Our support emails are also processed through STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. This includes email addresses, message content and technical delivery data. STRATO acts as a data processor on our behalf.

5. External links, media and analytics

This website has no shop or external video player. No analytics or advertising trackers or external fonts are loaded when you visit. Images are served with the website. The newsletter form sends data to Brevo only when submitted. External services are subject to their providers’ own privacy notices.

6. Your rights

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). You may withdraw consent at any time for the future without affecting the lawfulness of earlier processing. Contact support@express-trading.de to exercise these rights.

7. Right to complain

You may complain to a data protection supervisory authority, particularly where you usually live, work or where you believe an infringement occurred. The Bavarian State Office for Data Protection Supervision is generally responsible for private businesses based in Bavaria.

8. Automated decisions

The Gambetto website does not implement automated decisions with legal or similarly significant effects, or profiling.

9. Gambetto newsletter

If you subscribe to our German-language newsletter, we use your email address to tell you about the launch, news and offers from Caffè Gambetto. The controller is Express Trading GmbH. Subscribing is voluntary and does not depend on a purchase. The legal basis for sending the newsletter is your consent under Article 6(1)(a) GDPR.

We use Brevo for subscriptions, contact management and delivery. Submitting the form sends your email address, consent and technical connection data to Brevo. You receive a confirmation email; your subscription is completed only after you click the confirmation link (double opt-in). Subscription and confirmation records document your consent.

Brevo can record sending, delivery, email opens and link clicks using tracking pixels and individualised links. This email analysis is distinct from website tracking. Subscribing does not give blanket consent to additional website analytics or advertising by other companies.

You can withdraw consent for the future at any time through the unsubscribe link or by emailing info@caffegambetto.com. This does not affect the lawfulness of earlier processing. Your address is used for the newsletter until you unsubscribe. Necessary consent records and suppression records may be retained afterwards to defend legal claims and respect your withdrawal under Article 6(1)(f) GDPR.

Brevo · Privacy