Privacy Policy
GDPR Compliance Statement
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Manage Your Privacy Rights
You have the right to access, rectification, deletion, and data portability. Use the following tool to exercise your rights:
Privacy Controls
Choose an action for your data:
For additional privacy questions, contact us.
Cookie Usage
This website uses cookies. Cookies are small text files that are stored on your computer and allow an analysis of your use of the website.
Categories of Cookies We Use:
Necessary Cookies
These cookies are essential for the basic functionality of the website and cannot be disabled.
Examples: Session IDs, CSRF protection, cookie preferences
Functional Cookies
These cookies enable enhanced functionality and personalization.
Examples: Language settings, theme preferences, PWA settings
Analytics Cookies
These cookies help us understand how visitors interact with the website.
Examples: Page views, time spent, popular content
Marketing Cookies
These cookies are used to show you relevant advertisements.
Examples: Ad tracking, social media integration
Google Services
These cookies enable the use of Google services like Maps and the display of customer reviews with profile photos.
Examples: Google Maps, Google Reviews, profile photos, review photos
Payment Processing (Stripe)
This processing is required for online payments and is based on Art. 6(1)(b) GDPR (contract fulfillment).
Examples: Card payments, transaction data, fraud prevention
Spam Protection
This processing is required for spam and bot protection and is based on Art. 6(1)(f) GDPR (legitimate interest).
Examples: Bot detection, form protection, IP analysis
Manage Cookie Settings
You can change your cookie settings at any time by clicking the button below.
Data Protection Practices
We collect and use your personal data exclusively within the provisions of the data protection law of the Federal Republic of Germany.
Google Maps Integration
Our website uses Google Maps to display our location. Google Maps is only loaded when you explicitly give your consent. When loading Google Maps, the following data may be transmitted to Google:
- IP address
- Geolocation data (if released)
- Browser information
- Device information
The legal basis for using Google Maps is your consent according to Art. 6 para. 1 lit. a GDPR. You can find more information about data protection at Google at: https://policies.google.com/privacy
Google Reviews Display
Our website displays customer reviews from Google. The review texts are stored on our server, however profile photos and review photos are loaded directly from Google servers. This loading only occurs with your explicit consent. When loading these images, the following data may be transmitted to Google:
- IP address
- Browser information
- Device information
- Referrer information
Without your consent, reviews are displayed with text, stars, and date, but without profile photos and review photos. The legal basis is your consent according to Art. 6 para. 1 lit. a GDPR.
Payment Processing (Stripe)
For processing online payments, we use the payment service provider Stripe. When making a payment, the following data is transmitted to Stripe:
- Payment information (card details)
- Transaction amount
- IP address
- Browser and device information
Stripe is a company based in the USA. Data transfer is based on EU Standard Contractual Clauses (SCCs). The legal basis for processing is Art. 6 para. 1 lit. b GDPR (contract fulfillment).
More information about data protection at Stripe can be found at: https://stripe.com/privacy
Spam Protection
We use server-side protection mechanisms to protect our forms from spam and automated attacks. These measures run entirely on our own servers and do not transmit data to third parties. The legal basis for processing is Art. 6 para. 1 lit. f GDPR (legitimate interest in spam protection).
Data Storage and Retention Periods
We only store your data for as long as necessary for the respective purpose or as required by statutory retention periods:
| Data Type | Retention Period | Purpose |
|---|---|---|
| OTP codes | 15 minutes | Email verification |
| Contact inquiries | 1 year | Processing & follow-up |
| Reservations | 2 years | Legal retention |
| Payment data | 10 years | Tax obligations |
| Cookie consent | 12 months | GDPR compliance |
| Email logs | 30 days | Troubleshooting |
Contact Form
If you send us inquiries via the contact form, your information from the inquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.
Your Rights
You have the right to free information about your stored personal data, its origin and recipients, and the purpose of data processing at any time, as well as the right to correct or delete this data.
Contact
For further data protection questions, please contact us via our contact form.
Restaurant Dionysos
Brandenburger Platz 35, 15827 Blankenfelde
Germany