Privacy

This privacy policy explains which personal data is processed when you visit fido-and-fluffy.com (“Fido & Fluffy – EAT. PLAY. LOVE.”), for what purposes and on what legal basis. It is based on the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications and Digital Services Data Protection Act (TDDDG).

This website is a static website. It has no user accounts, no forms and no comments, and it does not embed any third-party content. The only exception is Google Analytics, which is loaded only if you give your consent (section 5).

This is a translation. In case of discrepancies, the German version prevails.

1. Controller

The controller responsible for data processing on this website is:

Martin Marchaj Weserberglandstraße 29 48527 Nordhorn Germany

Email: hello@fido-and-fluffy.com

We have not appointed a data protection officer because the legal requirements for doing so (Art. 37 GDPR, Section 38 BDSG) are not met.

2. Summary

3. Hosting

The website and our email mailboxes are hosted by:

Mittwald CM Service GmbH & Co. KG Königsberger Straße 4-6 32339 Espelkamp Germany

The servers are located in Germany. We do not use a content delivery network (CDN). We have concluded a data processing agreement with Mittwald under Art. 28 GDPR, and Mittwald processes the data only on our instructions.

We use this host because we have a legitimate interest in operating the website and our email communication reliably and securely. The legal basis is Art. 6(1)(f) GDPR.

4. Server log files

Whenever you access the website, your browser technically has to send data to our server. The server records this data in log files:

Access logs:

Access logs are kept for 60 days and then deleted.

Error logs: If a technical error occurs during a request, the server logs it together with your full IP address. Error logs are deleted after 7 days.

We process this data to deliver the website, keep it running stably and securely, analyze errors and prevent misuse. The legal basis is Art. 6(1)(f) GDPR, and our legitimate interest follows from these purposes. We do not combine log data with other data sources and do not use it to create profiles.

On your first visit, a banner asks whether you allow Google Analytics. Until you click “Accept”, we do not set any cookies and do not load any script from Google. Apart from that, we do not store any information on your device without your consent, and we do not read any information from it beyond what is strictly necessary to deliver the website.

5.1 Storing your banner choice

We store your choice (“Accept” or “Decline”) in your browser’s local storage (localStorage) so that the banner does not appear again on every page. This entry stays in your browser and is not transmitted to us or to any third party. After 12 months, we ask you again. Storing your choice is strictly necessary to respect it and therefore does not require consent (Section 25(2) no. 2 TDDDG).

5.2 Google Analytics 4

If you consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose is audience measurement: it lets us see how often the website is visited, which pages and articles are viewed and how the website is used.

For this purpose, Google Analytics sets the cookies _ga and _ga_<ID>, which contain a randomly generated identifier and remain valid for up to 2 years. Google Analytics records the pages you view including their address (so for searches, also your search term), the page you came from, the date and time, interactions such as scrolling, clicks on external links and downloads, and information about your browser, operating system and device. Google derives your approximate location (e.g. country, region, city) from your IP address. For visits from the EU, Google Analytics does not store your IP address but discards it immediately afterwards.

We have disabled Google signals and ad personalization. All data-sharing options in Google Analytics are also switched off (Google products and services, modeling contributions and business insights, technical support, recommendations for your business). Google therefore processes the data solely as our processor under the Google data processing terms we have accepted and does not use it for its own purposes: the data is not used for benchmarking or for other Google products, and Google’s technical support has no access to it. Event data, on which the reports are based, is deleted automatically after 2 months. User-level data linked to the user identifiers is kept by Google Analytics for 14 months.

The sole legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future using the “Cookie settings” button in the footer of every page. When you do, the cookies _ga and _ga_<ID> are deleted and Google Analytics is no longer loaded. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

Google may also transfer the data to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR).

For more information, see Google’s Privacy Policy and How Google uses information from sites or apps that use its services.

6. Search function

The search on this website uses a search index that is loaded as a static file from our server. Your browser works out the search results itself, so your search term is not sent to any external search service. When you submit a search, however, the search term becomes part of the address (URL) of the results page, e.g. /en/search/?q=rabbit. When the results page is requested, the search term therefore also appears in our server’s access logs as part of the requested page (section 4). If you have accepted Google Analytics, Google Analytics records this address as the page viewed (page_location) and therefore also your search term (section 5.2). The information on server log files (section 4) also applies to loading the search files.

7. Contact by email

You can reach us by email, for example at hello@fido-and-fluffy.com. When you do, we process your email address, your name (if you provide it), the content of your message and the technical metadata of the email. We use this data only to handle your enquiry.

If your enquiry relates to a contract or to pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. In all other cases, we rely on Art. 6(1)(f) GDPR: our legitimate interest is to answer enquiries sent to us.

We delete your data once your enquiry has been dealt with, unless statutory retention periods (e.g. under commercial or tax law) require us to keep it longer. In that case, we delete the data when the retention period ends.

Please note that emails may not be encrypted along the entire transmission path. For this reason, please avoid sending us confidential information by unencrypted email.

Some articles contain links to external websites. If you click such a link, you leave our website, and the operator of the linked site is then responsible for any data processing. No data is transmitted to these providers before you click. None of these links are affiliate or advertising links.

9. Recipients and transfers to third countries

Recipients of personal data are our host Mittwald, acting as our processor (section 3), and, only if you have given your consent, Google Ireland Limited, also acting as our processor under Google’s data processing terms (section 5.2). Beyond that, we disclose data only where we are legally obliged to, for example to public authorities. Data leaves the European Union or the European Economic Area only through Google Analytics: Google may transfer it to Google LLC in the United States on the basis of the EU-U.S. Data Privacy Framework (section 5.2).

10. Your rights

You have the following rights regarding your personal data:

To exercise your rights, an informal message to hello@fido-and-fluffy.com is sufficient.

11. Right to object under Art. 21 GDPR

Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interests), you have the right to object to this processing at any time, on grounds relating to your particular situation. After an objection, we will no longer process your data. This does not apply if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves to establish, exercise or defend legal claims.

You can send your objection informally to hello@fido-and-fluffy.com.

12. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Die Landesbeauftragte für den Datenschutz Niedersachsen (Data Protection Commissioner of Lower Saxony) Prinzenstraße 5 30159 Hannover Germany

13. Obligation to provide data; no automated decision-making

You are under no legal or contractual obligation to provide us with personal data. Consenting to Google Analytics is voluntary. If you decline, you can still use the website without any restrictions. However, the website cannot be displayed without the technically required connection data (section 4), and we cannot reply to you without your email address.

No automated decision-making, including profiling (Art. 22 GDPR), takes place.

14. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” in your browser’s address bar and the padlock symbol. While encryption is active, third parties cannot read the data you send to us.

15. Updates and changes

We update this privacy policy whenever the website or the legal requirements change. The version published here applies.

Last updated: 27 October 2026