Privacy policy
Responsible for data processing
Goblin UG (haftungsbeschränkt)
Pontstraße 62
52062 Aachen
Represented by the managing director: Abigail Patricia Rooney
Register court: Amtsgericht Aachen, HRB 30298
Email: hello@goblincoffeeco.de
This is a courtesy translation; the German Datenschutzerklärung is the legally binding version.
This privacy policy (under Art. 13 GDPR) explains which personal data is processed when you visit goblincoffeeco.de. Last updated: October 2026.
What we collect
You can use our website without telling us anything about yourself. We set no cookies, use no tracking and no social plug-ins. Fonts and images are served from our own server.
Links to Google Maps and to our social media profiles are plain links: only when you click one do you leave our site, and that provider’s privacy terms apply.
We do not pass data on to third parties, except to the service providers named below.
Hosting
Our website runs on Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary data such as your IP address, date and time, and the page requested, in order to deliver the site and protect it from attacks. Technical logs are kept for at most 7 days. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). We have a data processing agreement with Cloudflare; for transfers to the USA, Cloudflare is certified under the EU-US Data Privacy Framework.
Contact form
If you write to us through the contact form, we process the details you give (email address and message, optionally name and phone number) to answer your enquiry. The form stores nothing on the website: your message is sent straight to our inbox through Cloudflare’s email service. The legal basis is Art. 6(1)(b) GDPR (enquiries about a contract) or Art. 6(1)(f) GDPR (our interest in answering enquiries). We delete your message once it has been dealt with, unless we are legally required to keep it.
Spam protection with Cloudflare Turnstile
On the contact page only, we protect the form against automated abuse with Cloudflare Turnstile. It loads a script from challenges.cloudflare.com that evaluates technical characteristics of your browser and your IP address to tell people from bots. According to Cloudflare, Turnstile sets no cookies for advertising or tracking. The legal basis is our legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR).
We handle email to us (including messages from the contact form) with Google Workspace from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). We have a data processing agreement with Google; transfers to the USA are possible, and Google is certified under the EU-US Data Privacy Framework.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Just send us an email.
You can also complain to a data protection authority, for example the one responsible for us: the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.