Privacy Policy

Last updated: 24 July 2026

1. Controller

Spree Page House
Warschauer Str. 74, 10243 Berlin, Germany
Email: [email protected]
Phone: +49 30 5550 1842

We are the controller for personal data collected through this website (risbatratt.lat) and in connection with our bookshop and café services.

2. What we collect and why

We process personal data only when it is needed for a clear purpose:

• Contact form and email/phone enquiries — name, email address, optional phone number, subject, and message, so we can reply and fulfil requests (book orders, reservations, recommendations, event seats). Legal bases: steps at your request prior to a contract and/or legitimate interests in running a customer-facing shop (GDPR Art. 6(1)(b) and (f)).
• Orders and special book requests — contact and order details needed to source books, arrange collection in Berlin, and keep records of the transaction. Legal bases: contract (Art. 6(1)(b)) and legal obligations where applicable (e.g. tax records under German law).
• Event participation — name and contact details if you reserve a seat or register interest. Legal bases: contract / pre-contractual steps (Art. 6(1)(b)) or legitimate interests in organising shop events (Art. 6(1)(f)).
• Optional updates — if you ask to receive occasional shop notes, we process your contact details for that purpose. Legal basis: consent (Art. 6(1)(a)), which you may withdraw at any time.
• Website technical data — necessary cookies and similar storage required for the site to function; optional analytics or marketing cookies only with your consent. See our Cookie Policy.

We do not sell personal data. We do not use your messages for automated profiling that produces legal or similarly significant effects.

3. Retention

Enquiry messages are kept only as long as needed to handle your request and any follow-up, then deleted or anonymised unless a longer period is required by law or a legitimate dispute. Order and accounting records are retained for as long as German tax and commercial rules require. Event lists are cleared after the event unless you ask to stay in touch. Optional update subscriptions last until you unsubscribe or we discontinue them.

4. Recipients and transfers

Data may be processed by trusted service providers who host email, website infrastructure, or related tools under appropriate agreements. Where data is transferred outside the European Economic Area, we use safeguards such as Standard Contractual Clauses or an adequacy decision, as required by the GDPR.

5. Your rights

Under the GDPR you may request access to your personal data, rectification, erasure, restriction of processing, data portability where applicable, and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent without affecting prior lawful processing.

To exercise your rights, contact us at [email protected]. You also have the right to lodge a complaint with the competent German supervisory authority. For federal matters and as a general contact point:

Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
Graurheindorfer Str. 153, 53117 Bonn, Germany
Website: bfdi.bund.de
Email: [email protected]

For private-sector processing in Berlin, the competent authority is typically the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit). You may also contact BfDI for guidance on where to address your complaint.

6. Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse, proportionate to the size of our shop and the nature of the data we hold.

7. Changes

We may update this policy when our practices or legal requirements change. The date at the top of this page will be revised accordingly.