Last updated: 14 October 2026
1. Controller
Corinna Schumann
Große Brinkgasse 2–4
50672 Cologne, Germany
Email: hello@kitchensplace.de
You can use this address for privacy questions and to exercise your rights.
2. Website access and hosting
When you visit kitchensplace, our web server processes the connection data needed to deliver the website. This may include your IP address, the date and time, requested page, response status, browser and device information, and a referrer. We use this data to deliver the site, identify errors and protect it against attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is a secure and functioning website.
STRATO hosts the website and processes the data needed to operate it. Server logs are retained only while needed for operation, troubleshooting and security. A specific security incident may require longer retention for investigation.
3. Cookies and consent
We use essential storage and access technologies to operate the website and remember your privacy choices. We request consent under Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) before non-essential access to your device, including certain advertising and audience measurement technologies. Where personal data is subsequently processed, the legal basis is Article 6(1)(a) GDPR. You may withdraw consent at any time with effect for the future.
For advertising and related purposes, we use Google Privacy & messaging (Funding Choices). Its interface shows the available purposes and providers. You may consent, decline or select individual settings. You can reopen it using “Cookie settings” in the footer. The consent platform uses the FCCDCF cookie to store your choice; the maximum period stated in its interface is 390 days. The actual use of data by advertising partners depends on your choice. The current partner list and details are available in the consent interface.
4. Audience measurement
We use Google Analytics through Google Site Kit and Jetpack Stats from Automattic/WordPress.com to understand which content is visited and improve kitchensplace. The data processed may include page views, timestamps, referrers, device and browser data, and IP addresses or information derived from them.
Non-essential measurement is based on your consent. The Jetpack Stats browser script is not loaded without a positive consent signal. Withdrawal prevents further loading of that script; processing that has already taken place cannot be undone. Automattic states that it retains identifiable Jetpack Stats logs for 28 days; aggregated statistics may remain longer. Our statistics do not identify individual visitors to us. Further information: Jetpack Stats and Google Privacy Policy.
5. Google AdSense advertising
Advertisements may be delivered on kitchensplace through Google AdSense. Google and partners listed in the consent interface may process information about the page, your device, identifiers and interactions for this purpose. Personalised advertising and other consent-dependent purposes follow your selection in “Cookie settings”. Merely using the website does not constitute consent. Technically permissible non-personalised or contextual ads may still appear when personalisation is declined. The current provider list is available in the consent interface.
6. Comments, spam protection and avatars
If you leave a comment, we process the information you enter, your comment and technical data needed to prevent abuse. Your comment and chosen display name may be visible publicly. We use this data to publish and moderate comments and prevent spam. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a usable, secure comments section. Comments generally remain until deleted or no longer needed for publication. You may contact us to request deletion.
We use Akismet from Automattic for spam detection. Comment details and technical information may be sent to Automattic for this check. Pages with comments may load avatars from Automattic’s Gravatar service. When an avatar is requested, the provider receives technical connection data; a hash derived from an email address may also be used. Further information: Automattic Privacy Policy.
7. Jetpack Newsletter and email notifications
If you subscribe to new posts or replies to comments by email, we process your email address, the subscription concerned, and technical information needed for registration and abuse prevention. We use Jetpack Newsletter from Automattic/WordPress.com to manage and send these emails. The legal basis for sending them is your consent under Article 6(1)(a) GDPR. An email address is only required if you want to subscribe. You can unsubscribe using a link in an email or the subscription settings provided by WordPress.com. We use the address for this purpose until you unsubscribe; evidence of consent may be retained longer where necessary. Further information: Jetpack Newsletter.
8. Contact
If you email us, we process your address and message to respond. Article 6(1)(b) GDPR applies to contractual or pre-contractual enquiries; for other enquiries, Article 6(1)(f) GDPR applies. Our legitimate interest is responding to messages. We delete correspondence when it is no longer needed for the enquiry or a legal retention duty.
9. External content, fonts and links
Some pages may load fonts from Google Fonts. Google receives the connection data technically needed to deliver them, including your IP address. We use the fonts for a consistent presentation of the website. The legal basis for the associated processing of personal data is Article 6(1)(f) GDPR; our legitimate interest is readable and consistently presented content. Further information: Google Privacy Policy.
Links to Pinterest, Instagram and Facebook take you to those services when clicked. Their privacy notices then apply. Embedded sharing or count features may connect to the respective service while you are still on kitchensplace. This can transfer connection data and the page URL. Such processing serves to display and use the sharing feature; the legal basis is Article 6(1)(f) GDPR insofar as consent is not required. Our legitimate interest is sharing our content.
Some recipes contain Amazon affiliate links. Clicking one takes you away from kitchensplace. Amazon may process the visit and a purchase to attribute an affiliate commission. The mere presence of a link does not transmit data to Amazon before a click.
10. Pinterest Studio and Pinterest API
We use kitchensplace Pinterest Studio to manage our own Pinterest presence. When an authorised person connects the WordPress administration area to Pinterest, we process the Pinterest account identifier, granted API permissions and encrypted access credentials. The planner contains drafts with a recipe reference, image source, Pin text, destination URL, selected board and review status. The plugin can retrieve and display our boards and Pins through the Pinterest API. Publishing requires approval of the specific action. Identifiers of created Pins and boards may be stored to document the action and prevent unintended repetition. Performance data is displayed only if provided by the API; the current pilot does not automatically import Pinterest analytics into a permanent dashboard.
The purpose is to prepare, publish and assess our own Pinterest content. Where data of authorised administrators is personal data, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is managing our own content and presence. A Pinterest connection requires authorisation by the account holder. Disconnecting removes locally stored access tokens. Drafts and publication records remain for editorial accountability until deleted or no longer needed. We do not sell or share account data retrieved through the Pinterest API with other advertising services. Further information: Pinterest Privacy Policy.
11. Administration and security
When someone signs in to the WordPress administration area, we process their user identifier, session data and technical security information. Jetpack features for account protection, brute-force prevention and uptime monitoring may be involved. The purpose is access control and security. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is protecting the website and administrator accounts. Security data is kept only as long as needed for this purpose or to investigate a specific incident.
12. Recipients and transfers outside the EEA
Depending on the feature used, STRATO, Google, Automattic/WordPress.com, Pinterest, Amazon and advertising partners shown in the consent interface may receive personal data. Certain services may process data outside the European Economic Area, particularly in the United States. Google and Pinterest describe the EU-US Data Privacy Framework and standard contractual clauses among the mechanisms they use for such transfers; Automattic also describes standard contractual clauses. The mechanism applicable in a particular case depends on the recipient and the processing. See Google’s transfer information, Pinterest’s Privacy Policy and Automattic’s Privacy Policy for details and ways to request information about safeguards. You may contact hello@kitchensplace.de about transfers initiated by kitchensplace.
13. Your rights
Under the conditions of the GDPR, you may request access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18) and portability (Article 20), and object to processing based on legitimate interests (Article 21). You may withdraw consent at any time for the future (Article 7(3)). You may also complain to a data protection supervisory authority (Article 77). Email hello@kitchensplace.de to exercise your rights.
Technical data for a page request is necessary to deliver the website. Other information is voluntary unless needed for a feature you request, such as a comment or email subscription. We do not make decisions based solely on automated processing that have legal or similarly significant effects.