Privacy policy

This website is hosted by netcup in a data centre in Nuremberg, Germany. When you visit, the server automatically processes technically necessary data in log files: IP address, date and time, page requested, browser type, operating system and the page you came from. This serves the secure and stable operation of the website and protection against abuse. The legal basis is Art. 6(1)(f) GDPR. Log files are kept only as long as necessary and are then deleted. We do not use a proxy or CDN service such as Cloudflare in front of the site.

This website does not set tracking or marketing cookies. When you switch the language, we store your choice in a technically necessary cookie (NEXT_LOCALE) so the site appears in your language on your next visit. The cookie contains no personal data. The legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.

To understand how the website is used, we use the analytics software Umami. It runs on a server we operate ourselves (analytics.chiefosei.dev); no data is passed on to third parties. Umami sets no cookies and stores no information on your device. It records the page visited, the referring page, browser, operating system, device type, screen size, language and the approximate country of origin. Your IP address is used only briefly to process the request and is not stored. A visit is not tracked across several days or devices and is not linked to a person. We also count clicks on important buttons and links, for example "Book a table", the phone number or the email address, likewise without any link to a person. The legal basis is our legitimate interest in designing and improving the website to fit its visitors' needs (Art. 6(1)(f) GDPR). You can object to this processing at any time (Art. 21 GDPR); just send us a short email. We do not use any other analytics or tracking services and do not embed advertising.

The fonts (Alegreya and Alegreya Sans) are served from our own server. No connection to Google servers is made when you visit the site.

We manage the menu with the content management system Sanity. Our server retrieves the content and delivers it with the page. When you visit this website, your browser does not connect to Sanity and your IP address is not sent to Sanity. We serve images from our own server.

This website contains links to Google Maps and to our Google profile. Data is only transmitted to Google once you click such a link, and Google's privacy policy then applies.

On the home page we show excerpts from public Google reviews with the name shown there. The legal basis is Art. 6(1)(f) GDPR. If you no longer want your review shown here, send us a short email and we will remove it.

For table bookings we embed the booking form of DISH Reservation (reservation.dish.co). The form is only loaded once you explicitly click "Book online" on the "Book a table" page. Only then does your browser connect to DISH, and your IP address and technical details are sent to DISH. The legal basis for loading it is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you give by clicking.

The details you enter in the form (such as name, contact details, date, time and number of guests) are processed to carry out your booking (Art. 6(1)(b) GDPR) and are handled by DISH on our behalf or under DISH's own privacy notices. If you do not want to load the form, please book by email or phone.

We sell our vouchers through Yovite. The link on the home page and in the footer opens Yovite's voucher shop in a new tab. Data is only sent to Yovite once you click the link, and Yovite's privacy policy then applies. Loading this website itself does not connect to Yovite.

This website has no contact form. If you email or call us, we process your details (for example name, contact details and the content of your request) to handle your request, including reservation and event enquiries. The legal basis is Art. 6(1)(b) GDPR where a contract or its preparation is concerned, otherwise Art. 6(1)(f) GDPR. The email links on this website only open your own email program.

We keep personal data only as long as the respective purpose requires. Requests by email or phone are deleted once they are dealt with and no statutory retention duty applies. Where a retention duty applies, for example under commercial or tax law, we keep the data until it expires and restrict it to that purpose. Server log files are deleted once they are no longer needed for operation, security and error analysis.

netcup: hosting of this website and server log files, data centre in Nuremberg, Germany.

Umami: audience measurement, self-hosted on our own server, no cookies.

DISH Reservation: online booking, only after you explicitly click “Book online”.

Yovite: voucher shop, only if you click the link.

Google: link to Google Maps and our Google profile, only if you click the link.

If a provider or its parent company is based outside the EU, data is transferred only on the basis of an adequacy decision or the EU Commission’s standard contractual clauses.

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). Where processing is based on your consent, you can withdraw it at any time with effect for the future.

Simply contact us at the address above.

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.