Datenschutz

1. Verantwortlicher / Controller

Responsible for data processing on this website within the meaning of the GDPR (DSGVO):

For any privacy-related question you may contact us using the details above.

2. General information

We take the protection of your personal data seriously. We process personal data only in accordance with the GDPR, the German BDSG and the TDDDG. This policy explains what data we process when you visit this website and for what purposes.

3. Hosting & server log files

This website is hosted by an external hosting provider: [HOSTING PROVIDER NAME & ADDRESS]. When you access the site, the provider's servers automatically collect and store technical access data (“server log files”) that your browser transmits, in particular: IP address, date and time of access, requested file/URL, referrer URL, browser type and version, and operating system.

This data is technically necessary to display the website reliably and securely. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, stable online presence). A data processing agreement (Art. 28 GDPR) with the hosting provider must be in place — [verify].

4. SSL/TLS encryption

This site uses SSL/TLS encryption (HTTPS) to protect the transmission of content and requests. You can recognise an encrypted connection by the “https://” in the address bar.

5. Cookies & similar technologies (§ 25 TDDDG)

Cookies are small text files stored on your device. Storing or accessing information on your device that is not strictly necessary requires your consent under § 25(1) TDDDG; strictly necessary technologies do not (§ 25(2) TDDDG).

• Strictly necessary: The website itself (WordPress/Elementor) does not set marketing cookies for ordinary visitors. Session or functional cookies may be set only where technically required.
• Consent-based: The embedded Google Map (see § 7) is only loaded after you actively click to enable it, and translation/embedded third-party services may store information only within their own scope. We do not use advertising or tracking cookies.

We have not detected analytics or advertising trackers (e.g. Google Analytics, Google Tag Manager, Meta Pixel) on this website. If such tools are added later, this policy and the consent mechanism must be updated accordingly — [verify on publish].

6. Google Fonts

This website currently loads fonts (“Google Fonts”) from Google servers via the page builder. When a font is loaded, your browser connects to Google and your IP address is transmitted to Google Ireland Ltd. / Google LLC (USA). Legal basis: Art. 6(1)(f) GDPR (consistent, appealing presentation).

7. Google Maps (embedded map)

On our contact/location section we offer an embedded map from Google Maps, operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. The map does not load automatically. It is only loaded after you click “Show Google Map” (click-to-load). Once enabled, Google may receive your IP address and set cookies, and data may be processed on servers in the USA.

Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG (your consent, given by clicking to load the map). You can withdraw consent at any time via the “Cookie-Einstellungen” link in the footer. Alternatively you can open the location directly in Google Maps without loading the embed. Google's privacy policy: policies.google.com/privacy.

8. Table reservations via WhatsApp

Our reservation page provides a form that helps you prepare a reservation message. When you submit it, the details you entered (e.g. name, phone number, date, time, number of guests, optional notes) are assembled into a message and opened in your own WhatsApp app addressed to the restaurant. The form itself does not store your data on this website; the message is only sent if you press “send” in WhatsApp.

If you send the message, it is processed via WhatsApp / Meta Platforms Ireland Ltd. (and Meta Platforms, Inc., USA) under their own terms and privacy policy: whatsapp.com/legal. We use the data you send solely to process and confirm your reservation. Legal basis: Art. 6(1)(b) GDPR (pre-contractual / performance of your request) and Art. 6(1)(f) GDPR.

9. Contact by e-mail

If you contact us by e-mail (e.g. via the address published in the Impressum), the data you provide (e.g. your e-mail address, name and the content of your message) is processed to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR (interest in answering enquiries).

10. Website translation (GTranslate)

This website offers a language switcher provided by the “GTranslate” plugin (free version), which uses Google's translation service. Depending on configuration, using the translation feature may load resources from Google and store a functional cookie (e.g. googtrans) to remember your chosen language, and content may be processed by Google (incl. USA). Legal basis: Art. 6(1)(f) GDPR / Art. 6(1)(a) GDPR where consent is required. [Operator: verify the exact data flow of the free GTranslate widget and, if needed, gate it behind consent or use a privacy-friendlier setup.]

11. Recipients & processors

• Hosting provider – [NAME] (server operation, log files).
• Google Ireland Ltd. / Google LLC – Google Maps (on consent) and Google Fonts.
• Meta / WhatsApp – only if you choose to send a reservation message via WhatsApp.

We do not sell your personal data. Processors act on our behalf under data processing agreements (Art. 28 GDPR) where applicable.

12. Transfers to third countries

Some of the services above (Google, Meta) may process data in the USA. Such transfers are based on the EU Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework where the recipient is certified. Please refer to the respective provider's privacy policy for details.

13. Data retention

We store personal data only as long as necessary for the respective purpose or as required by statutory retention periods (e.g. commercial and tax law). Server log data is generally stored only for a short period and then deleted or anonymised. Reservation-related messages are deleted once they are no longer needed.

14. Your rights

Under the GDPR you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future (Art. 7(3)).

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. For a business located in Bavaria, the competent authority for the private sector is typically the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach. [Verify the authority that is competent for your registered business location.]

15. Automated decision-making / profiling

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

16. AI-generated content

Some visual content on this website (e.g. food or ambience imagery) may be generated or enhanced using AI for illustrative and promotional purposes. This does not involve processing of your personal data. For details see Transparenz über KI-generierte Inhalte.

17. Changes to this privacy policy

We may update this privacy policy to reflect changes to the website or legal requirements. The current version applies as published on this page.

Draft version – last updated: [DATE]. This is a website-specific privacy information draft, not legal advice, and is not a guarantee of compliance. Please have it reviewed by the responsible operator or a qualified German legal professional before publishing.