Privacy policy

1. Who is responsible

Zahra Aslani und Parnian Seifi, Persian Sweet Bites, Tabbertstraße 6, 12459 Berlin. Email: info@persiansweetbites.com

2. In short

This website sets no cookies of its own and uses no analytics or tracking. Fonts are loaded from this website itself, not from Google. Instagram posts are only shown after you explicitly agree.

3. Hosting by Cloudflare

The website is served by Cloudflare Pages (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data such as your IP address, the date and time, the page requested and details of your browser, to deliver the page and protect it from attacks. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in a secure, fast website).

Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA rely on it and on the EU Standard Contractual Clauses.

4. Your language choice

When you switch language, your browser remembers the choice (local storage). It stays on your device and is not sent to us.

5. Instagram posts

On the Instagram page we show posts from Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Irland). They are only loaded when you click "Show the posts". Then data such as your IP address is sent to Instagram, which may set cookies and transfer the data to the USA.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Consent applies to the current page view only; we ask again on your next visit. More in Instagram's privacy policy: https://privacycenter.instagram.com/policy

6. Contact via Telegram or Instagram

If you write to us on Telegram or Instagram, we process your message and your name or username to reply (Art. 6(1)(b) and (f) GDPR). The privacy policies of Telegram and Meta also apply. We delete messages once they are no longer needed.

7. Your rights

You have the right to

• access the data stored about you (Art. 15 GDPR)
• rectification (Art. 16) and erasure (Art. 17)
• restriction of processing (Art. 18) and data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw consent at any time with effect for the future (Art. 7(3))
• lodge a complaint with a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information