1. Data Protection at a Glance
1.1 General Information
The following information provides a simple overview of what happens to your personal data when you visit our website.
Personal data is any information by which you can be personally identified.
1.2 Data Collection on this Website
Controller responsible for data processing
Chocosite LLC (see Section 3.2 for details).
How do we collect your data?
Active collection: e.g. when you provide data via a contact form or by email.
Automatic collection: e.g. technical data such as browser type, operating system, referrer URL, IP address, and time of access.
Why do we use your data?
To ensure the error-free operation of the website.
To analyze user behavior.
Your rights
You have the right to:
Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
Withdrawal of consent (Art. 7 Sec. 3 GDPR)
Lodge a complaint with a supervisory authority
1.3 Analysis Tools and Third-Party Tools
When you visit our website, your browsing behavior may be statistically evaluated. Details are explained in Section 8.
2. Hosting
Provider:
ALL-INKL.COM – Neue Medien Münnich, Inh. René Münnich
Hauptstraße 68, 02742 Friedersdorf, Germany
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable and secure operation).
A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR is in place.
3. General Information and Mandatory Disclosures
3.1 Data Protection Principles
We treat your personal data confidentially and in accordance with statutory data protection regulations. Please note that complete protection of data against access by third parties via the internet is not possible.
3.2 Controller and EU Representative
Controller:
Chocosite LLC
3833 Powerline Rd, Suite 201
Fort Lauderdale, FL 33309, USA
Phone: +49 173 585 91 00
Email: dirk (@) chocosite.info
EU Representative (Art. 27 GDPR):
Dirk Murrnautzky
Phone: +49 173 585 91 00
Email: dirk (@) chocosite.info
3.3 Storage Period
We store personal data until the purpose ceases to apply or you request deletion. Statutory retention periods remain unaffected.
3.4 Legal Bases for Processing
Consent: Art. 6(1)(a) GDPR
Contract performance: Art. 6(1)(b) GDPR
Legal obligation: Art. 6(1)(c) GDPR
Legitimate interest: Art. 6(1)(f) GDPR
3.5 Data Transfers to Third Countries
Transfers to third countries (e.g. the USA) take place based on Standard Contractual Clauses or adequacy decisions.
3.6 Right to Withdraw Consent
You may withdraw any consent given at any time with future effect.
3.7 Right to Object (Art. 21 GDPR)
You may object at any time to the processing of your data based on legitimate interests.
3.8 Right to Lodge a Complaint
You may lodge a complaint with any data protection supervisory authority.
3.9 Right to Data Portability
You have the right to receive data processed by us automatically in a machine-readable format.
3.10 Right to Access, Rectification, and Erasure
You have the right to request free access, correction, or deletion of your personal data.
3.11 Right to Restrict Processing
In certain cases, you may request the restriction of processing of your data.
3.12 SSL/TLS Encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content.
3.13 Objection to Promotional Emails
We hereby object to the use of our contact data for the sending of unsolicited advertising.
4. Data Collection on this Website
4.1 Cookies
Our website uses session and persistent cookies.
Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest).
4.2 Complianz Privacy Suite
Provider: Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands.
Used to obtain and manage cookie consent.
Privacy Statement: https://complianz.io/legal/privacy-statement/
4.3 Server Log Files
Our hosting provider automatically collects data such as browser type, operating system, referrer URL, IP address, and time of request.
Legal basis: Art. 6(1)(f) GDPR.
4.4 Contact Form
If you use our contact form, we store your name, email address, and message.
Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(a) GDPR (consent).
4.5 Requests by Email or Phone
Data is stored for the purpose of processing your request.
4.6 WhatsApp
When contacting us via WhatsApp, your phone number is transmitted.
Provider: WhatsApp Ireland Ltd., Dublin.
Privacy policy: https://www.whatsapp.com/legal
4.7 Comment Function
When leaving comments, your IP address, email address, and timestamp are stored.
Legal basis: Art. 6(1)(a) GDPR.
5. Social Media
5.1 Facebook
Our website integrates elements of Facebook. Provider: Meta Platforms Ireland Ltd., Dublin.
Data transfer to the USA is based on EU Standard Contractual Clauses.
5.2 Instagram
Our website integrates elements of Instagram. Provider: Meta Platforms Ireland Ltd., Dublin.
Data transfer to the USA is also based on EU Standard Contractual Clauses.
6. Plugins & Tools
6.1 Google Fonts (Local Hosting)
This website uses Google Fonts stored locally. No connection to Google servers takes place.
7. Own Services
7.1 OneDrive
We integrate Microsoft OneDrive (Microsoft Ireland Operations Ltd., Dublin).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
A DPA with Microsoft is in place.
7.2 Dropbox
We integrate Dropbox (Dropbox International Unlimited Company, Dublin).
Legal basis: Art. 6(1)(f) GDPR.
A DPA with Dropbox is in place.
8. Analytics and Advertising Tools
8.1 Brevo (Sendinblue GmbH)
We use Brevo (formerly Sendinblue GmbH) for newsletter distribution and analysis.
Legal basis: Art. 6(1)(a) GDPR (consent).
Privacy Policy: https://www.brevo.com/de/legal/privacypolicy/
8.2 Google Analytics
Provider: Google Ireland Ltd., Dublin.
IP anonymization is enabled.
Legal basis: Art. 6(1)(a) GDPR (consent).
More info: https://policies.google.com/technologies/partner-sites
8.3 Google Tag Manager
Used for managing tracking codes. It does not store personal data.
Legal basis: Art. 6(1)(f) GDPR.
8.4 Google Conversion Tracking
Used to measure marketing effectiveness.
Legal basis: Art. 6(1)(a) GDPR (consent).
Privacy Policy: https://policies.google.com/privacy
Last updated: November 2025