Privacy Policy

1. Data Controller / Verantwortlicher

Tropical Foods GmbH
Musterstraße 1
60311 Frankfurt am Main, Deutschland
E-Mail: info@tropicalfoods.de
Tel.: +49 69 00000000

2. Data We Collect / Erhobene Daten

• Account data: Name, email address, password (hashed via Firebase Auth)
• Order data: Delivery address, purchased items, payment reference
• Technical data: IP address, browser type, access timestamps (server logs, retained max. 7 days)
• Cookies: Session cookie, language preference (localStorage)

3. Legal Basis / Rechtsgrundlage

Processing is based on Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (legal obligation), and Art. 6(1)(f) GDPR (legitimate interests).

4. Retention Periods / Speicherdauer

• Order data: 10 years (§ 147 AO)
• Account data: Until account deletion + 30 days
• Server logs: 7 days
• Language preference: Until browser storage cleared

5. Your Rights (Art. 15–22 GDPR) / Ihre Rechte

• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Right to lodge a complaint with a supervisory authority (Art. 77)

To exercise your rights, contact: info@tropicalfoods.de

6. Cookies

We use only technically necessary cookies and browser storage (session management, language preference). No tracking or advertising cookies are used.

7. Third-Party Services / Drittanbieter

• Firebase / Google Cloud: Authentication, database, hosting (EU servers where applicable). Privacy policy: policies.google.com/privacy
• Stripe: Payment processing. Privacy policy: stripe.com/privacy

Last updated: 21.5.2026