Skip to content
Café Faust

Privacy policy

This policy describes how personal data is processed when you visit our website or use the contact form.

1. Controller

Freunde des Faust e.V.
Geschwister-Scholl-Str. 24c, 70174 Stuttgart, Germany
Email: info@cafefaust.de

2. Hosting and server logs

When you access the website, the web server processes technically necessary data. This may include your IP address, time of access, requested address, amount of data transferred, referrer, browser, and operating system. Processing is necessary to deliver the site and ensure its stability and security under Art. 6(1)(f) GDPR. Logs are kept only as long as required for operation, troubleshooting, and abuse prevention, then deleted or anonymised. Where we use a hosting provider, it processes data on our behalf under an agreement pursuant to Art. 28 GDPR.

3. Contact form, CAPTCHA, and email

When you contact us, we process your name, email address, message, selected language, and technically necessary connection data to transmit and respond to your request. The website sends these details to our server-side /api/contact endpoint. From there they go to our content management system, which delivers them to us as an email through the mail servers of netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. netcup processes the message on our behalf under a data processing agreement pursuant to Art. 28 GDPR. No data is sent to an external CAPTCHA provider.

The arithmetic CAPTCHA prevents abuse and spam. Its task and expiry are signed locally; your answer is checked only and is not stored with the message. Processing requests before entering into a contract is based on Art. 6(1)(b) GDPR; other requests and abuse prevention are based on our legitimate interests under Art. 6(1)(f) GDPR. We delete requests once they have been handled unless statutory retention duties or legitimate interests require longer storage.

4. Map on the contact page

The map on the contact page is based on OpenStreetMap data but is hosted entirely on our own server: map data, fonts, and symbols are loaded from there. No connection to OpenStreetMap or any other provider is made; only the server logs described in section 2 are created. Only the "Open on OpenStreetMap" link takes you to openstreetmap.org; from then on, section 6 applies.

5. Instagram posts on the home page

The photos in the "Latest on Instagram" section of the home page are copies of our own Instagram posts. Our server fetches them from Instagram at regular intervals and delivers them itself. Loading the page does not connect to Instagram for this, and no data is sent to Meta. Only clicking a photo takes you to the post on instagram.com; from then on, section 6 applies.

6. External links

This website links to Instagram, to OpenStreetMap, and to our event request form, which is hosted on Google Forms. Data is transferred to the respective provider only when you follow one of those links. Meta Platforms Ireland Ltd. is responsible for Instagram, the OpenStreetMap Foundation for OpenStreetMap, and Google Ireland Ltd. for Google Forms; each provider's own privacy policy applies. Whatever you enter in the event form is processed by Google on our behalf; we receive the responses and use them solely to plan the requested event. If you prefer to reach us without involving Google, use the contact form or send us an email.

7. Cookies, local storage, and analytics

We use no cookies, no tracking or analytics tools, and store nothing in your browser's local storage.

8. Recipients and security

Access is limited to association members who need it to handle your request and to technically necessary processors. Public services are made available through a reverse proxy. We do not use automated decision-making or profiling.

9. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, data portability, and objection, and may withdraw consent for the future. Contact the email address above to exercise these rights. You may also complain to a data protection authority, in particular the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

Last updated: August 2026