Privacy Policy

1. Introduction

Thank you for visiting SpicyDju.com. Protecting your personal data is very important to us. Below, we explain how we collect, process, and use your data in compliance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

In short: this website has no user accounts, no contact forms, no analytics, no advertising and no cookies. The only personal data processed when you visit is the technical data your browser sends to our web server.

2. Controller

The data controller responsible for processing personal data on this website is:

3. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, Larnaca 6023, Cyprus. When you open a page, your browser automatically sends technical information to the server, which is stored briefly in log files:

• IP address
• Date and time of the request
• Page or file requested and the amount of data transferred
• Referrer URL (the page you came from)
• Browser type/version and operating system

We need this data to deliver the website to you and to keep it secure and stable, for example to detect and block attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Log files are stored only as long as they are needed for these purposes and are deleted automatically by our hosting provider thereafter, unless a security incident requires us to keep them longer. We have concluded a data processing agreement with our hosting provider under Art. 28 GDPR.

4. Contacting us and orders

If you contact us by email or WhatsApp, we process the information you send us (for example your name, email address or phone number and your message) in order to answer your request. If you place an order, we process the data needed to fulfil it, such as your name, delivery address and payment details.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or order, and otherwise our legitimate interest in answering enquiries under Art. 6(1)(f) GDPR.

• Order information: retained for up to 10 years to comply with tax and commercial law obligations.
• Other communication: retained for up to 3 years.

WhatsApp is a service of WhatsApp Ireland Limited (Meta). If you contact us via WhatsApp, WhatsApp’s own privacy policy also applies, and data may be transferred to the USA. Meta is certified under the EU-U.S. Data Privacy Framework. If you prefer not to use WhatsApp, please contact us by email.

5. Links to social media

Our website links to our profiles on Instagram, Facebook, WhatsApp and TikTok. These are ordinary links, not embedded plugins: no data is sent to these services when you visit our website. Only when you click a link are you taken to the respective service, where its own privacy policy applies.

6. Fonts

All fonts used on this website are stored on our own server. No connection is made to Google or any other font provider.

7. Cookies

This website does not use cookies. We only store your choice from the “Manage Consent” banner in your browser’s local storage, so we don’t ask you again on every page. This is strictly necessary and the legal basis is § 25(2) no. 2 TDDDG. Optional tools such as statistics or marketing are currently not in use and would only be loaded with your consent (Art. 6(1)(a) GDPR). For details, see our Cookie Policy.

8. Your rights

Under GDPR, you have the following rights regarding your data:

• Access (Art. 15 GDPR): Request information about your stored personal data.
• Rectification (Art. 16 GDPR): Correct inaccurate or incomplete data.
• Erasure (Art. 17 GDPR): Request deletion of your data.
• Restriction (Art. 18 GDPR): Limit the processing of your data.
• Data Portability (Art. 20 GDPR): Receive your data in a structured format.
• Objection (Art. 21 GDPR): Object to processing based on legitimate interest.
• Withdraw Consent (Art. 7(3) GDPR): At any time for future processing.

To exercise your rights, please contact us using the details in Section 2. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

9. Data security

We implement technical and organizational measures, including SSL/TLS encryption of all connections to this website, to protect your personal data from unauthorized access or breaches.

10. Changes to this Privacy Policy

We may update this policy from time to time, for example when we add new features or services. Changes will be published on this page.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Last updated: 11.09.2026