Privacy notice.

The controller for the data processing described here is:

Masala Cart UG (haftungsbeschränkt)

Zollhofstraße 4

67061 Ludwigshafen am Rhein

Germany

Telephone: +49 1523 1776884

Email: hallo@masalacart.de

The site is hosted on Microsoft Azure, a service of Microsoft Ireland Operations Limited (Dublin, Ireland). Microsoft delivers the pages themselves through its worldwide network. What you enter in our forms is processed and stored in Germany (Frankfurt region). Microsoft records technical access data such as the requesting IP address, the time and the page requested, so that the site can be delivered and protected against attack. Microsoft processes this data on our behalf under a data processing agreement. In doing so, Microsoft may also process data in the USA. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework, and the EU's standard contractual clauses apply in addition. The legal basis is our legitimate interest in a secure, functioning site.

We send our emails, for example the acknowledgement of your question, the confirmation email and our offers, through Amazon SES, a service of Amazon Web Services EMEA SARL (Luxembourg), from a data centre in Frankfurt am Main. Amazon processes your email address and the content of the email on our behalf under a data processing agreement. In doing so, Amazon may also process data in the USA. Amazon is certified under the EU-U.S. Data Privacy Framework, and the EU's standard contractual clauses apply in addition.

When you write to us, through the form or by email, we store your name, your email address and your message so that we can answer you. For a message sent through the form, we also store your IP address (encrypted) so that we can look into misuse. We store emails sent to us in our mailbox on Microsoft 365, which we obtain through the provider GoDaddy. The legal basis is our legitimate interest in answering enquiries and preventing misuse. Where your message concerns an order, taking steps before a contract is a further legal basis.

We do not measure whether you open our emails or click links in them. Our emails contain no tracking pixels and no tracking links.

If you do not confirm a consent to offers, we delete it after 30 days. We delete the IP address and browser identifier we keep as proof of a consent after 12 months. A confirmed consent lasts until you withdraw it. After that, we keep your email address (encrypted), the wording and the times for 3 more years so that we can prove the consent. Then we delete them and keep only a check value of your address, so that we do not email you again. We delete messages sent through the form, with their IP address, after 24 months. We delete emails to our mailbox once we no longer need them for our answer or for legal retention duties.

You have the right of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. You may withdraw a consent at any time with effect for the future, with the unsubscribe link in any offer email or by emailing us. You may also complain to a supervisory authority. Our contact details are above, under “Who is responsible”.

This site sets no cookies and uses no analytics.