1. Controller

The controller for the processing of personal data on this website within the meaning of the GDPR is:

Ayana GmbH, Allerheiligenstraße 25, 60313 Frankfurt am Main, Deutschland

Phone: <TELEFON DER METZGEREI>

E-mail: <DATENSCHUTZ-E-MAIL DER METZGEREI>

We have not appointed a data protection officer; we are not legally required to.

2. Overview

You can browse this website in full without giving us any personal data: the range, prices, opening hours and information are shown without us learning anything about you.

Personal data only arises when you act — placing an order, requesting a bulk order or allowing notifications.

We use no advertising or analytics trackers, build no user profiles and never pass your data on for advertising purposes.

3. Bulk order requests

Data processed: name, phone number, optionally your e-mail address, the occasion (e.g. Kurban, a wedding), preferred date, quantity, cutting preferences and your message.

Purpose: to make you an offer and agree the order with you.

Legal basis: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract).

4. WhatsApp

After placing an order you can, if you expressly choose to, also message us via WhatsApp. Your data then leaves this website and is processed by WhatsApp Ireland Ltd. under their privacy terms. The legal basis is your consent, Art. 6(1)(a) GDPR — WhatsApp only opens after you click the button.

5. Orders

Data processed: name, phone number, the items and quantities ordered, the pick-up time and optional notes (e.g. allergies).

Purpose: preparing, handing over at pick-up and invoicing your order.

Legal basis: Art. 6(1)(b) GDPR (performance of the contract); for retaining the records also Art. 6(1)(c) GDPR (German commercial and tax law).

Each order carries a randomly generated tracking link. Anyone who has that link can see the order — please do not share it.

6. Push notifications

If you allow notifications we store the technical identifier your browser or device issues for that purpose, together with your chosen language.

Purpose: status updates and pick-up reminders about your own order only. We never send advertising by push.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw it at any time by turning notifications for this website or our app off in your browser or device settings; withdrawal takes effect for the future.

In a browser, the notification is delivered by the browser vendor’s push service (e.g. Google, Apple, Mozilla). In our app it is delivered via Google’s Firebase Cloud Messaging and, on iPhones, additionally via the Apple Push Notification service. The push identifier and the text of the notification are transmitted to them.

7. Loyalty programme

Taking part is voluntary and only begins once you explicitly tick the box at checkout. Without that tick your order is processed as normal and no loyalty profile is created.

Data processed: your phone number (normalised, as the identifier), the name from your order, the time of your consent, the number of orders you have completed and the coupons earned from them.

Purpose and scope: we store your phone number with every order anyway, in order to perform the contract. What the tick additionally permits is the linking: joining individual orders under that number into a persistent customer profile and counting them, so that after a set number you receive a coupon.

Legal basis: Art. 6(1)(a) GDPR (consent).

Withdrawal: you can tap "Leave the loyalty programme" under "My orders" at any time. Your loyalty profile and any open coupons are then deleted. Your orders themselves are not affected — they are subject to commercial and tax retention obligations (§ 147 AO, § 257 HGB).

Separate programmes: the restaurant and the butchery are independent companies and run separate loyalty programmes. Consent given to one does not apply to the other, and coupons are not transferable.

Deletion period: loyalty profiles with no completed order in the last 24 months are deleted.

8. Data that stays on your device

The website remembers locally in your browser: your language choice, the contents of your basket, the links to your most recent orders, and whether you have already dismissed a notice.

None of this is transmitted to us or used for analytics. It disappears when you clear this site’s data in your browser.

We set no advertising or analytics cookies, which is why there is no consent banner.

9. Server log files

When the pages are requested, the hosting provider automatically records the usual access data (address requested, time, volume transferred, browser type, referrer, IP address). This serves secure, trouble-free operation and is not combined with other data.

To stop the enquiry forms being abused by automated mass submissions, we count requests per sender. For this we do not store your IP address, only a non-reversible hash of it, which we delete after six weeks at the latest. Sign-in attempts to the administration area are logged with the IP address to protect against attacks and deleted after two months at the latest.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in technical provision and security).

10. Recipients and processors

• IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, as hosting provider, runs the servers this website is delivered from and the database in which orders and enquiries are stored. A data processing agreement under Art. 28 GDPR is in place.

• Google (Firebase Cloud Messaging) — only if you allow notifications in our app — and, on iPhones, Apple (Apple Push Notification service), solely for delivering those notifications.

• The push services of browser vendors, if you allow notifications in your browser, likewise solely for delivery.

A transfer to third countries (in particular the USA) is only possible within the push services and relies on the EU-US Data Privacy Framework or standard contractual clauses. Beyond this we do not pass your data on, unless we are legally obliged to.

Fonts, images and videos are loaded from our own server. No fonts are fetched from Google servers.

11. Retention

Bulk order requests are deleted automatically no later than 12 months after the requested date.

Orders are retained for 8 years from the end of the calendar year of the order, to meet German commercial and tax law obligations (§ 147 AO, § 257 HGB), and are then deleted automatically.

Push identifiers for an order or reservation are deleted automatically no later than six months after sign-up — sooner, as soon as the push service reports them as invalid.

12. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR) at any time, as well as the right to withdraw consent you have given.

To exercise them, simply write to <DATENSCHUTZ-E-MAIL DER METZGEREI> or call <TELEFON DER METZGEREI>. We reply within one month.

You may also lodge a complaint with a supervisory authority. The one responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.

13. Deleting your data

You can ask us to delete everything we hold about you at any time — an e-mail to <DATENSCHUTZ-E-MAIL DER METZGEREI> quoting the name and phone number you used for the order is enough. We then delete everything we are not legally required to keep.

The order history stored in your browser is removed by clearing this site’s data.

You do not create a customer account here, so there is no account to delete. The administration area is for staff only.

14. Changes to this policy

We update this privacy policy when the website or the legal situation changes. The version published here applies.

Last updated: 2026-09-17