Verrano
StartseiteProductsRecipesWhere to buyTrade

Privacy Notice

Last updated: August 2026

This notice explains, in line with Art. 13 GDPR, which personal data we process when you visit this website or contact us through one of our forms. We have deliberately kept it short and specific: it describes exactly what happens on verrano.de.

1. Controller

Verrano GmbH
Mainzer Landstr. 220
60327 Frankfurt am Main, Germany

Phone: +49 (0) 69 76069219
E-mail: hello@verrano.de

Contact for data protection matters: Manuel Siskowski, reachable at the details above.

2. No cookies, no tracking, no cookie banner

This website sets no cookies and neither stores nor reads information on your device (no local storage, no tracking pixels, no advertising or social media trackers). That is why you will not find a cookie banner here. We do not build user profiles, do not retarget you and do not pass your data on for advertising purposes.

There is one exception, and it does not concern you as a visitor but our team: the password-protected editorial area (/admin) sets a strictly necessary session cookie after login.

3. Visiting the website: server log files

Every time a page is requested, your browser transmits technically necessary data that our server logs:

  • IP address
  • date and time of the request
  • the address (URL) requested, including any parameters — this includes the postcode you may enter in the store finder
  • volume of data transferred and status code
  • browser type and version, operating system
  • the previously visited page (referrer), if your browser sends one

The purpose is to deliver the website, to keep it secure and to diagnose faults. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Log files are deleted automatically after 14 days at the latest and are not combined with other data.

Hosting and technical operation are provided by Skelpo GmbH as our processor (Art. 28 GDPR); the servers are located in a data centre inside the European Union (Lithuania).

4. Audience measurement with Plausible Analytics

To understand which content is being read, we use Plausible Analytics. The software runs on a dedicated server operated by our service provider Skelpo GmbH inside the EU (domain pa.skelpo.com) — no data is passed to an analytics corporation.

Plausible sets no cookies and stores nothing on your device. Your IP address is not stored; it is only used in the moment of processing to derive a non-reversible checksum together with browser details and a daily rotating random value. This allows repeat visits within a single day to be counted without you being identifiable. Only aggregated figures such as page views, referring site, device type, browser and country are evaluated.

The legal basis is our legitimate interest in privacy-friendly audience measurement (Art. 6(1)(f) GDPR). As no information is stored on or read from your device, no consent under § 25 TDDDG is required. You can prevent the measurement by blocking scripts from pa.skelpo.com (e.g. with a content blocker).

5. Map view in the store finder (OpenStreetMap)

On the "Where to buy" page we show a map of our stockists. Your browser loads the map tiles directly from servers of the OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom). Your IP address is transmitted to the OpenStreetMap Foundation in the process; we have no influence over their further processing. An adequacy decision of the European Commission is in place for the United Kingdom. Privacy notice: https://osmfoundation.org/wiki/Privacy_Policy

The radius search itself takes place exclusively on our server: we resolve the postcode you enter using a locally stored postcode table. No external geocoding service is queried and your device location is not requested.

Legal basis: our legitimate interest in a usable store finder (Art. 6(1)(f) GDPR).

6. Instagram posts on the home page

On the home page we show recent posts from our Instagram channel. Your browser loads the images and videos from servers of the Behold service (Behold Studio, USA) and from the Instagram content network of Meta Platforms Ireland Ltd. Your IP address is transmitted to these providers in the process.

No cookies are set and no Instagram scripts or plug-ins are embedded; we do not link the content to any Instagram account. Where data is transferred to the USA, we rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses under Art. 46 GDPR.

Legal basis: our legitimate interest in presenting our current social media content (Art. 6(1)(f) GDPR).

7. Contact and enquiry forms

You can send us data via these forms:

  • Contact: name, e-mail address, subject, message
  • Become a retailer: company, contact person, e-mail address, phone number, type of business, message
  • Enquiry for professionals: company, contact person, e-mail address, phone number, type of business/channel, message

We also store the time of submission. To protect against automated spam the forms contain a field invisible to you and a timing check; no additional personal data is collected through this.

We process these details solely in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). The details are stored in our own content management system on the server named above and deleted once your enquiry has been dealt with conclusively and no statutory retention obligations apply — commercial and tax law periods can run up to ten years.

Providing the data is voluntary. However, without the details marked as mandatory we cannot process your enquiry.

8. Newsletter

We need your e-mail address for the newsletter. We use the double opt-in procedure: after signing up you receive an e-mail containing a confirmation link, and only once you confirm do we add you to the list. We store your e-mail address and the times of sign-up and confirmation — the latter so that we can demonstrate your consent.

The legal basis is your consent (Art. 6(1)(a) GDPR). You may withdraw it at any time with effect for the future — informally by e-mail to hello@verrano.de. After withdrawal we delete your address from the list. If you do not confirm the sign-up, we delete the unconfirmed entry.

Your address is stored in our own system; it is never sold and never used for any purpose other than sending the newsletter. We do not measure individual opening or click behaviour ("newsletter tracking").

9. Recipients of your data

We do not sell your data and do not pass it on for advertising purposes. Data is accessible to:

  • Skelpo GmbH — hosting, technical operation and maintenance, as processor under Art. 28 GDPR (servers in the EU)
  • the providers named in sections 5 and 6, insofar as your browser loads content from their servers
  • public authorities, where we are legally obliged to provide information

10. Your rights

You have the following rights towards us:

  • access to the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal message to hello@verrano.de is sufficient to exercise them.

Right to object (Art. 21 GDPR): you have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (sections 3 to 6).

Right to lodge a complaint: you may complain to a data protection supervisory authority at any time, for example the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany.

11. Data security

This website is delivered exclusively over encrypted HTTPS (TLS), so your form entries are not transmitted in plain text. We protect our systems against unauthorised access with technical and organisational measures.

12. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

13. Links to our social media profiles

In the footer we link to our profiles on Instagram, TikTok and YouTube. These are plain links — no plug-ins, buttons or tracking pixels from those services are embedded. Data is only transmitted to the respective provider once you click a link; their privacy terms then apply.

14. Changes to this privacy notice

We update this notice when we develop the website further or the legal situation changes. The version published on this page applies.