1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Capi Fresh GmbH
Dusiplatz 8
21035 Hamburg, Germany
Represented by the managing partners Jessica Pazos Melo and Thorben Külper
Email: hello@capifresh.com
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2. Overview
This website is a pre-launch page. It does not use cookies, analytics or tracking tools, and it does not contain contact forms. Personal data is only processed to the extent described below: when the website is delivered by our hosting provider, when a script is loaded from an external server, and when you send us an email. The fonts used on this website are hosted on our own server, so no data is transmitted to font providers.
3. Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, the hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically:
- browser type and version
- operating system
- referrer URL (the page you came from)
- host name of the accessing device
- date and time of the request
- IP address
This data is not merged with other data sources. The processing is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and security of our website. The log files are stored by the hosting provider only for a limited period and are then deleted automatically, unless further storage is required to investigate a specific security incident.
We have concluded a data processing agreement (Art. 28 GDPR) with Vercel. As Vercel is based in the USA, personal data may be transferred to the USA. This transfer is based on the EU Standard Contractual Clauses and, where applicable, on Vercel's certification under the EU-US Data Privacy Framework. More information: Vercel Privacy Policy.
4. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar and the lock symbol. When encryption is active, the data you transmit to us cannot be read by third parties.
5. jsDelivr (content delivery network)
To provide smooth scrolling, this website loads a JavaScript library (Lenis) from the jsDelivr content delivery network, operated by Prospect One sp. z o.o., Królewska 65A/1, 30-081 Kraków, Poland. When the script is loaded, your IP address is transmitted to jsDelivr and its infrastructure partners, which may be located outside the EU.
The processing is based on Art. 6(1)(f) GDPR; we have a legitimate interest in the reliable and fast delivery of our website. More information: jsDelivr Privacy Policy.
6. Job applications by email
You can apply to join our team by sending an email to jessica@capifresh.com. We process the data you send us (e.g. name, contact details, CV, certificates and other documents) exclusively to handle your application.
The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into an employment relationship) in conjunction with Section 26 of the German Federal Data Protection Act (BDSG). If you are hired, your data will be transferred to your personnel file. If we cannot offer you a position, we will delete your application data no later than six months after the end of the application process, unless you have consented to longer storage (Art. 6(1)(a) GDPR) or we need to keep it to defend against legal claims (e.g. under the German General Equal Treatment Act, AGG).
7. Contact by email
If you contact us by email, we process your email address and the information you provide in order to answer your request. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or pre-contractual measures, and Art. 6(1)(f) GDPR in all other cases; we have a legitimate interest in responding effectively to enquiries. We delete the data once your request has been fully dealt with, unless statutory retention obligations apply.
8. Link to Instagram
Our website contains a simple link to our Instagram profile. No data is transmitted to Instagram (Meta Platforms Ireland Ltd.) when you visit our website. Data is only processed by Meta once you click the link and visit Instagram. Meta's privacy policy applies there: Instagram Privacy Policy.
9. Cookies
This website does not set any cookies and does not use comparable technologies to store information on your device.
10. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR): where processing is based on Art. 6(1)(f) GDPR, you have the right to object to it at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, simply contact us at hello@capifresh.com.
11. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit): datenschutz-hamburg.de.
12. Changes to this privacy policy
We may update this privacy policy if our website or the legal requirements change. The current version is always available on this page.
Last updated: September 2026