Privacy

The controller for personal data on this website and in the online shop is Little London GmbH, Tal 31, 80331 Munich, Germany, phone 089 / 122239470, email mario@little-london.de. Further mandatory details are in the imprint.

Visiting the website is not consent. We process data only where the General Data Protection Regulation (GDPR) allows it, or where you have consented.

When you open a page, the hosting provider processes connection data that is technically required, such as IP address, date and time, the page requested and the browser type. This is necessary to deliver the site and to protect it against abuse.

When you order, we process the details from checkout: name, email address, phone number, billing and delivery address, items ordered, amount and the payment method you chose. You enter card and PayPal details directly with the payment provider. We do not store full card numbers.

Contact form, withdrawal form and job applications: name, email, phone, message and, for applications, the CV and the department you select. Applications are sent to Thoms@little-london.de. General guest messages via the footer go to gr@little-london.de.

Newsletter: email address and language. The subscription is stored only after you open the link in the confirmation email.

• Contract and pre-contractual steps (Art. 6 (1) (b) GDPR): orders, payment, delivery, vouchers, tastings, and customer messages about an order.
• Legal obligation (Art. 6 (1) (c) GDPR): retention of invoices and business correspondence under commercial and tax law.
• Consent (Art. 6 (1) (a) GDPR and section 25 TDDDG): newsletter, functional cookies and marketing cookies. You may withdraw consent at any time with effect for the future.
• Legitimate interests (Art. 6 (1) (f) GDPR): cookies that are technically required, site security, prevention of abuse, and server-side error analysis.
• Applications (Art. 6 (1) (b) GDPR and section 26 BDSG): we process documents you send us for a job application only to decide whether to enter into an employment relationship.

We share data only where that is necessary for the purpose. Recipients are:

• Vercel Inc. – delivery of the website.
• Supabase – storage of orders, the catalogue and newsletter sign-ups.
• Stripe – payment by credit card, PayPal and the other methods offered at checkout, including the fraud prevention required for that payment.
• Resend – sending emails such as the order confirmation, the newsletter confirmation and replies to forms.
• Sentry – error reports. In the browser we load Sentry only if you allow functional cookies. Server-side error reports may be sent to a Sentry endpoint in the EU even without that consent.
• OpenTable GmbH, Schumannstr. 27, 60325 Frankfurt am Main – only if you use online reservation. You leave our site for that. OpenTable’s notice: https://www.opentable.de/legal/privacy-policy

Google Maps is not embedded on our pages. The map link in the footer opens Google Maps in a separate visit. Google then processes data under its own notice: https://policies.google.com/privacy?hl=en

Vercel, Resend, and parts of the processing by Stripe and Sentry may take place in the United States. Where the provider is certified under the EU-US Data Privacy Framework, the transfer relies on the European Commission’s adequacy decision. Otherwise the Commission’s standard contractual clauses apply. You can request a copy, or a pointer to where those safeguards are published, from mario@little-london.de.

On your first visit to the shop and the website you can accept all cookies, allow necessary cookies only, or save your own choice. Essential cookies stay on, because the shop, the language setting and payment would not work without them. We set functional cookies and marketing cookies only after your choice.

• Essential, no consent: little-london-eshop-locale (language), little-london-cookie-consent (your choice), __stripe_mid and __stripe_sid (technical processing of the payment).
• Functional, consent only: payment-service cookies for convenience and device recognition, and browser error analysis with Sentry.
• Marketing, consent only: the analytics cookie _ga, where the payment service sets it.

We store the choice for 180 days. After that we ask again. You can change the choice in the footer under “Cookies”.

• Orders and invoices: for the statutory retention periods, generally six years for business correspondence and eight years for accounting records. Other documents may still have to be kept for ten or six years.
• Newsletter: until you unsubscribe. The confirmation link is valid for 48 hours.
• Applications: for the duration of the process and for up to six months afterwards, unless a statutory duty requires longer retention.
• Contact and withdrawal messages: for as long as handling the request and any statutory periods require.
• Server logs and error reports: only for as long as security and troubleshooting require.

You have the right of access, rectification, erasure, restriction of processing, data portability, and to object to processing based on Art. 6 (1) (f) GDPR. You may withdraw consent at any time. Processing that took place before the withdrawal remains lawful. You may object at any time to the use of your data for direct marketing (Art. 21 (2) GDPR). You can unsubscribe from the newsletter via the link in every marketing email or by writing to mario@little-london.de.

You may lodge a complaint with the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany, https://www.lda.bayern.de.

For any request about your data, write to mario@little-london.de .