Privacy Policy

General processing of visitor data

Our website can generally be used without providing any personal data.

However, we would like to point out that in this case access data will also be collected and stored in the server log files. This concerns in particular the following data:

We evaluate this information in an anonymous form to ward off attacks and to improve our offer (processing of personal data in the context of a weighing of interests in accordance with Art. 6 Para. 1 S. 1 lit. f) DSGVO) and then delete it. The data cannot usually be traced back to you personally and is not merged with other data.

However, if there are concrete indications of illegal use, we reserve the right to subsequently evaluate the data.

Data categories; Data sources

In principle, we process the personal data that is transmitted by you in connection with the use of our website or which you provide to us as part of an inquiry, a pre-contractual legal relationship or a contractual relationship. In individual cases and insofar as this is necessary in the context of the fulfillment of the contract, we also process personal data that has been taken from publicly accessible sources (e.g. commercial register, debtor registers, Internet) in a permissible manner or that has been given to us by third parties (e.g. credit bureaus) in a permissible manner. were transmitted.

This can be technical data concerning you (IP address, browser type), personal data (name, birthday, legal representative), address data (address, e-mail address, contact person), financial data (name of account holder, IBAN, BIC ), contract data (contract term, services purchased, cancellations), communication data (correspondence, e-mail traffic), advertising data (sales letters) and other comparable categories of personal data.

When you visit our website, we also process location data such as the position of the device, your household and comparable location data. The processing takes place for the purpose of providing you with an individual offer for restaurants in your area. In these cases, data processing takes place exclusively on the basis of your consent in accordance with Article 6 (1) sentence 1 lit. a) GDPR.

Processing of personal data after consent (Art. 6 Para. 1 S. 1 lit. a) GDPR)

In individual cases, we will obtain your consent for specific purposes that are expressly stated in connection with the data collection, for example for the collection of location data.

In these cases, data processing takes place exclusively on the basis of your consent. It may be that the processing of your request is not possible without your consent and must therefore be made dependent on it. The data is processed exclusively for the purpose(s) expressly stated.

You can revoke your consent at any time with effect for the future. The revocation has no influence on the legality of the processing up to the time of the revocation.

Insofar as personal data is transferred to a third country, we comply with the data protection regulations for this in that the data transfer is based on standard contractual clauses or we obtain your consent to this in accordance with Article 49 (1) sentence 1 lit. a) GDPR.

Data is transmitted, for example, in connection with the use of Google and meta services. Due to the use of these services, data will be transmitted to the United States of America.

The data will only be transmitted if you give us your consent.

The specific details of the recipient, the transmitted personal data and the purpose of the data transfer can be found in the information on the respective processing below.

There is a risk to your personal information as a result of data sharing. In the United States of America, there is no level of data protection comparable to EU law (GDPR) and/or national regulations (e.g. BDSG) or adequate guarantees that ensure the maintenance of an adequate level of data protection. Furthermore, due to the American legal situation, any deficits cannot be compensated for by other specific guarantees. Nevertheless, depending on the service, standard contractual clauses are sometimes used in order to achieve the greatest possible protection for your data. You can find out whether standard contractual clauses are used in the statements on the respective services.

You can revoke your consent at any time with effect for the future. The revocation has no influence on the legality of the processing up to the time of the revocation.

Processing of personal data for contract execution or contract initiation (Art. 6 Para. 1 S. 1 lit. b) GDPR)

If a contract is concluded with us, we use personal data insofar as this is necessary for the execution of the contract or for the implementation of pre-contractual measures. The purposes of the data processing are based on the specific contract content, which you can find in the contract documents.

If a contract already exists with us, we process your data to check that you are our contractual partner and to properly provide the contractual service owed.

Processing of personal data in the context of a balancing of interests (Art. 6 Para. 1 S. 1 lit. f) GDPR)

We process personal data after balancing interests, insofar as this is necessary to protect our interests or the interests of third parties.

Examples of such purposes are:

  1. Ensuring the IT security and integrity of our systems, Prevention or investigation of crimes, Assertion or defense of legal claims.

Contact

If you contact us by e-mail or telephone, we process the personal data you have provided to answer your request. The legal basis for this is Article 6 Paragraph 1 Clause 1 Letter b) GDPR, but exceptionally, if there is no contractual relationship, Article 6 Paragraph 1 Clause 1 Letter f) GDPR, with the legitimate interest in the proper answering your request. We delete the data after the final processing of your request, provided there is no contractual or legal storage obligation.

Contact form

If you send us an inquiry via our contact form, we will process the data you provide on the basis of your consent in accordance with Article 6 (1) sentence 1 lit. a) GDPR in order to process your inquiry. In principle, your data will be deleted after the request has been processed, unless there is a contractual or legal obligation to retain it. If you provide us with contractually relevant information, we will transfer this to our inventory system.

You can revoke your consent at any time with effect for the future using all of the contact details provided.

Customer satisfaction

As far as we determine your customer satisfaction, this is done on the basis of a legitimate interest within the meaning of art. 6 paragraph 1 sentence 1 lit. f) GDPR. We have a legitimate interest in collecting and analyzing customer opinions and using the results derived from them to improve our offer. In this respect, we only collect the data that is required for this purpose. This serves the purpose of enabling a proper evaluation of the data, as this allows multiple opinions of the same person to be determined. Providing your name and other personal information that you provide as part of the evaluation is voluntary.

Order

If you place an order via our website, we need the personal data required to process the order in order to conclude the contract. The legal basis for data processing is Article 6 Paragraph 1 Clause 1 Letter a) GDPR and Article 6 Paragraph 1 Clause 1 Letter b) GDPR, as these are pre-contractual measures.

If a contract is concluded with us, further data processing is based on Article 6 Paragraph 1 Sentence 1 Letter b) GDPR.

You can find our general terms and conditions at: link

If you contact us within the framework of an existing contractual relationship for a purpose that is necessary for the execution of the contract, we also process this data on the basis of Article 6 (1) sentence 1 lit. b) GDPR.

Customer account

You have the option of opening a customer account voluntarily, through which your data will be saved as part of the contractual relationship with us. The data is processed on the basis of your consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a) GDPR. When registering, the data entered will be stored revocably. You can delete the data you have entered and the entire account at any time. This does not apply to the data that is absolutely necessary for the execution of the contractual relationship on which the customer account is based..

In some cases, we process such data in the customer account that you have given us when concluding the contract or in the context of the execution of the contract by adding, supplementing and evaluating this to your customer account.

Use of cookies

Various cookies may be used during your visit to our website. These are text files that are placed on your computer and enable, among other things, a smooth visit to our website.

In some cases, cookies are necessary to ensure the functionality or IT security of our website. Such function cookies are used on the basis of a legitimate interest in enabling the use of our website, including its functions, in accordance with Article 6 (1) sentence 1 lit. f) GDPR.

We may use other - non-essential - cookies on the basis of Article 6 (1) sentence 1 lit. a) GDPR and therefore on the basis of your consent. The purposes of the cookies used in each case may include:

Enabling the use of special functions,
the (pseudonymized) analysis of user behavior in order to optimize our website,
Increasing the attractiveness and ease of use of our website,
Improvement and needs-based design of our offer,

be.

The use of unnecessary cookies takes place within the framework of so-called usage profiles. You will be assigned a pseudonym under which the usage data will be stored. Your IP address is only stored in abbreviated form, so that a personal assignment of the usage profile is no longer possible.

If we use cookies primarily for the purposes of (re)marketing or the implementation of (social media) plugins, we base this use on your free consent to such data processing and require your consent in this respect. With regard to the individual plugins or tracking tools, we refer to the following detailed explanations.

Most of the cookies we use are deleted from your computer after you close your browser (session cookies). Other types of cookies can remain on your computer and enable us to recognize your computer the next time you visit our site using the user profile that has been created (permanent cookies).

Cookies are used on our site only by ourselves and not by third parties, with the exception of third-party cookies, which are expressly mentioned in this privacy policy.

You can declare your consent by confirming our cookie banner when you visit our website. You can revoke your consent once given at any time with effect for the future.

We use the following cookies:cookiePurposeStorage DurationRemember login

No use of social plugins

We do not use any social plugins on our website.

Google Maps

We use a plugin of the internet service Google Maps on our website. Google Maps is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (

If you agree to the processing of your data by the

We have no knowledge of the exact content of the transmitted data, nor of their use by Google. In this context, the company denies the connection of the data with information from other Google services and the collection of personal data. However, Google may transfer the information to third parties. If you disable JavaScript in your browser, you prevent Google Maps from running. However, you will then also not be able to use a map display on our website.

You can find out more about the data protection regulations and terms of use for Google Maps here:

We use Google Fonts in so-called

The transfer of data to the USA is permitted based on your consent in accordance with Article 49 (1) sentence 1 lit. a) GDPR. The processing is necessary for a proper presentation of our website and is in this respect both in our interest and in yours. The legal basis for the processing is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR, namely a legitimate interest in being able to present the company's external appearance through a functional website.

You can find more information on the Google websites under the following links:

Payment Service Provider

For payment processing, we pass on your payment data to the following payment service providers.

The payment service providers are used on the basis of Article 6 Paragraph 1 Clause 1 Letter b) GDPR (contract processing) and in the interest of a payment process that is as smooth, convenient and secure as possible (Article 6 Paragraph 1 Clause 1 Letter f) GDPR). Insofar as your consent is requested for certain actions, Art. 6 (1) sentence 1 lit. a) GDPR is the legal basis for data processing; Consent can be revoked at any time with effect for the future.

The data is always passed on on the basis of a legal standard or a suitable contract according to Art. 26 or 28 DSGVO, which ensures compliance with all data protection requirements

PayPal: You can use PayPal, PayPal Europe S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. Your data will be transmitted directly to PayPal for the purpose of payment processing. Payments are processed via virtual accounts or via a virtual credit card. The data that is required for proper payment and contract processing is transmitted.

The processing of your data by PayPal takes place in accordance with Article 6 Paragraph 1 Sentence 1 lit. b) GDPR, insofar as this is necessary for the execution of the contract.

It cannot be ruled out that PayPal will forward your data to third parties for credit and identity checks - insofar as this is necessary to fulfill contractual obligations. Further information on the subject of data protection at PayPal can be found under this link:

PayPal may pass on personal data to affiliated companies and other service providers if this is necessary to fulfill the contract. Insofar as data is transmitted to the USA, this is done on the basis of your consent in accordance with Article 49 (1) sentence 1 lit. a) GDPR.

Sofortüberweisung: As a means of payment, you can choose Sofortüberweisung, a payment service provided by SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany (hereinafter: SOFORT). Your personal data will be transmitted directly to SOFORT for the purpose of payment processing.

You can find more detailed information on the terms of use and data protection of Sofortüberweisung under

Data Sharing

We pass on data to other third parties if and to the extent that we have delegated the fulfillment of tasks to them. The data will only be passed on if this is necessary to fulfill the assigned tasks.

We work with the following companies:

SOFORT GmbH, Fußbergstrasse 1, 82131 Gauting, Germany

Furthermore, service providers can be entrusted with tasks in the following areas, for example:.

1: IT maintenance

2: IT development

3: IT delivery

4: legal advice

If necessary, we will pass on your personal payment data to a bank commissioned with payment processing (SEPA direct debit or receipt).

The data is always passed on on the basis of a legal standard or a suitable contract according to Art. 26 or 28 DSGVO, which ensures compliance with all data protection requirements.

Otherwise, data will only be passed on in the context of the cases provided for by law, for example in the case of a statutory obligation to provide information to law enforcement authorities. In these cases, the transfer of data is legitimized in accordance with Article 6 Paragraph 1 Clause 1 Letter c) GDPR.

Data transfer to a third country

A transfer of data to a third country is intended. This transfer takes place on the basis of the consent you have given. The recipients of the data you have provided are the following companies:

1: 2 PayPal Holdings, Inc., 211 North First Street, San Jose, California 95131, USA

2: 2 PayPal Holdings, Inc., 211 North First Street, San Jose, California 95131, USA

If data is transmitted to a third country on the basis of consent without an adequacy decision or other suitable guarantees being available at the same time, the associated increased risk of data processing must be taken into account on the basis of Article 49 (1) sentence 1 lit be notified during the transfer. However, we would like to assure you that potential risks are successfully minimized thanks to careful selection and constant monitoring of the standards of our contractual partners.

Duration of data storage

Your personal data will be deleted by us immediately as soon as the data is no longer required to fulfill contractual and legal obligations or to safeguard our legitimate interests.

In the case of a contractual relationship, personal data is stored at least for as long as is necessary to fulfill contractual obligations and exercise contractual rights. This period can extend beyond the actual contract period, since the data can still be relevant after the end of the contract within the framework of the limitation periods. In addition, deletion can only take place when any retention periods under tax and commercial law have expired.

You can find the criteria for how long cookies are stored in the relevant section.

Data Subject Rights

As a person affected by the processing of personal data, you have the following rights:

You have the right to request confirmation as to whether personal data is being processed. If this is the case, you have a right to information about the personal data and to the information listed in Art. 15 DSGVO.

You have the right to request the person responsible to immediately correct incorrect personal data concerning you and, if necessary, to complete incomplete personal data (Article 16 GDPR).

You have the right to demand that the person responsible delete your personal data immediately if one of the reasons listed in paragraph 17 DSGVO applies, e.g. if the data is no longer required for the purposes pursued (right to deletion ).

You have the right to request the person responsible to restrict the processing if one of the conditions listed in Article 18 GDPR is met, e.g. B. if you have lodged an objection to the processing, for the duration of the examination by the person responsible.

You have the right to receive the personal data that you have provided to us in a structured, common and machine-readable format, and you have the right to transmit this data to another person responsible without hindrance from us, provided that the processing of this Data is based on your consent or on a contract and the processing is carried out using automated procedures (Article 20 GDPR). When exercising the right to data portability, you have the right to have the personal data transmitted directly from us to another controller, where technically feasible (right to data portability).

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on our legitimate interest. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (Art. 21 GDPR) .

With regard to the exercise of your rights, you can contact us at any time using the contact options offered on our website.

Right to object to direct mail

In individual cases, we process personal data in order to operate direct advertising. In this case, you have the right to object at any time to the processing of your personal data for the purpose of such advertising (Art. 21 GDPR).

If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

The objection can be made at any time using one of the contact options specified in this data protection declaration or in our imprint.You have the right to demand that the person responsible delete your personal data immediately if one of the reasons listed in paragraph 17 DSGVO applies, e.g. if the data is no longer required for the purposes pursued (right to deletion ).

Right of appeal

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR). You can assert this right with a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement. In

Of course, you can also contact us directly if you are dissatisfied or have any questions about data protection. The quickest way to reach our internal contact person for data protection is to use the contact details listed above.

Obligation to provide data

In principle, there is no obligation to provide data. However, the provision of data may be necessary to use certain functions or to conclude a contract. If you do not provide the required data, you cannot use certain functions or services or a contract cannot be concluded.

Of course, you can also contact us directly if you are dissatisfied or have any questions about data protection. The quickest way to reach our internal contact person for data protection is to use the contact details listed above.

Updating and changing this data protection information

This data protection information is current as of January 2023.

We reserve the right to update this data protection information if necessary to adapt it to legal and technical developments or in connection with offering new services or products. Should we change our data protection policy, we will place this directly in this declaration on our homepage.