HomePrivacy policy
Privacy policy
How we handle your data.
Controller within the meaning of the General Data Protection Regulation (GDPR)
Safi Food GmbH
Billbrookdeich 166
22113 Hamburg
Phone: +49 40 63912842
E-mail: info@
The full privacy policy of Safi Food GmbH is currently being added. Until then, we will be happy to answer your questions about data protection via the contact details above. The technical information below describes how this ordering portal handles your data from a technical point of view; it does not replace the privacy policy. Your rights of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR) and your right to lodge a complaint with a data protection supervisory authority apply regardless.
Technical information about this ordering portal
How the technology behind this portal works, in addition to the privacy policy above. The deletion periods stated apply to the data in the live portal; in the backup copies, deleted data remains for up to 14 days. These daily backups are stored on the server in Germany on which the portal runs.
Only necessary cookies – and only when you take action
When you sign in, we set a session cookie. It is technically necessary so that you stay signed in and your orders are securely assigned to your account. It normally expires as soon as you close the browser; on the server, the sign-in expires after no more than 12 hours of inactivity. Only if you select “Stay signed in” when signing in does the cookie remain stored: for up to 30 days for customers and up to 12 hours for staff. It is deleted when you sign out. We remember the language of the page in the cookie “lang”. It is only created if you choose a language via the language menu, open a link that specifies a language (for example from an e-mail in your language), or sign in as a customer whose account has a different language from that of the page currently shown – the portal then appears in the language of your account. The cookie contains nothing but the language code (for example “en”) and is deleted after one year; you can delete it in your browser at any time, and the page will then appear in German again. After a successful sign-in, your browser also keeps the cookie “__Host-kdev” to protect your access: it records that you have signed in on this device before. If someone else tries many wrong passwords for your account, sign-ins from other devices are slowed down, but, as a rule, not your sign-in on this device. The cookie contains only a random number, the time of the sign-in and a checksum – no name and no e-mail address –, applies only to this website, is deleted after 90 days and stops working as soon as you change your password. None of the three cookies requires consent (Section 25(2) no. 2 TDDDG): all of them are strictly necessary for the service you have requested. That is why there is no cookie banner on this website.
Your language
If you choose a language as a signed-in customer, we also save it in your customer account so that the shop, e-mails and notices about your orders appear in this language. The language of your account may also come from your “Become a customer” request or have been set by our staff; after you sign in, the portal appears in this language. It is used solely to communicate with you, is included in the information we provide when you request access to your data, and is reset to German if your account is deleted (anonymised). You can change the language at any time via the language menu or under “My account”.
What is stored in your browser
Apart from the language cookie (see above) and the entries named further below, the ordering shop does not store anything permanently in your browser. Earlier versions remembered a few settings in your browser's local storage (entries “werkzeuge-offen”, “shop.ansicht” and “shop.catalogView.v2”); these entries are deleted the next time the shop is opened. If a member of staff enters an order for you, only their browser keeps the draft in the session storage of their device until it is sent or the window is closed. On the website, your browser also uses its session storage (sessionStorage): in the entry “intro-gesehen” it remembers that the short welcome has already been shown, so that it only appears on your first visit; in the entry “karte-geladen” – only if you load the map – your decision to show the map (see “Map (Google Maps) only after a click”). Neither entry is transmitted to us, and both disappear when you close the browser window; they are strictly necessary for the display you have chosen (Section 25(2) no. 2 TDDDG). If you choose “Light” or “Dark” under “Appearance” at the bottom of the website, your browser's local storage remembers this choice in the entry “darstellung” (only the value light or dark), also for the ordering shop; “Automatic” deletes the entry and your device's setting applies again. This entry is not transmitted to us either and is strictly necessary for the display you have chosen (Section 25(2) no. 2 TDDDG). In addition: if the ordering shop shows you the tip “Install as an app” on your phone, your browser's local storage remembers in the entry “app-hinweis” (only the value 1) that it has been shown, so that it appears only once. This entry is not transmitted to us either and is strictly necessary for the display you have chosen (Section 25(2) no. 2 TDDDG).
The ordering portal as an app (service worker)
As soon as you are signed in to the ordering shop as a customer, your browser sets up a so-called service worker of this website. It lets you put the ordering portal on your home screen like an app, makes it load faster and shows the page “No connection” when you are offline. For this it keeps only program files in your browser's storage (scripts, stylesheets, fonts, icons) and that notice page – no prices, no orders, no pages of your account and no other personal data. Answers of the interface and pages after signing in always come directly from the server. The files are not transmitted to us, are not used to recognise you and are replaced with every new version; you can delete them at any time together with the stored website data. If you install the app, only a shortcut is created on your device – we receive no data in the process. There are no push notifications. This is strictly necessary for the service you have requested; no consent is required (Section 25(2) no. 2 TDDDG).
No tracking
There are no analytics or statistics services, no advertising cookies and no tracking pixels. No usage profiles are created.
Fonts and content from this server
Fonts, images and scripts are delivered directly from this server. Opening the pages does not send any requests to Google or other third parties. External links, for example to a map service, are only opened when you click on them.
Map (Google Maps) only after a click
On the “About us” page, our location is first shown as an address only; nothing is loaded from Google. Only when you click “Load map (Google Maps)” does your browser load the map from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google receives in particular your IP address and technical information about your browser; Google may set cookies and may also transfer data to the USA. The legal basis is your consent given by the click (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Your decision only applies until you close the browser window (entry “karte-geladen” in the session storage). You can withdraw it at any time: with “Hide map” or by closing the browser window. What Google does with the data is described in Google's privacy policy (policies.google.com/privacy).
Server logs
Each time a page is accessed, the server processes technically necessary data: IP address, time, page accessed and browser identifier. This data is used to provide the portal and to protect it against misuse and attacks. For a sign-in, we store the IP address and browser identifier only with the respective session; they are deleted 30 days after the session ends. In the web server's access log, the IP address is stored only in shortened form, without the browser identifier and without search terms. This log has no fixed deletion period: once it reaches a set size, the oldest entries are overwritten – when there is little traffic, they are kept correspondingly longer.
Change log without IP addresses
Sign-ins and important changes – for example to orders, customer data or accounts – are logged with the time and the person who made them, so that processes remain traceable. This log does not contain IP addresses.
E-mails from the portal
Invitations, password reset links and messages about orders are sent via a queue. As soon as an e-mail has been sent or definitely cannot be delivered, its content is deleted; recipient and subject are deleted after 30 days.
“Become a customer” requests
We use the details from the “Become a customer” form only to review your request and to contact you (Art. 6(1)(b) GDPR). These are the company name, your name, e-mail address and – if provided – phone, address, VAT ID and your message, and, voluntarily, your type of business and whether you prefer delivery or collection. The form does not ask for documents or bank details. This includes the language in which you filled in the form: we write to you in this language, and it becomes the language of your account. As long as no decision has been made on your request, it remains stored. A declined request is deleted 30 days after the decision, an accepted one after 90 days – your data is then held only in your customer account.
Passwords
Passwords are never stored in plain text, only as an irreversible hash (Argon2id). Your password cannot be recovered from the stored hash.