Privacy Policy

This website presents my culinary services: Private Dining, Events, Chef for Hire and Kitchen Support. There is no contact form, no newsletter, no shop, no online booking and no user accounts.

Enquiries reach me by email only. Contact links (mailto) open your own external email client; the website itself does not receive your message.

The website is delivered via the Lovable platform through a global content delivery network (CDN). According to Lovable support (a reply from an AI-assisted support agent dated 23 October 2026, not a legal opinion), a log entry is created for every request. It contains the requested URL including the query string, the request method, the IP address, the response code, timing data and an approximate location (country/city). According to that reply, request headers and request bodies are not stored.

These logs are used to operate and secure the hosting. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the secure, functioning operation of the website.

Lovable does not publish a retention period for these logs and offers no way to switch them off or delete them selectively. The retention period is therefore unconfirmed and outside my control.

Because the network is global, transfers to countries outside the EU are possible. Lovable refers to section 12 of its privacy policy (standard contractual clauses) for this; according to its reply, it is not certified under the EU-U.S. Data Privacy Framework. Lovable offers a data processing agreement under Art. 28 GDPR only on Business and Enterprise plans; none is currently in place for this website. These points still require legal review.

If you email me, I process your email address, your name and the content of your message in order to reply.

Where your enquiry concerns a potential or existing booking, the legal basis is Art. 6(1)(b) GDPR. For all other enquiries it is Art. 6(1)(f) GDPR; my legitimate interest is responding to the messages I receive.

IONOS provides the hello@plantsforcarnivores.com mailbox and automatic email forwarding. This email service is separate from Lovable website hosting. IONOS processes email data for delivery and forwarding. The exact provider entity, forwarding conditions including the receiving mailbox service, retention periods, processing locations and any transfers to third countries still need to be checked.

So that the site remembers your language choice (English or German) on your next visit, the entry “pfc-lang” with the value “en” or “de” is saved in your browser's local storage. It is not sent to me and contains no personal information.

Storing it is necessary to show the site in the language you asked for (Section 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.

The website code itself includes no marketing or advertising tools. Fonts are loaded as local files, with no connection to Google Fonts. Photographs are loaded from the same website address.

Lovable's visitor analytics are switched on for this website. They record page views with the full URL and a session identifier. The purpose is an overview of how the website is used (for example visits, pages viewed, traffic sources, device type). The data should be treated as pseudonymous, not anonymous. Where it is stored has not been publicly confirmed.

According to Lovable support, the hosting platform may set the following cookies: “__cf_bm” (Cloudflare bot protection) and “_dpl” or “__dpl” (routing to the deployed website version), both serving technical operation; and “session-id”, related to visitor analytics.

Lovable offers no built-in mechanism for individual visitor consent on published websites. Whether consent is required for visitor analytics and the “session-id” cookie (Section 25 TDDDG, Art. 6(1) GDPR), and which legal basis applies, has not yet been conclusively reviewed.

Data I process myself, in particular emails, I keep only for as long as it is needed for the purpose in question, and beyond that only where statutory retention obligations, for example under commercial and tax law, require it.

The provider has not published a retention period for the hosting platform's server logs and visitor analytics; I cannot set one.

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), where the respective conditions are met.

Where processing is based on Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You can lodge a complaint with a data protection supervisory authority. The authority responsible for me is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit, www.datenschutz-berlin.de).