Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the Legal Notice of this website.

How do we collect your data?

Your data is collected when you provide it to us. This may include data you enter in a reservation form.

Other data is automatically collected by our IT systems when you visit the website. This primarily includes technical data (e.g., browser, operating system, or time of page access).

What do we use your data for?

Some data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior. Primarily, your data is used for table reservations.

2. Data Controller

The data controller for this website is:

3. Data Processing for Reservations

What data is collected?

When making a table reservation, we collect:

• Name
• Email address (optional)
• Phone number (optional)
• Number of guests
• Desired date and time
• Special notes (optional)

Purpose of Processing

We use this data exclusively to:

• Process and manage your reservation
• Contact you for questions or changes
• Send confirmation and reminder emails

Legal Basis

Processing is based on Art. 6(1)(b) GDPR (contract performance) and your consent under Art. 6(1)(a) GDPR.

Storage Duration

Reservation data is stored for 12 months after the reservation date and then automatically deleted, unless legal retention requirements apply.

4. Email Communication

For sending confirmation and status emails, we use the service Resend (Resend, Inc., USA). When sending emails, the following data is transmitted to Resend:

• Recipient's email address
• Email content (reservation details)

Data transfer to the USA is based on EU Commission Standard Contractual Clauses. More information can be found in Resend's Privacy Policy.

5. SMS Communication

For sending SMS notifications, we use the service Twilio (Twilio Inc., USA). When sending SMS, the following data is transmitted to Twilio:

• Recipient's phone number
• SMS content (reservation details)

Data transfer to the USA is based on EU Commission Standard Contractual Clauses. More information can be found in Twilio's Privacy Policy.

6. Payment Processing

For processing deposits, we use the payment provider Stripe (Stripe, Inc., USA). When making a payment, the following data is transmitted to Stripe:

• Payment information (credit card details)
• Transaction amount
• Email address (for payment confirmation)

Data transfer to the USA is based on EU Commission Standard Contractual Clauses. More information can be found in Stripe's Privacy Policy.

7. Google reCAPTCHA

We use "Google reCAPTCHA" on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to verify whether data entry on this website (e.g., in a reservation form) is made by a human or by an automated program.

For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically when the visitor enters the website. reCAPTCHA evaluates various information (e.g., IP address, time spent on the website, or mouse movements made by the user).

The use of reCAPTCHA is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its website from abusive automated access and spam.

For more information about Google reCAPTCHA, see the Google Privacy Policy and Terms of Service.

8. Google Places API

We use the Google Places API to synchronize opening hours. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

When using this feature, the following data is transmitted to Google:

• Google Place ID of the restaurant
• Server IP address

For more information, see the Google Privacy Policy.

9. Hosting

This website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). When visiting this website, Vercel may collect technical data, including:

• IP address
• Date and time of request
• Amount of data transferred
• Browser type and version
• Operating system

For more information, see Vercel's Privacy Policy.

10. Your Rights

You have the right at any time to:

• Access your personal data stored with us (Art. 15 GDPR)
• Rectification of incorrect data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Receive your data in a structured format (data portability, Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact us using the details in the Legal Notice.

11. Withdrawal of Consent

Many data processing operations are only possible with your explicit consent. You can withdraw consent at any time. The legality of processing carried out before withdrawal remains unaffected.

12. SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the address bar changing from "http://" to "https://" and the lock symbol in your browser bar.

13. Updates to this Privacy Policy

This privacy policy is currently valid as of: January 2025.

Due to further development of our website or changes in legal or regulatory requirements, it may become necessary to update this privacy policy.