Privacy Policy
Last updated 20 April 2026
The protection of your personal data is very important to us. Below, we provide detailed information on how we handle your data. With regard to the terminology used (e.g. “processing” or “controller”), we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Data Controller:
Owner: Franziska Beck
Via Case Nuove, n. 50
95030 Mascalucia (CT)
Italy
Email: info@eatlovesicily.com
1. Personal Data
1.1. Access data, hosting and data processing for contract fulfilment and customer account creation
You may visit our website without providing personal data. Each time a webpage is accessed, the web server automatically stores a so-called server log file, which may include the name of the requested file, your IP address, date and time of access, data volume transferred, and the requesting provider (access data). These data are used solely to ensure the proper functioning of the website and to improve our services.
This processing is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in the correct presentation of our services. All access data is deleted no later than seven days after the end of your website visit.
When you place an order or attempt to place an order, we collect personal data such as your name, billing address, delivery address, payment information (including credit card or bank details), email address, and phone number. These are referred to as “order information”.
Where we refer to “personal information” in this policy, this includes both device information and order information.
We process your data pursuant to Article 6(1)(b) GDPR for contract fulfilment and order processing. After completion of the contract or deletion of your customer account, your data will be restricted and deleted after statutory retention periods (tax and commercial law), unless further use has been explicitly consented to or is legally permitted.
You may request deletion of your customer account at any time by contacting us or via the customer account functionality.
1.2. Hosting services by third-party providers
We use a third-party provider for hosting and website display services. This is done to ensure secure and efficient presentation of our website, based on our legitimate interests under Article 6(1)(f) GDPR.
All data collected via this website or forms are processed on the provider’s servers. Processing outside this framework does not take place.
The hosting provider acts strictly on our behalf in accordance with Article 28 GDPR
The hosting provider is located in Germany.
2. Data Sharing
2.1. Shipping service providers
For contract fulfilment under Article 6(1)(b) GDPR, we share your data via SendCloud with the shipping company responsible for delivery.
If shipping is handled via SendCloud (SendCloud Srl, Via F.lli Gabba 1/A, 20121 Milan, Italy), your data will be used exclusively for order processing. Details can be found at: www.sendcloud.it/privacy-policy/
You may withdraw consent at any time by contacting info@eatlovesicily.com or the shipping provider directly. After withdrawal, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, where such use is legally permitted and where we inform you of this in this privacy policy.
2.2. Payment service providers (excluding prepayment)
2.2.1. Stripe
If you choose payment methods such as Google Pay, Apple Pay, Amazon Pay, “credit card: Visa, American Express or Mastercard”, Giropay, and Sofortüberweisung, which are processed by the payment service provider Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland, to handle payments in our shop at www.sizilianischekueche.de/shop, personal data will be transmitted to Stripe Payments Europe Ltd in the course of payment processing.
Stripe Payments Europe Ltd is solely responsible for the processing of this data. The use of the services provided by Stripe Payments Europe Ltd is entirely subject to its privacy policy and terms of use. Details on how Stripe Payments Europe Ltd handles your data, as well as information on your rights and settings options for protecting your personal data, can be found at: https://stripe.com/de/privacy
2.2.2. PayPal
When selecting the payment method PayPal, payment processing is carried out via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).
We transmit your personal data to PayPal to the extent necessary in accordance with Art. 6 (1) lit. b GDPR. For the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – “purchase on account” or “installment payment” via PayPal, PayPal reserves the right to conduct a credit check.
For this purpose, your payment data may be transmitted to credit agencies in accordance with Art. 6 (1) lit. f GDPR on the basis of PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the result of the credit assessment in relation to the statistical probability of default for the purpose of deciding whether to provide the respective payment method.
The credit assessment may include probability values (so-called score values). Where score values are included in the credit assessment result, they are based on a scientifically recognized mathematical-statistical procedure. Among other factors, but not exclusively, address data is included in the calculation of the score values.
Further information on which data is collected by PayPal can be found in PayPal’s privacy policy, available at: PayPal Privacy Policy.
You may object to this processing of your data at any time by notifying PayPal. However, PayPal may remain entitled to process your personal data if this is necessary for the contractual payment processing.
2.3. Postal delivery via Poste Italiane
If necessary, we may transmit your data to Poste Italiane S.p.a. (Viale Europa, 190, 00144 Roma, Italy) for postal delivery of invoices or reminders.
2.4. Google Fonts
We integrate fonts (“Google Fonts”) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Privacy policy: https://www.google.com/policies/privacy/ , Opt-out: https://adssettings.google.com/authenticated
2.5. Data processing in third countries
Some service providers may process personal data in third countries, particularly the USA. In such cases, appropriate safeguards under Article 46 GDPR (e.g. Standard Contractual Clauses) are applied.
3. Email Newsletter
3.1. Subscription and withdrawal
If you subscribe to our newsletter, we use the data required for this purpose or data separately provided by you to regularly send you our email newsletter based on your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR.
You can unsubscribe from the newsletter at any time either by sending a message to info@sizilianischekueche.de or via the dedicated unsubscribe link included in each newsletter. After unsubscribing, we will delete your email address unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, where such use is legally permitted and where we inform you of this in this privacy policy.
3.2. Double opt-in and logging
Subscription to our newsletter takes place using a so-called double opt-in procedure. This means that after registering, you will receive an email asking you to confirm your subscription. This confirmation is necessary to prevent anyone from signing up using someone else’s email address. Please also check your spam folder if you do not receive the confirmation email.
Newsletter registrations are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the registration and confirmation time as well as the IP address.
4. Comments
4.1. Comment-form
When visitors leave comments, we collect the data shown in the comment form as well as IP address and browser user agent to prevent spam.
An anonymized string (also called a hash) may be created from your email address and provided to the Gravatar service to check whether you are using it. You can find the privacy policy of the Gravatar service here: https://automattic.com/privacy/. After your comment has been approved, your profile picture will be publicly visible in the context of your comment.
4.2. Storage duration
For users who register on our website, we also store the personal information provided in their user profiles. All users can view, edit, or delete their personal information at any time (except for the username, which cannot be changed). Website administrators can also view and modify this information.
5. Cookies, Web Analytics, Security and Plugins
5.1. Cookies
To make visiting our website attractive and to enable the use of certain functions, to display suitable products, or for market research purposes, we use so-called cookies on various pages. This serves to safeguard our legitimate interests in an optimized presentation of our offer, which prevail within the balancing of interests in accordance with Art. 6 (1) sentence 1 lit. f GDPR.
Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain stored on your device and enable us to recognize your browser the next time you visit (persistent cookies). The storage duration can be found in the overview within your web browser’s cookie settings. More information about this and a list of all cookies used on this website can be found here.
You can configure your browser to be informed about the setting of cookies and to decide on their acceptance individually, or to exclude acceptance of cookies for specific cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these instructions for the respective browsers under the following links:
Internet Explorer™: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=en_EN
Chrome™: https://support.google.com/chrome/answer/95647?hl=en
Firefox™ https://support.mozilla.org/en/kb/cookies-erlauben-und-ablehnen
Opera™ : http://help.opera.com/Windows/10.60/en/cookies.html
Disabling cookies may limit website functionality.
5.2. Web analytics (Matomo)
5.2.1. Scope of the processing of personal data
We use the open-source software tool Matomo (formerly PIWIK) on our website to analyze users’ browsing behavior. This is an open-source web analytics tool. With Matomo, no data is transmitted to servers that are outside the control of eatlovesicily.com. Without your consent, Matomo does not collect any session data.
Matomo uses cookies. These text files are stored on your computer and allow our website sizilianischekueche.de to analyze the use of its website. For this purpose, the information generated by the cookie about website usage is transmitted to and stored on the server of eatlovesicily.com, where it can be evaluated to analyze user behavior. Your IP address serves as an anonymous identifier for us; we have no technical means of using it to identify you as a registered user. You remain anonymous as a user. .
sizilianischekueche.de / eatlovesicily.com considers this analysis an integral part of its online service. We use it to further improve the website and adapt it more closely to the needs of our users.
If you consent to web analytics via Matomo, the following data will be collected when you access individual pages of our website:
(1) 2 bytes of the IP address of the user’s accessing system
(2) The visited website
(3) The website from which the user accessed the visited website (referrer)
(4) The subpages that are accessed from the visited website
(5) The time spent on the website
(6) The frequency of visits to the website
The software runs exclusively on the servers of our website. The storage of users’ personal data takes place only there. The data is not passed on to third parties.
You can choose here whether a web analytics cookie may be stored in your browser to allow Sizilianischekueche.de to collect and analyze statistical data.
Matomo settings:
5.2.2. Legal basis for the processing of personal data
The legal basis for the processing of users’ personal data is Art. 6 (1) lit. a GDPR.
5.2.3. Purpose of data processing
The processing of users’ personal data enables us to analyze users’ browsing behavior. By evaluating the data obtained, we are able to compile information on the use of individual components of our website. This helps us to continuously improve our website and its user-friendliness. By anonymizing the IP address, due consideration is given to users’ interest in the protection of their personal data.
5.2.4. Retention period
The data is deleted as soon as it is no longer required for our recording purposes. The generated statistics and underlying data are not deleted.
5.2.5. Right to object and erasure option
Cookies are stored on the user’s computer and transmitted to our website from there. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.
Further information on the privacy settings of the Matomo software can be found at the following link: https://matomo.org/docs/privacy/.
5.3. Use of Wordfence Security
To secure our online offering, we use the “Wordfence Security” service provided by Defiant Inc., 800 5th Ave., Suite 4100, Seattle, WA 98104, USA. The use of this service is based on our legitimate interests within the meaning of Art. 6 (1) lit. f GDPR.
The website uses this plugin to protect against viruses and malware and to defend against attacks by cybercriminals. To determine whether a visitor is a human or a bot, the plugin uses cookies. For the purpose of protecting against brute-force and DDoS attacks or comment spam, IP addresses are stored on Wordfence servers. IP addresses classified as harmless are placed on a whitelist.
Wordfence Security secures our website and thus also protects website visitors from viruses and malware. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR.
Further information on the collection and use of data by Wordfence Security can be found in Defiant’s privacy policy: https://www.wordfence.com/privacy-policy/.
5.4. hCaptcha
We use hCaptcha (hereinafter “hCaptcha”) on this website. The provider is Intuition Machines Inc., 2211 Selig Dr, Los Angeles, CA 90026, United States (hereinafter “IMI”).
hCaptcha is used to verify whether data entered on this website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, hCaptcha analyzes the behavior of website visitors based on various characteristics.
This analysis starts automatically as soon as the website visitor accesses a website with hCaptcha enabled. To analyze this, hCaptcha evaluates various information (e.g. IP address, time spent on the website, or mouse movements made by the user). The data collected during the analysis is transmitted to IMI.
If hCaptcha is used in “invisible mode,” the analysis runs entirely in the background without informing website visitors that an analysis is taking place.
The storage and analysis of data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in protecting its online services from abusive automated access and spam. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting). Consent can be withdrawn at any time.
Data processing is based on the Standard Contractual Clauses (SCCs), which are included in IMI’s Data Processing Addendum to its Terms and Conditions or data processing agreements.
Further information about hCaptcha can be found in the privacy policy and terms of use at the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.
For advertising purposes (Art. 6 (1) lit. f GDPR)
6.1. Trustpilot
We use Trustpilot as our customer review service. Trustpilot is a service provided by Trustpilot Inc. -.5 Pennsylvania Plaza 6th Floor, New York, NY 10001 (USA).
Trustpilot provides a form for submitting feedback about our website and the products we sell to customers. You will receive the link to leave a review via email.
All information is provided on a completely voluntary basis, and the results are published at https://de.trustpilot.com/ under a freely chosen pseudonym. Service and product reviews may also be published on our website as well as in Google search results. Trustpilot stores your data only if you create your own Trustpilot account.
Further information on data protection with this service provider can be found at https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms.
7. Contact options and your rights
7.1. Your rights
As a data subject, you have the following rights:
- pursuant to Art. 15 GDPR, the right to request information, to the extent specified therein, about your personal data processed by us;
- pursuant to Art. 16 GDPR, the right to request without undue delay the rectification of inaccurate personal data or the completion of your personal data stored by us;
- pursuant to Art. 17 GDPR, the right to request the deletion of your personal data stored by us, unless further processing for the following reasons:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation;
- for reasons of public interest; or
- for the establishment, exercise, or defense of legal claims.
is necessary;
- pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as:
- the accuracy of the data is contested by you;
- the processing is unlawful, but you oppose the erasure of the data;
- we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims; or
- you have objected to the processing pursuant to Art. 21 GDPR.
- pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request the transfer of those data to another controller;
- pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence, place of work, or the place of our company’s registered office.
For questions regarding the collection, processing, or use of your personal data, as well as for requests for information, correction, blocking, or deletion of data, or for the withdrawal of consent or objection to a specific use of data, please contact us directly by email at info@eatlovesicily.com or using the contact details provided in our legal notice (imprint).
8. Right to object
8.1. Description of the right to object
To the extent that we process personal data as described above in order to safeguard our legitimate interests that prevail within a balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other purposes, you only have a right to object if there are reasons arising from your particular situation.
After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims.
This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.
