Data Protection (GDPR/KVKK)
Information on how your personal data is processed under GDPR and KVKK.
Last updated: April 2025
Data Controller
Under Law No. 6698 on the Protection of Personal Data and the EU General Data Protection Regulation (GDPR), the data controller is:
CarnEt Fleisch GmbH
Ravensburg, Germany
info@carnet-fleisch.de
Personal Data Processed
The following personal data may be collected and processed:
- Identification data: first and last name
- Contact data: email address, phone number
- Security data: IP address, session information
- Request content: form messages, application data
Purposes of Data Processing
- Responding to contact and support requests
- Evaluating franchise and cooperation applications
- Ensuring website security and technical sustainability
- Fulfilling legal obligations
Legal Basis for Processing
Your data is processed on the following legal bases:
- Art. 6(1)(a) GDPR: Consent (contact form)
- Art. 6(1)(b) GDPR: Performance of a contract (cooperation requests)
- Art. 6(1)(f) GDPR: Legitimate interests (technical logs, website security)
- Art. 6(1)(c) GDPR: Legal obligation
Data Sharing and Third Parties
Your personal data will not be shared with third parties for commercial purposes without your explicit consent. For email notifications from forms, the GDPR-compliant service Resend (resend.com) is used. Sharing with competent authorities may occur when legally required.
Retention Periods
- Contact form data: maximum 2 years
- Technical logs: 90 days
- Legally required data: as prescribed by applicable law
Your Rights as a Data Subject
Under GDPR and Law No. 6698, you have the following rights:
- To learn whether your personal data is being processed
- To request information about the processing
- To learn the purpose of processing and whether it is used for that purpose
- To know the third parties to whom data is transferred domestically and abroad
- To request correction of incomplete or inaccurate data
- To request deletion or destruction of data
- To request restriction of processing
- To exercise the right to data portability
- To object to automated processing
- To lodge a complaint with the competent supervisory authority (Germany: Landesbeauftragter fur Datenschutz)
Exercising Rights and Contact
To exercise the above rights, please send a notification with proof of identity to info@carnet-fleisch.de Your requests will be answered within 30 days.
For questions about these documents, please visit our contact page or send an email to info@carnet-fleisch.de.