Katchi Fried Ice CreamBack to the site

Privacy Policy

1. Controller

Katchi Ice Cream GmbH
Represented by the managing director Conny Köhler
Oranienburger Str. 88/89
10178 Berlin, Germany
Email: info@katchi-ice.com

2. Collection and storage of personal data

When you visit this website, information is automatically transmitted to the server and stored temporarily in a log file:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the file retrieved
  • Website from which the access originated (referrer URL)
  • Browser and operating system used

The legal basis is Art. 6 (1)(f) GDPR. The data serve the secure and stable operation of the site and are deleted after a short period.

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes personal data on our behalf and is contractually obliged to take appropriate technical and organisational data protection measures. Further information can be found in Vercel’s privacy policy.

4a. Cookies and analytics

This site sets no cookies. We load no advertising scripts from third parties. For plain audience measurement we use a cookieless method — see the following section.

4b. Audience measurement with Vercel Web Analytics

To see how many people visit our pages and which regions they come from, we use Vercel Web Analytics provided by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.

No cookies are set and nothing is stored in your browser. For each page view we record: the time, the address called up, the referring page, an approximate location (country, region, city), operating system, browser and device type. Repeat views are distinguished by a hash computed from the request, which is discarded after 24 hours. Your IP address is not stored and not linked to the data.

From the address bar we transmit exactly one parameter: an indication of which of our domains forwarded you (for example gelatofritto.com). Everything else is removed before a data point is created — in particular the identifier from the redirect after payment.

In addition, we count three steps of the pre-order: opening the order window, clicking “Continue to payment” and completing the payment. Only the language, device type, the place on the page the order started from, where applicable the store, and the campaign source are transmitted — no name, no email address, no order number.

The legal basis is Art. 6 (1)(f) GDPR — our legitimate interest in understanding how our site is used. No consent is required because no information is stored on or read from your device (§ 25 TDDDG). Further details: vercel.com/docs/analytics/privacy-policy.

4c. Audience measurement with Ahrefs Web Analytics

We also use Ahrefs Web Analytics by Ahrefs Pte. Ltd., 16 Raffles Quay, #33-03 Hong Leong Building, Singapore 048581, to see which search terms and pages bring visitors to us.

No cookies are set and nothing is stored in your browser. For each page view, the following is recorded: the address visited, the referring page, the page title, browser language, screen size, operating system, browser and device type, and clicks on links. We transmit the address shortened in the same way as for Vercel — without any parameters except the domain hint, and in particular without the identifier from the redirect after payment. Ahrefs only evaluates the data in aggregate and per day and, according to its own information, does not store personal data.

Processing takes place outside the European Union. There is no EU adequacy decision for Singapore; Ahrefs bases the transfer on the EU Standard Contractual Clauses. The legal basis is Art. 6 (1)(f) GDPR — our legitimate interest in understanding how our site is found. No consent is required because no information is stored on or read from your device (§ 25 TDDDG). Further details: help.ahrefs.com — About Ahrefs Web Analytics.

5. Campaign parameters in session storage

If you open the site via a campaign or creator link, the address contains parameters such as utm_source or utm_creator. These parameters are stored in your browser’s session storage so that we can see how our offers are found.

Only those parameters from the address you called up are stored — no identifier that identifies you personally. The data stay in your browser and are deleted as soon as you close the tab. They are not passed to the audience measurement described in the following section — we remove the address parameters before a data point is created there.

The legal basis is Art. 6 (1)(f) GDPR — our legitimate interest in measuring the reach of our own campaigns.

6. Pre-order registration “Fried at Home” and partner enquiries

If you register for the “Fried at Home” pre-order, we process your email address and the voluntary details you provide (first name, postcode, preferred flavour, pack size, number of people) in order to notify you once shipping starts. The registration only takes effect once you click the link in our confirmation email (double opt-in). You will only receive marketing emails beyond that one message if you have separately consented.

If you send us a partner enquiry, we process the details from the form (company, name, email, optionally phone, number of employees, type of use, preferred period and message) in order to answer your enquiry and contact you about terms and availability.

If you arrived via a creator link, we store the creator code with your entry so that we can settle the collaboration with that creator. The forms are transmitted to our own server (api.katchi-ice.com).

The legal basis is your consent (Art. 6 (1)(a) GDPR), and for partner enquiries also the initiation of a contract (lit. b). You may withdraw your consent at any time with effect for the future — via the unsubscribe link in every email or informally to info@katchi-ice.com. We delete the data once the purpose no longer applies or you withdraw.

7. Pre-ordering, payment and collection

If you pre-order Fried Ice Cream for collection, we process your first name, last name and email address as well as the order details: the flavours and quantities you choose, the shop and the collection time. We need these data to accept and prepare your order and to identify it when you collect it.

After the purchase you receive an email with your collection code and a personal link. Through that link you can change the day and time of collection yourself. The link contains a random identifier; anyone who has it can see your order, so please do not pass it on.

The legal basis is Art. 6 (1)(b) GDPR — the processing is necessary to perform the purchase contract. We retain order and invoice data for as long as commercial and tax retention periods require (§ 257 HGB, § 147 AO) and delete them afterwards.

If you arrived via a creator link, we store the creator code with your order so that we can settle the collaboration with that creator. The legal basis is Art. 6 (1)(f) GDPR — our legitimate interest in a traceable settlement.

8. Payment processing via Stripe

Payments are processed via Stripe. For customers in the European Economic Area, the provider is Stripe Payments Europe, Limited, One Wilton Park, Wilton Place, Dublin, D02 FX04, Ireland.

Your card details never reach us. For payment you are redirected to a page operated by Stripe. You enter your card number, expiry date and security code there; they are processed exclusively by Stripe and are neither transmitted to us nor stored by us. From Stripe we only receive confirmation of whether the payment succeeded, together with the amount, the time, the payment method and a transaction reference.

Stripe processes some of your data as an independent controller, in particular for fraud prevention and to meet its own legal obligations under payment services and anti-money-laundering law. Stripe describes which data these are in its own privacy policy: stripe.com/privacy.

Data may be transferred to the USA in the process. Stripe is certified under the EU-US Data Privacy Framework and additionally relies on the standard contractual clauses adopted by the European Commission.

The legal basis for passing payment data to Stripe is Art. 6 (1)(b) GDPR: without a payment service provider the purchase contract cannot be performed.

9. Your rights

You have the right:

  • to obtain information about the data stored about you (Art. 15 GDPR)
  • to have inaccurate data corrected (Art. 16 GDPR)
  • to have your data erased (Art. 17 GDPR)
  • to request restriction of processing (Art. 18 GDPR)
  • to data portability (Art. 20 GDPR)
  • to object to processing (Art. 21 GDPR)
  • to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority is the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin, Germany.

10. Status

This privacy policy is dated October 2026.

11. Binding version

This is a translation provided for your convenience. In case of any discrepancy, the German version prevails.