Privacy Policy

1. Data Controller

The controller responsible for processing personal data through this website is:

Frau Bar Gastro GmbH
Feldmochinger Straße 24
80992 Munich
Germany

Managing Director: Courtney Craig
Email: info@fraubar.de

2. Squarespace

This website and its online shop are hosted and operated through Squarespace. We also use Squarespace to process contact forms, customer orders and newsletter subscriptions.

When you visit the website, Squarespace may process technical information such as your IP address, browser and device information, the date and time of access, pages viewed, referring URLs and technical log data. This processing is necessary to provide, secure and maintain the website.

The legal basis for technically necessary processing is Article 6(1)(f) GDPR, based on our legitimate interest in operating a secure and functional website.

Squarespace may process data outside the European Economic Area. Where required, international transfers are protected through an adequacy decision, standard contractual clauses or another lawful transfer mechanism.

Further information is available in the Squarespace Privacy Policy.

3. Contacting Us

If you contact us by email or through the website’s contact form, we process the information you provide, such as your name, email address and message, to respond to your enquiry.

The legal basis is Article 6(1)(b) GDPR where your enquiry relates to a contract or steps taken before entering into a contract. For other enquiries, processing is based on Article 6(1)(f) GDPR and our legitimate interest in responding to communications.

We retain correspondence only for as long as necessary to handle the enquiry and comply with any applicable legal obligations.

4. Newsletter

You may subscribe to our email newsletter through Squarespace Email Campaigns. When you subscribe, we process your email address and any other information you voluntarily provide. We may also retain information documenting when and how your subscription was confirmed.

Newsletter subscriptions are processed on the basis of your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time by using the unsubscribe link included in each newsletter or by contacting info@fraubar.de. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Squarespace processes subscriber information on our behalf to manage the mailing list and distribute newsletters. Information required to document consent may be retained where necessary to demonstrate compliance with applicable law.

5. Online Shop and Customer Orders

When you place an order through our Squarespace shop, we process the information necessary to complete the transaction. This may include your name, email address, billing and delivery addresses, order information and payment-related details.

Processing necessary to accept, manage and fulfil an order is based on Article 6(1)(b) GDPR. Information required for tax, accounting and commercial record-keeping is processed under Article 6(1)(c) GDPR.

Order and accounting records are retained for the periods required under German commercial and tax law.

6. Payment Processing

Payments may be processed through Stripe or PayPal, depending on the method you select during checkout. The relevant payment provider receives the information necessary to process and secure the transaction. We do not receive or store complete payment-card details.

Payment processing necessary to complete your purchase is based on Article 6(1)(b) GDPR. The payment provider may also process information to comply with its own legal obligations and prevent fraud.

More information is available in the privacy policies of Stripe and PayPal.

7. Printful Order Fulfilment

We use Printful to produce and fulfil merchandise orders. To fulfil an order, the necessary customer and order information is transferred to Printful. This may include your name, delivery address, email address, telephone number where provided, the products ordered and relevant shipping information.

This transfer is necessary to produce, package and deliver your order and is based on Article 6(1)(b) GDPR.

Printful and its service providers may process information outside the European Economic Area. Where required, such transfers are protected using an applicable lawful transfer mechanism.

Further information is available in the Printful Privacy Policy.

8. Google Analytics

With your consent, this website uses Google Analytics to understand how visitors use the website. Google Analytics may process information including your device and browser details, approximate location, pages viewed, referring source, interactions with the website and the date and duration of visits.

Google Analytics is activated only after you consent to analytics cookies or comparable technologies through the cookie banner. The legal basis is Article 6(1)(a) GDPR.

You may withdraw or change your consent at any time through the website’s cookie settings. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Google may process information outside the European Economic Area. Where required, transfers are protected through an adequacy decision, standard contractual clauses or another lawful transfer mechanism.

Further information is available in the Google Privacy Policy.

9. Cookies and Consent Settings

This website uses cookies and similar technologies.

Technically necessary cookies may be used without consent where they are required to provide the website, shopping cart, checkout, security or other functions expressly requested by the visitor.

Optional analytics or marketing technologies are used only after you provide consent through the cookie banner. You can withdraw or change your consent at any time through the cookie settings available on the website.

Refusing optional cookies will not prevent you from accessing the basic functions of the website.

10. Social-Media Links

This website contains ordinary links to our profiles on third-party social-media platforms. No content from these platforms is embedded on the website.

Information is transmitted to the relevant platform only when you click a social-media link. Once you leave our website, the privacy policy of the relevant platform applies.

11. Recipients of Personal Data

Where necessary for the purposes described above, personal data may be provided to:

  • Squarespace for website hosting, forms, newsletters and online-shop functions;

  • Google for consent-based website analytics;

  • Stripe or PayPal for payment processing;

  • Printful and its delivery partners for merchandise production and fulfilment;

  • professional advisers and public authorities where required by law; and

  • other technical service providers acting on our instructions.

We do not sell personal data.

12. International Data Transfers

Some service providers may process personal data outside Germany or the European Economic Area.

Where required, transfers are based on an adequacy decision adopted by the European Commission, approved standard contractual clauses or another lawful safeguard under Chapter V of the GDPR.

13. Retention of Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as applicable law requires.

Different retention periods may apply to enquiries, newsletter consent records, customer orders, invoices and payment records. After the relevant period expires, personal data is deleted or anonymised unless continued retention is legally permitted or required.

14. Your Rights

Subject to the conditions of the GDPR, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate or incomplete data;

  • request deletion of your personal data;

  • request restriction of processing;

  • object to processing based on legitimate interests;

  • receive certain data in a portable format; and

  • withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at info@fraubar.de.

You also have the right to lodge a complaint with a data-protection supervisory authority. The supervisory authority responsible for private companies in Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de

15. Changes to This Privacy Policy

We may update this privacy policy when our website, services, service providers or legal obligations change.

Last updated: September 2026