Privacy, Explained
Your data isn't
our secret ingredient.
What happens to your data when you visit GARLIC BOY — without the mystery.
When You Visit
We don't run analytics, tracking scripts, or build a marketing profile of you. Delivering this website still necessarily involves our hosting provider, Netlify, processing basic technical request data — that's true of any website, and we keep it to what's necessary.
When You Email Us
This site has no contact form. A mailto link opens your own email client, and if you send us a message, we receive it in a mailbox operated on Google Workspace, which processes it on our behalf.
Service Providers
Two providers help us run this: Netlify hosts the website, and Google Workspace operates our business email. We don't currently use any advertising, analytics, or embedded third-party service.
Who Is Responsible?
GARLIC BOY GbR, Genthiner Str. 51, 10785 Berlin, Germany. Email: hey@mygarlicboy.com.
GARLIC BOY GbR is the controller for the processing described in this policy.
When You Visit
This website is hosted by Netlify. Delivering it to your browser necessarily involves Netlify processing basic technical request data, which can include your IP address and related connection information, in order to serve the site securely and reliably. We don't use this for analytics, advertising, or profiling — no such tools are active on this site.
Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in providing, maintaining and protecting a secure, reliable public website.
When You Contact Us
There's no form on this site — every "contact" link is a mailto link that opens your own email software. If you choose to send us an email, GARLIC BOY GbR receives your address, message, and anything else you include, in order to reply. Our business mailboxes run on Google Workspace, which processes that email on our behalf.
Legal basis: Art. 6(1)(b) GDPR where your message concerns a contract or steps you've asked us to take before entering one; Art. 6(1)(f) GDPR — our legitimate interest in responding to and managing enquiries — for general messages.
Retention: we keep enquiry emails until the matter is resolved, and only longer where contractual, legal or statutory record-keeping obligations require it.
Cookies & Tracking
At launch, GARLIC BOY uses no analytics, advertising trackers, tracking pixels, or marketing cookies, and no browser storage for tracking purposes. Netlify Web Analytics is not enabled.
External Content
All fonts on this site are self-hosted. There are no YouTube, Instagram, map, or social-widget embeds anywhere on the site — links to Instagram are ordinary outbound links, not embeds. Once you leave our site, the destination's own privacy practices apply.
Shop & Checkout
The Shop and product pages are informational only. There's no live checkout, no customer accounts, and no active Shopify integration processing visitor or customer data. This policy will be updated before any online checkout is activated.
Who Processes Your Data
Netlify — our hosting provider, processes technical request data necessary to deliver and protect the website. Netlify may engage subprocessors, and international transfers are protected under the safeguards in its Data Processing Agreement, including Standard Contractual Clauses where applicable.
Google Workspace (Google) — our email provider, processes business correspondence on our behalf. Google may engage subprocessors, and applicable safeguards — including Standard Contractual Clauses where required — apply to restricted international transfers.
We don't sell your personal data.
Your Rights
Under the GDPR, you have rights over your personal data — detailed below.
Changes to This Policy
We'll update this page when what we actually do changes — including before we add ecommerce checkout, customer accounts, analytics, new embeds, or new service providers.
Last updated: 31 August 2026
Your Rights
Your data.
Your rights.
Access
Ask what personal data we hold about you.
Correction
Ask us to correct inaccurate data.
Deletion
Ask us to delete your data, where we're not legally required to keep it.
Restriction
Ask us to limit processing in certain circumstances.
Objection
Object to processing based on legitimate interest.
Data Portability
Request your data in a portable format, where applicable.
Complaint
You may lodge a complaint with a competent supervisory authority, including in the Member State of your habitual residence, place of work, or the place of the alleged infringement (Art. 77 GDPR). Our local authority is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany.
Tel: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de