skip to content
the Zett

Privacy Policy

This is a translation for your convenience. The legally binding version is the German Datenschutzerklärung.

1. Privacy at a glance

General information

The following gives you an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. You will find detailed information in the sections below.

Who is responsible for the data collection?

The data processing on this website is carried out by the website operator. You will find the contact details in the section “Controller”.

How is data collected?

Some data you provide yourself, for example when you write to me through the contact form or leave a comment. Other data is collected automatically by IT systems when you visit the website, mainly technical data such as your browser, operating system or the time of your visit. Analytics and advertising services are only used if you have given your consent in the cookie banner.

2. Hosting

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, STRATO processes the data involved, in particular IP addresses, page views, contact requests and other data transmitted via the website. For details, please see STRATO’s privacy policy: https://www.strato.de/datenschutz/.

The legal basis is Art. 6(1)(f) GDPR. I have a legitimate interest in providing my website reliably and securely.

I have concluded a data processing agreement with STRATO. STRATO processes the data only on my instructions and in compliance with the GDPR.

3. General information and mandatory information

Data protection

I take the protection of your personal data very seriously and treat it confidentially and in accordance with the statutory data protection regulations and this privacy policy. Data transmission over the internet (e.g. by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Controller

Kimberly Zimmermann
c/o gkk DialogGroup GmbH
Eduard-Rhein-Straße 58
53639 Königswinter
Germany

Phone: +49 179 4730196
E-mail: happiness@thezett.com

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

Data protection officer

A data protection officer is not required by law and has not been appointed.

Storage period

Unless a more specific storage period is stated in this privacy policy, your data remains with me until the purpose of the processing no longer applies. If you make a justified request for deletion or withdraw your consent, your data will be deleted unless I have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law). In that case, the data will be deleted once these reasons no longer apply.

Legal bases of the processing

If you have given your consent, I process your data on the basis of Art. 6(1)(a) GDPR; if information is stored on or read from your device (e.g. cookies), additionally on the basis of Section 25(1) of the German TDDDG. You can withdraw your consent at any time. If your data is needed to perform a contract or to take steps prior to entering into a contract, I process it on the basis of Art. 6(1)(b) GDPR. Data required to comply with a legal obligation is processed on the basis of Art. 6(1)(c) GDPR. Processing may also be based on my legitimate interest under Art. 6(1)(f) GDPR. The sections below explain which legal basis applies in each case.

Transfers to third countries, in particular the USA

This website uses services from companies that may transfer data to the USA, for example Google and Adobe. Under the EU-US Data Privacy Framework, the European Commission has determined that certified US companies provide an adequate level of data protection. The US providers named here are certified under this framework or use the European Commission’s standard contractual clauses.

Recipients of personal data

In the course of my work I cooperate with external parties, such as my hosting provider or analytics services. I only pass on data where this is necessary for the purpose in question, where there is a legal obligation, where I have a legitimate interest or where you have given your consent. I conclude the legally required agreements with processors.

Withdrawal of your consent

Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time, for example via the “cookie settings” link in the footer of this website. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Right to object in special cases (Art. 21 GDPR)

If the processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. If you object, I will no longer process your data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. If your data is processed for direct marketing, you can object to this processing at any time.

Right to lodge a complaint with a supervisory authority

If the GDPR is infringed, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (www.ldi.nrw.de).

Right to data portability

You have the right to receive data that I process automatically on the basis of your consent or in performance of a contract, for yourself or for a third party, in a common, machine-readable format. If you request the direct transfer to another controller, this will only be done where technically feasible.

Access, rectification and erasure

Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the processing and, where applicable, a right to rectification or erasure of this data. You can contact me about this and any other questions on personal data at any time.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted, for example if you dispute the accuracy of the data or have objected and it has not yet been decided whose interests prevail. Please contact me at any time.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as messages sent through the contact form, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the address line of your browser starting with “https://” and by the lock symbol.

Objection to advertising e-mails

The use of the contact details published in the legal notice (Impressum) to send advertising and information material that has not been expressly requested is hereby objected to. I expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam e-mails.

4. Data collection on this website

Cookies

This website uses cookies. These are small text files that are stored on your device. I use technically necessary cookies on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR so that the website works (e.g. to remember your cookie choice). All other cookies, for example for statistics or advertising, are only set with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Which cookies are used in detail is explained in the Cookie Policy (EU).

Consent with Complianz

This website uses the WordPress plugin Complianz (Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands) to obtain and document your consent to certain cookies. Complianz runs on my own server; no data is transferred to Complianz. Complianz stores your consent or withdrawal in a cookie in your browser.

Together with Complianz I use Google Consent Mode: Google services on this website receive your choice and behave accordingly. Without your consent, no analytics or advertising cookies are set by Google.

The legal basis is Art. 6(1)(c) GDPR (legal obligation to obtain and document consent).

Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not combined with other data sources. The collection is based on Art. 6(1)(f) GDPR; I have a legitimate interest in the technically error-free presentation and the security of my website.

Contact form

When you send me a message through the contact form, your name, your e-mail address and your message are sent to me by e-mail so that I can reply. The form itself does not store this information in a database. To prevent spam, your IP address is briefly processed as a non-reversible check value (hash) to limit the number of messages per hour; this value is deleted automatically after one hour. The form also contains an invisible field (honeypot) that detects spam bots without sending any data to third parties.

The processing is based on Art. 6(1)(b) GDPR if your enquiry relates to the performance of a contract or is necessary for steps prior to entering into a contract; otherwise it is based on your consent (Art. 6(1)(a) GDPR), which you give by ticking the box in the form, and on my legitimate interest in handling enquiries (Art. 6(1)(f) GDPR). The data remains with me until you ask me to delete it, withdraw your consent or the purpose no longer applies. Statutory retention periods remain unaffected.

Enquiries by e-mail or phone

If you contact me by e-mail or phone, your enquiry including all resulting personal data (name, enquiry) is stored and processed by me for the purpose of handling your request. I do not pass this data on without your consent. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR. The data remains with me until the purpose no longer applies; statutory retention periods remain unaffected.

Comments and ratings

If you leave a comment or a star rating on a recipe page, your name, your e-mail address, your comment, your rating, the time and your IP address are stored. Your e-mail address is not published. I store the IP address because I can be held liable for unlawful content (e.g. insults) and therefore have a legitimate interest in knowing the identity of the author. Comments are only published after I have approved them. No registration is required, and comments cannot be subscribed to. No profile pictures from third parties (e.g. Gravatar) are loaded for replies.

If you choose to save your name and e-mail address when commenting, WordPress stores cookies in your browser so that you do not have to enter them again next time.

The storage is based on your consent (Art. 6(1)(a) GDPR) and on my legitimate interest (Art. 6(1)(f) GDPR). Comments and the related data remain stored until the commented content is deleted, the comment is deleted or you request deletion.

5. Analytics and advertising

Google tag (Google Tag Manager) and Google Site Kit

I use the WordPress plugin Site Kit by Google to integrate Google services into this website. The services are loaded via the Google tag, which is provided from the servers of Google Tag Manager (googletagmanager.com). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google tag itself does not set cookies or analyse data; it only ensures that the integrated services (Analytics, Ads) are loaded in line with your consent. Your IP address is transmitted to Google in the process and may be transferred to the USA. The use is based on your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time. Google is certified under the EU-US Data Privacy Framework.

Google Analytics

With your consent, this website uses Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics allows me to analyse how visitors use the website, for example which recipes are viewed, how long someone stays and which page they came from. Pseudonymous usage profiles are created and cookies or similar technologies are used. Google Analytics 4 does not store IP addresses. The information collected is usually transferred to Google servers and may be transferred to the USA.

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via “cookie settings”. I have concluded a data processing agreement with Google. More information: https://support.google.com/analytics/answer/6004245.

Google Ads and conversion tracking

This website is connected to Google Ads (Google Ireland Limited). With your consent, the Google tag can record whether you carry out certain actions on this website after clicking on one of my ads (conversion tracking). I only receive statistical reports and cannot identify you personally. Data may be transferred to the USA. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). More information: https://policies.google.com/privacy.

Google AdSense

This website may display ads via Google AdSense (Google Ireland Limited). AdSense is currently not active. If I switch AdSense on, personalised ads will only be loaded with your consent; Google then uses cookies or similar technologies to deliver and measure ads, and data may be transferred to the USA. Without your consent, no advertising cookies are set. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). More information: https://policies.google.com/technologies/ads.

Affiliate programmes

On this website, especially in recipes and in the shop, I use affiliate links. If you buy something through such a link, I receive a small commission; the price stays the same for you. Among others, I take part in these programmes:

  • Amazon Associates (PartnerNet) of Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg. More information: Amazon’s privacy notice.
  • LTK (rewardStyle, Inc., Dallas, Texas, USA). More information in LTK’s privacy policy on shopltk.com.

The links lead to the retailers’ websites. Only there may the provider set cookies to record that you came via my link. No data is collected for this on my website itself. The legal basis is my legitimate interest in receiving the commissions (Art. 6(1)(f) GDPR); where the retailer uses cookies, it asks for your consent on its own website.

6. Plugins and tools

Adobe Fonts

To display fonts consistently, this website uses Adobe Fonts by Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland. When you open a page, your browser loads the required fonts from Adobe servers. Your IP address is transmitted to Adobe in the process and may be transferred to the USA. According to Adobe, no cookies are set. The use is based on my legitimate interest in a consistent and appealing presentation of my website (Art. 6(1)(f) GDPR). Adobe is certified under the EU-US Data Privacy Framework. More information: https://www.adobe.com/privacy.html.

Spotify

On some pages you can play a Spotify playlist via “press play”. The provider is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden. The Spotify player is only loaded when you click the button. Before that, no data is transferred to Spotify. Once the player has loaded, Spotify receives, among other things, your IP address and the information which page you are visiting; if you are logged in to Spotify, Spotify can link this to your account. The legal basis is your consent given by the click (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). More information: https://www.spotify.com/legal/privacy-policy/.

Google Meet

For online meetings, for example with brand partners, I may use Google Meet (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google processes the participants’ data, such as name, e-mail address, IP address, video and audio and meeting metadata. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. The use serves contractual or pre-contractual communication (Art. 6(1)(b) GDPR) or is based on my legitimate interest in simple communication (Art. 6(1)(f) GDPR). More information: https://policies.google.com/privacy.

7. Links, newsletter and social media

Links to social networks

On this website I link to my profiles on Instagram, TikTok, YouTube, Pinterest and Substack, to videos on Instagram and, via the “Pin it” button, to Pinterest. These are simple links: simply visiting my website does not load any content from these networks and does not transfer any data to them. Only when you click on a link do you open the network’s website. From then on, its privacy policy applies.

Newsletter via Substack

I send my newsletter via Substack (Substack Inc., 111 Sutter Street, 7th Floor, San Francisco, CA 94104, USA). You sign up directly on Substack; no e-mail address is collected for this on my website. Through Substack I receive the e-mail addresses of subscribers in order to send them my letters, as well as statistics, for example whether a letter was opened. You can unsubscribe at any time via the link in every e-mail. The legal basis is your consent (Art. 6(1)(a) GDPR). Substack’s privacy policy applies to the processing on Substack: https://substack.com/privacy.

Privacy on my social media profiles

I run profiles on Instagram, TikTok, YouTube, Pinterest and Substack. This privacy policy also applies to these profiles. When you visit one of my profiles, follow it, comment or send me a message, the platform operators process your data, often also for advertising purposes and often even if you are not logged in. I do not have full control over this processing.

The platforms provide me with statistics on the use of my profiles (e.g. Instagram Insights). Where I use such statistics, I am jointly responsible with the respective operator (Art. 26 GDPR). For Instagram, Meta’s joint controller addendum applies: https://www.facebook.com/legal/terms/page_controller_addendum. You can exercise your rights (e.g. to access or erasure) both with me and directly with the operator; the operators are usually better placed to do so, as only they have direct access to the data.

The use of my profiles is based on my legitimate interest in modern communication and presence (Art. 6(1)(f) GDPR). Where the platform asks for your consent, the legal basis is Art. 6(1)(a) GDPR. Data may be transferred to the USA in the process.

Last updated: October 2026