Privacy Policy

Effective: May 2026. This notice informs you about the nature, scope and purpose of the processing of personal data on localspecialtycoffee.com under Articles 13 and 14 GDPR.

1. Controller

The controller within the meaning of the GDPR and other national data protection laws is:

Nico Nuscheler
Business name: Nico Nuscheler Digital Services
Schwedenstraße 25, 86825 Bad Wörishofen, Germany
Email: localspecialtycoffee@gmail.com

2. General notes on data processing

We collect and use personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. Collection and use are generally only carried out with the user's consent or where a legal basis permits the processing.

Legal bases. Where we obtain consent (Art. 6 (1) (a) GDPR); where processing is necessary for the performance of a contract (Art. 6 (1) (b)); where required by a legal obligation (Art. 6 (1) (c)); or where processing is necessary to safeguard a legitimate interest (Art. 6 (1) (f)).

Retention. Personal data is deleted as soon as the purpose of storage no longer applies, unless retention is required by law (e.g. commercial or tax retention obligations of 6–10 years).

3. Hosting (Vercel)

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you access the site, the following connection data is processed:

  • IP address (truncated after connection)
  • Date and time of access
  • Requested URL and HTTP status code
  • User-Agent (browser, version, OS)
  • Referrer URL (if transmitted)

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in error-free delivery of the website). Retention: maximum 30 days then automatically deleted or anonymised. Third-country transfer: Vercel may transfer data to the USA. Vercel is certified under the EU–U.S. Data Privacy Framework (Art. 45 GDPR adequacy decision).

4. Web analytics (Google Analytics 4)

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Analytics tracking only loads after you give consent via our cookie banner. Without consent, no Google Analytics requests are made.

Data processed: anonymised IP address, page visits, device type, referrer, approximate location (country/region), session duration. We do not collect personally identifying information.

Legal basis: Art. 6 (1) (a) GDPR — your consent. Retention:14 months in Google's system, then deleted. Third-country transfer: Google LLC (US) — certified under the EU–U.S. Data Privacy Framework.

You can revoke your consent at any time via the cookie banner (provided by Silktide Consent Manager). Google's privacy notice: https://policies.google.com/privacy.

5. Cookie consent

We use a first-party consent banner to obtain and manage your preferences. Your choice is stored in your browser's local storage under the key lsc-consent-v1 and never leaves your device. No personal data is processed beyond this local preference.

You can change or withdraw consent at any time via the “Cookie settings” link in the footer.

Legal basis: Art. 6 (1) (c) GDPR (legal obligation per TTDSG / ePrivacy).

6. Newsletter (MailerLite + Make)

If you subscribe to our newsletter or our “Brew-tiful Google Maps Specialty Coffee Guide”, we collect your email address and forward it via Make.com (Celonis SE / Integromat s.r.o., Prague, Czech Republic) to MailerLite (UAB MailerLite, Paupio g. 46, Vilnius LT-11341, Lithuania). MailerLite then stores your email and sends our newsletter. You can unsubscribe at any time via the link in every newsletter.

Legal basis: Art. 6 (1) (a) GDPR — your consent (you actively submitted the form). Retention: until you unsubscribe; up to 7 days additionally in opt-in logs for proof of consent.

7. Contact form & cafe submissions

When you submit our contact form or our submission form, we process the data you enter (name, email, phone, city, message, business details). The data is sent via Make.com to localspecialtycoffee@gmail.com (Google Workspace) where we read it and respond.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual steps in response to your inquiry) or Art. 6 (1) (a) (consent if marketing-related). Retention: until your inquiry is processed; up to 12 months thereafter for follow-up, then deleted.

8. Embedded content

Some café pages embed Google Maps(Google Ireland Limited) to show the café's location. Maps are loaded on demand; interacting with the map may transmit data to Google. See Google's privacy notice linked above. Café images are currently served from the Webflow CDN (Webflow Inc., 60 Rausch St, San Francisco, CA 94103, USA — DPF-certified).

9. Your rights under GDPR

You have the following rights regarding your personal data:

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure / “to be forgotten” (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right to lodge a complaint with a supervisory authority (Art. 77) — for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany

To exercise any of these rights, email us at localspecialtycoffee@gmail.com. We will respond within one month.

10. Changes to this notice

We may update this privacy policy as our processing changes or as the legal situation evolves. The latest version always applies and is available at this URL.

See also our Imprint and Terms & Conditions.