Skip to content
Smoothie Vibes
Recipes
To the home page Legal

Privacy policy

This website works without cookies and without advertising, and it builds no user profiles. For a simple visitor count we use Cloudflare Web Analytics — also without cookies, see section 4. Whatever data does arise is set out here — in full and with no small print. The German version of this page is the authoritative one — this translation is provided for convenience.

1. Controller

The controller for data processing on this website is:

Smoothie Vibes
Michael Pfisterer
Martin-Maier-Str. 32
74223 Flein
Email: hallo@smoothievibes.de

No data protection officer has been appointed; the legal requirements for that do not apply. Full provider details are given in the Legal notice.

2. General principles

We process personal data only as far as this is necessary to run this website and to answer your enquiries. Depending on the case, the legal basis is your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), or our legitimate interest in technically secure operation (Art. 6(1)(f) GDPR).

You can use this website without providing any personal data. You do not have to sign in, create an account or leave an email address in order to read a recipe.

3. Hosting and server logs

When you visit this website, the hosting provider Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus automatically collects information that your browser transmits:

  • IP address of the requesting computer
  • Date and time of the request
  • Name and address of the file requested
  • Amount of data transferred and whether the request succeeded
  • Browser type and operating system used
  • Previously visited page (referrer)

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in technically faultless operation and in the security of the website. These logs are not combined with other data sources. The hosting provider keeps them only for as long as is necessary for secure operation and to fend off attacks, and deletes them afterwards.

A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

4. Cookies and analytics

This website sets no cookies. No profiles are built, and no advertising networks or social network buttons are embedded. That is why there is no cookie banner here — nothing is stored on or read from your device. The plain link to our TikTok profile is explained in section 6; it transmits nothing while you read.

To see how many people read the recipes, we count visits with Cloudflare Web Analytics (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). The service works without cookies and without local storage and does not recognise you on a later visit. Only aggregated statistics are recorded: the page viewed, the referring page, country, device type and browser.

When the measuring script loads from static.cloudflareinsights.com, your IP address is necessarily transmitted to Cloudflare; according to Cloudflare it is not used for the statistics. Cloudflare is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in simple audience measurement (Art. 6(1)(f) GDPR). More in Cloudflare’s privacy policy.

Your browser may keep parts of the page — images, fonts, style files — in its own cache. This happens locally on your device; we have no access to it.

5. Typefaces

The typefaces used are held directly on this website’s own server and are loaded from there. There is no connection to Google Fonts, Adobe Fonts or any other external provider. When the fonts load, your IP address is not passed to anyone outside the host.

6. Embedded third-party content

This website embeds no maps, no third-party videos, no social network feeds and no content from other providers. Images, videos, fonts and the site’s own scripts are held on the same server as the page itself — so the videos on the recipe pages do not come from YouTube, Vimeo or TikTok either. The only exception is Cloudflare’s measuring script from section 4.

In the footer and on the contact page you will find a link to our TikTok profile. That is an ordinary link with an icon held on our own server — not an embedded TikTok component. As long as you do not click it, no connection to TikTok is established and no data is sent there. Only when you click do you leave this website; from that point TikTok’s own privacy policy applies, over which we have no influence.

The other outward links lead to the licence of the typefaces used and to the competent supervisory authority, named in the Legal notice and further below respectively.

7. Contact form and email

If you write to us using the contact form or by email, we process the details you provide in order to answer your enquiry. Name, email address and message are required; giving a subject is optional.

The legal basis is your consent under Art. 6(1)(a) GDPR, which you give by submitting the form and can withdraw at any time with effect for the future — an informal email is enough. If your enquiry relates to a contract or its initiation, Art. 6(1)(b) GDPR applies in addition.

When the form is sent, the IP address it was sent from is also noted in the forwarded email. This serves solely to fend off automated spam messages (Art. 6(1)(f) GDPR). A hidden form field, which only automated scripts fill in, serves the same purpose; it processes no personal data.

The enquiry is forwarded by email to our mailbox and stored there. Your data stays with us until you ask us to delete it, withdraw your consent, or the purpose of storing it ceases to apply — at the latest once your enquiry has been dealt with and no follow-up questions are to be expected. Mandatory statutory retention periods remain unaffected.

8. Passing data on

Only two parties receive your data: the hosting provider Hostinger, which technically provides the website and the email delivery and acts as a processor bound by our instructions, and Cloudflare for the visitor count (section 4). Your IP address is transferred to Cloudflare, Inc. in the USA; the legal basis is the European Commission's adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR), under which Cloudflare is certified. Beyond that, your data is not passed on, not sold and not used for advertising.

9. Your rights as a data subject

You have the following rights in relation to us:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent given (Art. 7(3) GDPR)

For all of this, an informal message to hallo@smoothievibes.de.

You also have the right to lodge a complaint with a supervisory authority. The competent authority is that of the federal state in which the controller is based — Flein is in Baden-Württemberg, so:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20, 70173 Stuttgart
baden-wuerttemberg.datenschutz.de

10. Encryption

For security reasons this website uses SSL or TLS encryption. You can recognise this by the padlock symbol in your browser’s address bar. While the encryption is active, the data you send us cannot be read by third parties.

11. Changes to this policy

We adjust this privacy policy whenever something changes about the website or the legal situation — for instance if an external service is added one day after all. The version available here is the one that applies.

12. Status

This privacy policy is dated September 2026.

To the legal notice