Gastronomy and hygiene products: selection, documentation and HACCP compliance

Anyone who provides food to guests in Germany is subject to Regulation (EC) No. 852/2004 on food hygiene and the national food hygiene regulation (LMHV). Both require a documented HACCP concept in accordance with Article 5 of Regulation (EC) 852/2004, which identifies, monitors and proves the critical control points in the company. Hygiene products are not an afterthought, but rather an integral part of the control measures. Without documented and suitable products, self-inspection is not audit-proof, and the food business operator bears personal responsibility according to Section 3 LMHV.

This guide classifies hygiene products in the catering industry according to their function and their regulatory role. You will find out which cleaning and disinfectants are suitable according to the DVG list and VAH list, how pest monitoring is documented in an audit-proof manner, which disposable and protective items must be kept in the personnel area and how the equipment list is linked to the HACCP plan. You will also see what fines there are under the LFGB and LMHV, how a hygiene officer structures the selection and what role a compliance platform plays if you have to keep an eye on several business premises at the same time. You form, applicable standards, concrete approach instead of general industry phrases. All requirements are documented by paragraph or regulation and are based on the German legal framework 2026, supplemented by the relevant EU requirements from regulations 852/2004, 1935/2004 and 10/2011 as well as the Infection Protection Act.

Regulation (EC) No. 852/2004 on food hygiene sets out the general hygiene requirements for food businesses in Annex II. Clean rooms, appropriate cleaning and disinfection procedures, appropriate pest control, adequate sanitary facilities and hygiene training for staff are required. The national LMHV supplements these specifications with specific requirements, including in Section 3 on the training requirement and Section 4 on relevant expertise. Anyone who uses hygiene products without incorporating them into these regulations is not fulfilling their obligation to self-monitor. In addition, there is the Infection Protection Act (IfSG), which in Section 43 prescribes instructions for employees who handle perishable foods.

In concrete terms, this means: Every cleaning agent, every disinfectant and every pest monitoring system needs written instructions for use, a definition of those responsible, a dosage and evidence of use and effectiveness. Annex II Chapter IX of EC 852/2004 expressly prohibits cross-contamination, which makes the separation of cleaning utensils by zone (kitchen, toilet, storage) mandatory. When it comes to pest control, Chapter IX also requires that systems, devices and the environment be protected from pest infestation, which can hardly be proven without documented monitoring. Violations of the LMHV can be sanctioned with fines of up to 100,000 euros according to Section 60 LFGB; in particularly serious cases, there are also criminal consequences according to Section 58 LFGB.

In practice, this means a chain of product, instructions, training and evidence. Anyone who purchases hygiene products without setting up this chain is buying symptom control instead of compliance. A hygiene officer ensures that every product with data sheet, safety data sheet and instructions for use is in a file and can be accessed immediately in the food monitoring audit. The annual repeat training in accordance with Section 4 LMHV and the instructions in accordance with Section 43 IfSG are also documented there. Audit-proof, documented, § 4-LMHV-proof.

Cleaning agents are a daily hygiene tool in the catering industry. Alkaline cleaners, acid cleaners, degreasers and special cleaners are relevant for use in food contact. The decisive factor is the suitability for surfaces close to food, documented in the product data sheet and the safety data sheet according to REACH and CLP. Anyone who uses cleaning agents without a safety data sheet is also violating obligations under the Hazardous Substances Ordinance (GefStoffV) and the ArbSchG risk assessment. There are also labelling obligations in accordance with CLP Regulation (EC) 1272/2008, whose symbols and H phrases must also be visible in refill containers.

An audit-proof cleaning plan names the zone, frequency, agent, dosage, exposure time, method and responsible person. Typical for kitchens: daily cleaning of work surfaces, cleaning of critical points several times a day (cutting boards, knives, containers), weekly basic cleaning of equipment, monthly cleaning of exhaust air, filters and storage shelves. The dosage must be determined according to the manufacturer's instructions; a mixture of different types of cleaners is excluded due to the risk of reaction according to GefStoffV. In particular, the combination of acid cleaners with chlorine-containing agents leads to the formation of toxic chlorine gas.

In the HACCP context, cleaning agents are rarely critical control points in the narrower sense, but they are indispensable hygiene prerequisite programs (PRP). If cleaning services are outsourced, Section 4 LMHV also applies to the service provider, and contractual, training and documentation obligations shift to the contractor. A central directory of all cleaning agents used with the status of the safety data sheets, training levels and those responsible for the plan is the prerequisite for providing complete information in an audit situation. Safety data sheets must be checked to ensure they are up to date at least every three years, and immediately if there are changes to the recipe. In addition, operating instructions must be drawn up in accordance with Section 14 GefStoffV and trained with staff at least annually. The auditor calls, the evidence is ready.

Disinfectants follow a stricter logic than cleaning agents. In the food sector, products with proof of effectiveness are standard according to the list of the German Veterinary Medicine Society (DVG), and in the human medical personnel sector the list of the Association for Applied Hygiene (VAH). The DVG list differentiates between areas of application such as surface disinfection, hand disinfection, immersion disinfection and device and tool disinfection. A selection of funds without reference to these lists is difficult to justify in an audit. In addition, there is the Biocide Regulation (EU) 528/2012, which approves and monitors active ingredients and product types throughout Europe.

In practice, surface, dish and hand disinfectants are primarily used in the catering industry. When disinfecting surfaces, the exposure time must be taken into account, typically between one and five minutes depending on the concentration and spectrum of effect. When disinfecting hands, agents with proven virucidal, bactericidal and yeasticidal effects are used. If devices and tools come into contact with food, residues must be removed by rinsing with drinking water quality in accordance with the Drinking Water Ordinance. In the event of norovirus outbreaks, agents with a limited range of action Viruzid Plus are required, which are marked accordingly in the DVG or VAH list.

The following applies to the documentation: Each disinfectant has a safety data sheet, instructions for use in German and proof of training for the staff. If one agent is changed, the entire chain is updated. In the CIVAC workspace, the disinfectant list is linked to the cleaning plan, the training matrix and the DVG or VAH list versions. Anyone who maintains this in Excel format loses sight of deadlines and is put under pressure in every audit situation. In addition, the effective areas A, B, AB, C and D of the DVG list as well as the effective areas of the VAH list are explicitly stored as fields so that the suitability for the specific application can be seen at a glance. Others run compliance like a filing cabinet. We run it like software.

Chapter IX of Annex II to Regulation (EC) 852/2004 requires appropriate pest control methods. It is common practice to have professional pest monitoring carried out by an external service provider who installs bait boxes, sticky traps, pheromone traps and UV flying insect killers and checks them at fixed intervals. The products used must be approved for the food sector; biocidal active ingredients are based on the EU Biocide Regulation (EU) No. 528/2012 and national approvals. The preventative approach (Integrated Pest Management) is preferable to chemical control and is relevant to the audit.

Documentation is crucial for the audit process. Compliant pest monitoring includes a site plan with numbered bait and trap positions, an inspection report per appointment, measures to be taken in the event of an infestation and an annual report with trend analysis. In the event of an infestation, the causes must be investigated, the affected food must be blocked and, if necessary, destroyed, and the measures taken to eliminate it must be documented. A lack of trend analysis is one of the most common complaints in audits. A professional infestation report also contains recommendations for structural or organisational improvements, such as ventilation grilles, door seals or garbage disposal. For storage and high-bay areas, UV lamp maintenance with documented tube replacement is also required.

The selection of the service provider is a question of qualifications. Proof of expertise in accordance with the Chemicals Prohibition Ordinance (ChemVerbotsV) and experience in the food sector are minimum criteria. Contracts with the pest controller regulate frequency, response times in the event of an infestation, report formats and contact persons. Anyone who operates several business premises usually has a framework agreement with location-specific annexes. In the CIVAC workspace, site plans, control protocols, certificates of expertise and contracts are maintained as a template package and linked to the HACCP plan. An escalation matrix determines which level of infestation leads to which reaction time, from two hours for acute pest pressure to five working days for minor abnormalities. The appointment certificate, signed, filed, verifiable.

§ 4 LMHV and Annex II Chapter VIII of EC 852/2004 require that all people who handle food maintain cleanliness, wear suitable work clothing and, if necessary, protective clothing. Specifically, this means: chef jackets, aprons, hair protection, closed work shoes and, if necessary, disposable gloves. The employer is responsible for providing it; cleaning is usually carried out by professional laundries or using approved industrial processes. Private cleaning of work clothing in a household machine is not intended because standardised effectiveness against microorganisms cannot be guaranteed.

For disposable gloves, their suitability for food contact is crucial. The relevant regulations are Regulation (EC) No. 1935/2004 on materials and objects that come into contact with food, as well as the German consumer goods regulation. Products without a declaration of conformity for food contact may not be used in the kitchen. Vinyl, nitrile and latex gloves are not automatically food grade, the glass and fork symbol on the packaging and the DoC are required. Allergy-friendly selection, especially powder-free nitrile gloves, is standard in view of TRBA 250 and allergy risks among staff. Due to the risk of sensitization, latex gloves should only be used in very limited applications.

Hand hygiene is the single most effective measure against cross-contamination. Wash basins within easy reach of the workplace, soap dispensers, disposable towels and hand disinfectants are mandatory equipment. Training on correct handwashing techniques is carried out and documented at least once a year in accordance with Section 4 LMHV. Instructions in accordance with Section 43 IfSG are mandatory before starting work and every two years thereafter. If there are signs of illness with reportable pathogens, there is a ban on activity in accordance with Section 42 IfSG until medical evidence has been provided. In the workspace, training data, participants and content are stored in an audit-proof manner, so that supervisory authorities receive the training map at the push of a button. Deadline expires as soon as we become aware of it.

Disposable items such as napkins, disposable cups, baking paper, cling film, roasting tubes, sampling containers and packaging must meet the requirements of Regulation (EC) No. 1935/2004. Purity, migration behaviour and suitability for the intended application are decisive. Manufacturers provide a Declaration of Compliance (DoC), which restaurateurs file in their hygiene files. Without DoC, the operation is not compliant with the rules. For specific applications such as oven use, temperature and fat resistance must also be proven.

Regulation (EU) No. 10/2011 and its updates, which regulate specific migration limit values ​​and approved substances, also apply to plastics. Regulation (EU) 2022/1616, which defines requirements for recycling processes, is relevant for packaging made from recycled plastic. Anyone who operates take-away must also comply with obligations under the Packaging Act (VerpackG) and the Single-Use Plastic Ban Ordinance, for example regarding plastic drinking straws, cotton swabs and food containers made of expanded polystyrene. In addition, there is the obligation to offer reusable food in accordance with Section 33 of the VerpackG for take-away food and drinks, which restaurateurs of a certain size must comply with. The licensing requirement for a dual system according to § 7 VerpackG for service packaging must also be taken into account.

Practically, this means a supplier list with DoCs per item, migration test reports and batch tracking. In the event of a recall by the manufacturer, operating sites must be able to identify within a few hours which batch was used where and which foods are affected. Anyone who wants to understand this without digital inventory management will lose valuable time. In the CIVAC workspace, DoCs, supplier contacts and procurement points are referenced for each article; the recall workflow is stored as a standard template. Information can be recorded promptly via the EU recall platform RASFF and national reporting offices and transferred to the workflow. When food control calls, the process is structured and not improvised.

The HACCP concept according to Article 5 of Regulation (EC) 852/2004 distinguishes between critical control points (CCPs) and prerequisite programs (PRPs). Hygiene products are PRPs in most catering establishments: they create the basis on which CCPs can be meaningfully monitored. Examples: cleaning and disinfection programs, personnel hygiene, pest monitoring, material hygiene and drinking water quality. CCPs, on the other hand, are typically cooking processes, keeping cold, keeping hot and pasteurizing.

The link between products and the HACCP plan is central to the audit. If the auditor asks which product is used to disinfect the cutting boards, how long it works and what evidence, the answer must come within minutes. This assumes that the HACCP plan, cleaning plan and product list are consistent. A common weak point is the discrepancy between the official HACCP document and the product actually used after a change of supplier. Allergen management according to Regulation (EU) No. 1169/2011 (LMIV) also requires consistent product logic, especially when separating devices and cleaning processes. An allergen matrix documents which of the 14 main allergens are contained in which dish and how transmission risks are controlled.

In addition, validation and verification obligations must be observed. Validation means that a method used actually achieves the desired effect, such as a reduction in germs by a defined log level. Verification means that the application is checked in practice, for example through hygiene swab samples, ATP measurements or endotoxin tests. Both requirements are described in detail in ISO 22000:2018 and are regularly checked by food auditors. Anyone who works in fresh kitchens with low germ target values ​​supplements this routine with regular Total Viable Count and Listeria samples. Validation reports, swab sample protocols and ATP measurement protocols are stored as templates in the CIVAC workspace and linked to the responsible hygiene officer.

Anyone who operates several restaurants, a hotel group or a system catering establishment is faced with a double task: hygiene must be met equally at each location, and the documentation must be kept in a consolidated manner. Food monitoring is carried out by the locally responsible district authority; the requirements are identical nationwide, but the details of the interpretation vary regionally. Anyone who operates locations in Bavaria, Berlin and Hamburg has to take three different food monitoring practices into account. In addition, there are smiley systems from individual countries and municipal publications in accordance with the Consumer Information Act (VIG).

Procurement is usually centralized in multi-location structures in order to use framework agreements and conditions. This has the advantage of uniform products, the disadvantage is the dependence on the supplier and the risk of delivery bottlenecks. A list of secondary suppliers for each critical product makes sense, as does minimum stocks of disinfectants and protective items. In hygiene audits, central and location-specific documents are weighted differently, which requires a clean client structure in the documentation. Audits by franchisors or retail chains usually follow IFS or BRCGS standards with their own checklists, which must be processed in addition to the LMHV mandatory documentation.

CIVAC maps this structure in a workspace. Central specifications (cleaning plan template, training requirements, supplier list) are available once, location-specific data (person responsible, equipment list, local authority contacts) per location. Training statuses, audit results and complaints are aggregated centrally and create a hygiene compass for management. If you want to have the hygiene organisation managed externally, mandate a hygiene officer as an officer-as-a-service with the same platform. The monthly reporting line provides the board and management with a consolidated view of open risks, deadlines and prioritised actions per location. Licence the workspace for your internal representatives or have our representatives order it.

CIVAC is a compliance platform and officer-as-a-service. For the catering industry this means: a workspace with HACCP templates, cleaning and disinfection plans, pest monitoring templates, training matrices and a central safety data sheet library. The 490 audit templates include LMHV compliant training protocols, HACCP audit checklists, allergen management templates and supplier audit templates. Data is stored with EU data residency, the platform is organised according to ISO/IEC 27001:2022 with 93 controls and therefore also supports requirements from trading standards such as IFS Food and BRCGS.

You have two choices. Variant one: You have an internal hygiene officer and licence the workspace so that the hygiene organisation per location is managed consistently and audit-proof. You retain personnel sovereignty, but gain HACCP templates, documentation standards and a standard procedure for supervisory visits. Variant two: You hand over the mandate and use the hygiene officer as an external service. Order usually within two working days, ready for use with all templates and reporting line to management. Mixed models are also possible, in which an internal person is the operational contact point and CIVAC takes over the technical in-depth work for HACCP, allergen management and supplier audits. Licence the workspace for your internal representatives or have our representatives order it.

If you want to check today how your hygiene products and your documentation fit together, then write to us. Turn reading into a mandate.: info@civac.de or the contact form on civac.de. Within one working day you will receive an initial assessment of your hygiene organisation, a rough indication of effort and a suggestion as to which HACCP gaps should be closed first. In the initial consultation, we will clarify whether a pure workspace licence, a complete officer-as-a-service mandate or a hybrid model with an internal contact point and external specialist support is suitable for your company. If there are several locations, we also discuss the client structure, the distribution of responsibilities and the reporting rhythms to the management. The appointment certificate, signed, filed, verifiable.