Data protection

This is a courtesy translation. Only the German version is legally binding.

This section explains what data is collected when you visit this website and what happens to it. In short: I do not set cookies, do not use analytics or advertising trackers, and do not create user profiles. Data is only collected where the technology needs it to ensure that pages, images, and videos reach you.

1. Responsible Party

André Bergmann (BBQbro)
Landerweg 21
33813 Oerlinghausen
Email: mail@bbqbro.eu

2. Hosting and Server Logfiles

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. With each access, Vercel processes technically necessary data: your IP address, date and time, the page accessed, the previously visited page (referrer), as well as browser and operating system. This is necessary to deliver the page, operate it stably, and fend off attacks. The legal basis is my legitimate interest in a secure and functioning web offering (Art. 6 para. 1 lit. f GDPR). The logfiles are only stored for a short time and then automatically deleted.

Vercel processes the data on my behalf based on a contract for data processing (Art. 28 GDPR). Vercel is certified under the EU-US Data Privacy Framework. The transfer to the USA is based on the adequacy decision of the EU Commission (Art. 45 GDPR) and additionally on standard contractual clauses (Art. 46 para. 2 lit. c GDPR).

3. Content and Images (Sanity)

I manage texts, recipes, and images with the content management system Sanity from Sanity AS, Oslo, Norway. Your browser loads images directly from Sanity's image server (cdn.sanity.io). In doing so, your IP address and technical information about your browser are transmitted to Sanity, as the images cannot be delivered otherwise. The legal basis is my legitimate interest in a fast and reliable presentation of the content (Art. 6 para. 1 lit. f GDPR).

Sanity processes the data on my behalf (Art. 28 GDPR). For storage and delivery, Sanity also uses service providers in the USA. Transfers to the USA are based on the EU-US Data Privacy Framework or standard contractual clauses.

4. Videos (Mux)

The videos on this page are streamed via Mux, Inc., San Francisco, USA. The player only loads when you tap Play. No connection to Mux is established beforehand. From then on, your IP address and technical information such as browser, device, and network are transmitted to Mux so that the video arrives at you in suitable quality. The playback statistics from Mux (Mux Data) are turned off, and the player does not set cookies. The legal basis is my legitimate interest in playing the videos at your request (Art. 6 para. 1 lit. f GDPR).

Mux processes the data on my behalf (Art. 28 GDPR). The transfer to the USA is based on the EU-US Data Privacy Framework or standard contractual clauses.

5. Storage in Your Browser

This page does not set cookies. If you switch between grid and list view in the video archive, the page remembers your choice in the local storage of your browser (localStorage). This information remains on your device and is not transmitted to me. It is absolutely necessary for the function you requested (§ 25 para. 2 no. 2 TDDDG). You can delete it at any time in your browser settings.

6. Fonts

The fonts are directly embedded in this website. No connection to Google or other font providers is established when accessed.

7. Contact via Email

If you send me an email, I process your email address and the content of your message to respond to you. If it concerns a collaboration or a contract, the legal basis is Art. 6 para. 1 lit. b GDPR; otherwise, it is my legitimate interest in answering inquiries (Art. 6 para. 1 lit. f GDPR). I delete your message when it is resolved, unless legal retention obligations, such as for business correspondence, prevent this.

8. Requests for Collaborations

If a form for cooperation and sponsorship inquiries is offered on this website, I store your information (brand, name, email address, product, desired package, budget, duration, and message) in Sanity to process your request. The legal basis is the initiation of a contract (Art. 6 para. 1 lit. b GDPR). If no collaboration is established, I will delete the request no later than twelve months after the last contact.

9. Links to Social Networks and Partners

The links to Instagram, TikTok, YouTube, and Facebook are simple links. No content from these platforms is embedded, and as long as you do not click, no data is transmitted to them. Only when you follow a link do you switch to the respective platform. Their privacy policy applies there. This also applies to videos played on Instagram.

On the partner pages, there are affiliate links and discount codes. If you click on such a link, the partner or their affiliate network may record on their own website that you came from my site in order to account for a commission. This processing is subject to the partner's privacy policy. I do not receive any data that can identify you.

The share function copies a link to your clipboard or opens your device's sharing menu. No data is transmitted to me during this process.

10. Encryption

The connection to this website is encrypted via TLS. You can recognise this by 'https://' in the address bar of your browser.

11. Your Rights

You have the right to information about your stored data (Art. 15 GDPR), to rectification (Art. 16 GDPR), to deletion (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), and to data portability (Art. 20 GDPR). An informal email to mail@bbqbro.eu is sufficient.

Right to object: As far as I process data based on my legitimate interest (Art. 6 para. 1 lit. f GDPR), you can object to this processing at any time for reasons arising from your particular situation (Art. 21 GDPR).

You can also file a complaint with a data protection supervisory authority, for example, with the responsible state commissioner for data protection and freedom of information in North Rhine-Westphalia: https://www.ldi.nrw.de

12. No Obligation to Provide, No Automated Decisions

You are not obliged to provide me with data. However, without the technically necessary connection data, the website cannot be displayed. No automated decision-making, including profiling, takes place.

As of October 2026