Skip to content
ORACoffee Salon

Last updated 1 September 2026

Privacy notice

This is an English rendering for convenience. The German version is the legally binding text.

This notice explains which personal data are processed when you visit this website, for what purpose and on what legal basis.

1. Controller

Ora Coffee Salon — Mirjam Osterkamp e. K., Eppendorfer Landstraße 87, 20249 Hamburg, email salon@oracoffee.de, telephone +49 40 4600 2178.

We are not legally required to appoint a data protection officer; please address enquiries to the above.

2. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. A data processing agreement is in place; transfers to the USA are covered by standard contractual clauses and certification under the EU-US Data Privacy Framework.

When a page is requested, access data are written to server log files: shortened IP address, date and time, the file requested, the volume transferred, referrer and browser identifier. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and reliable operation of the site. Log files are deleted after 30 days.

3. Reservation requests

When you submit the reservation form we process your name, email address, optionally your telephone number, the date, time, number of guests, the tasting you have chosen, an optional lot preference and any notes you add.

The legal basis is Art. 6 (1) (b) GDPR (steps prior to a contract) together with your consent under Art. 6 (1) (a) GDPR, given by ticking the box in the form and revocable at any time with future effect.

We keep the request until your visit has been dealt with and delete it no later than six months after the booked date, unless commercial or tax retention periods apply.

4. Gift voucher orders

To issue a voucher we process the value chosen, the name of the recipient, your name, your email address, the delivery method and an optional dedication.

The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). Invoice data are kept for ten years under § 147 AO and § 257 HGB.

5. Contact by email or telephone

If you contact us directly we process the data you provide in order to deal with your enquiry, on the basis of Art. 6 (1) (b) or (f) GDPR. Correspondence is deleted once it is no longer needed.

6. Cookies and local storage

This site sets no tracking cookies and embeds no analytics or advertising services.

The only entry we place in your browser storage is your decision about the map (key “ora-consent-v1”). It is never transmitted to us and can be reset at any time via “Cookie settings” in the footer. The legal basis is § 25 (2) no. 2 TDDDG and Art. 6 (1) (a) GDPR.

7. OpenStreetMap

The Salon page can embed a map from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The map is loaded only after you explicitly agree, at which point your IP address is transmitted to the OpenStreetMap Foundation.

The legal basis is your consent under Art. 6 (1) (a) GDPR. Without it no connection to any third-party server is made.

8. Fonts

The typefaces Epilogue and Cormorant Garamond are served together with the website and loaded locally. No connection to Google servers is made when you visit this site.

9. Recipients

Data are passed only to our hosting provider as a processor and, for vouchers sent by post, to the postal service and our tax adviser. Data are never transferred for advertising purposes.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). Consent once given may be withdrawn at any time with future effect.

You also have the right to lodge a complaint with a supervisory authority; ours is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg.

11. No automated decision-making

No automated decision-making, including profiling under Art. 22 GDPR, takes place.

12. Changes to this notice

We update this notice whenever our processing changes. The version published on this page applies.