Privacy policy

1. General information

Thank you for your interest in resmio. The protection of your personal data is important to us. In the following, you will find information on the handling of your personal data, which is processed through the use of our online offer https://restaurant-reservierung.de and websites, functions and content linked to it. Personal data is any data with which you can be personally identified. The processing is carried out in accordance with the legal regulations on data protection, in accordance with the regulations of the General Data Protection Regulation (DS-GVO) and the Federal Data Protection Act (BDSG).

1.1 Contact details of the responsible party

This data protection information applies to data processing by:

Company: resmio GmbH
Managing Director: Christian Bauer, Michael Schade
Street: Katzwangerstr. 150
City: 90461 Nürnberg
Phone: +49 (0) 911 3749230
Email: [email protected]
District Court: Nürnberg
Commercial Register: HRB 35433
VAT number: DE 282437470

The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.2 Contact details of the data protection officer

Company: PROLIANCE GmbH
Street: Leopoldstr. 21
City: 80802 München
Website: www.datenschutzexperte.de
Email: [email protected]

1.3 Cooperation with processors and third parties

If, in the course of our processing, we disclose data to other persons and companies (order processors or third parties), transmit it to them or otherwise grant them access to the data, this will only be done on the basis of a legal permission (e.g. if a transmission of the data to third parties, such as payment service providers, is required for the performance of the contract pursuant to Art. 6 (1) lit. b DSGVO), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).If we commission third parties to process data on the basis of a so-called order processing agreement, this is done on the basis of Art. 28 DSGVO.)

1.4 Transfer to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of using third-party services or disclosing, or transferring data to third parties, this will only occur if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests.

Subject to legal or contractual permissions, we process or allow the processing of data in a third country only if the special requirements of Art. 44 et seq. DSGVO are met. I.e. the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU or compliance with officially recognized special contractual obligations (so-called standard contractual clauses).

2 Information about the processing of personal data

2.1 Data collection when visiting our website

If you merely call up our website, i.e. if you do not register or otherwise transmit information to us, we only process data that your browser transmits to our server (server log files). This information is stored temporarily in a log file. When you visit our website, we collect the following data without your intervention in order to display the website to you:

We collect the listed data to ensure a smooth connection setup of the website and to enable a comfortable use of our website by the users. In addition, the log file is used to evaluate system security and stability as well as for administrative purposes.

The legal basis for the temporary storage of the data or the log files is Art. 6 para. 1 lit. f DSGVO.

Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person. For reasons of technical security, in particular to defend against attempted attacks on our web server, we may store this data for a short period of time. After 30 days at the latest, the data is anonymized or deleted, so that it is no longer possible to establish a link to the individual user. There is no anlysis of this data except for statistical purposes in anonymous form. This data is not merged with data from other data sources.

In addition, we use cookies and analysis services when you visit our website. You can find more detailed explanations of this below.

(1) Type of data processed

Usage data (e.g., web pages visited, interest in content, access times).

Meta/communication data (e.g., device information, IP addresses).

(2) Category of data subjects

Visitors and users of the online offer (hereinafter, we also refer to the data subjects collectively as users).

(3) Purpose of processing

Provision of the online offer, its functions and content.

Responding to contact requests and communicating with users.

Security measures.

Reach measurement/marketing.

(4) Duration of storage of personal data

We store your data as long as it is required for the respective processing purpose. Please note that numerous retention periods require that data continue to be stored (must be stored). This applies in particular to retention obligations under commercial or tax law (e.g. Commercial Code, Fiscal Code, etc.).

If there are no further storage obligations, the data is routinely deleted once the purpose has been achieved. In addition, we may retain data if you have given us permission to do so or if legal disputes arise and we use evidence within the scope of statutory limitation periods, which may be up to thirty years; the regular limitation period is three years.

2.2 Transfer of data

We do not transfer your personal data to third parties for purposes other than those listed below. Within our company, we ensure that only those persons receive your data who need them to fulfill contractual and legal obligations.

In certain cases, IT service providers support us in fulfilling our tasks. The necessary contract under data protection law has been concluded with all service providers.

We only pass on your personal data to third parties if:

3 Cookies

Our website uses cookies, which are stored by the browser on your device and which contain certain settings for the use of the website (e.g. for the current session). Cookies serve to make our offer more user-friendly, effective and secure.

Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted after closing the browser. Other cookies remain stored on your terminal device until you delete them or the storage period expires. These cookies enable us to recognize your browser on your next visit.

In part, the cookies are used to simplify website processes by storing settings (e.g. providing already selected options). If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) lit. b DSGVO either for the execution of the contract or in accordance with Art. 6 (1) lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you.

These cookies enable us to automatically recognize that you have already been to our site when you visit it again. These cookies are automatically deleted after a defined period of time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. The cookie settings can be managed under the following links for the respective browsers.

You can also individually manage the cookies of many companies and functions that are used for advertising. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so-called do-not-track feature, which allows you to indicate that you do not want to be tracked by websites. When this feature is enabled, the browser tells ad networks, websites, and applications that you do not want to be tracked for behavioral advertising and the like.

For information and instructions on how to edit this feature, depending on your browser provider, see the links below:

Additionally, you can prevent loading of so-called scripts by default. NoScript allows JavaScripts, Java and other plug-ins to run only on trusted domains of your choice. Information and instructions on how to edit this feature are available from your browser vendor (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that if you disable cookies, the functionality of this website may be limited.

4 Analysis tools

4.1 Tracking tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 (1) p. 1 lit. f DSGVO. With the tracking measures used, we want to ensure a needs-based design and continuous optimization of our website. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

(1) Google Analytics

This website uses Google Analytics, a web analytics service provided by Google, Inc. (Google). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

On behalf of resmio GmbH, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

This website uses Google Analytics with the extension _anonymizeIp(). This means that IP addresses are processed in a shortened form, which means that they cannot be linked to a specific person. Insofar as the data collected about you is related to a person, this is therefore immediately excluded and the personal data is thus immediately deleted.

We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. f DS-GVO.

Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: https://marketingplatform.google.com/about/analytics/terms/de/, Overview of data protection: https://support.google.com/analytics/answer/6004245?hl=de&ref_topic=2919631, as well as the privacy policy: https://policies.google.com/privacy?hl=de&gl=de.

(2) Google Adwords

We use Google Ads (formerly Google AdWords) on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

Google Ads enables us to draw attention to our attractive offers with the help of advertising media on external websites. This enables us to determine how successful individual advertising measures are. These advertising media are delivered by Google via so-called AdServers. For this purpose, we use so-called AdServer cookies, which can be used to measure certain parameters for measuring success, such as display of the ads or clicks by users. If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies usually lose their validity after 30 days. They are not intended to identify you personally. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). These cookies enable Google to recognize your web browser.

If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising tools; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. According to our knowledge, Google receives the information that you have called up the relevant part of our website or clicked on an ad from us. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a possibility that Google learns your IP address and stores it.

We use Google Ads for marketing and optimization purposes, in particular to serve relevant and interesting ads to you, to improve campaign performance reports and to achieve a fair calculation of advertising costs. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO.

You can prevent the installation of cookies by deleting existing cookies and deactivating a storage of cookies in the settings of your web browser. We point out that in this case you may not be able to use all features of our website in full. It is also possible to prevent the storage of cookies by setting your web browser to block cookies from the domain www.googleadservices.com (https://www.google.de/settings/ads). We would like to point out that this setting will be deleted when you delete your cookies. In addition, you can deactivate interest-based ads via the link http://optout.aboutads.info. We would like to point out that this setting will also be deleted when you delete your cookies.

Information of the third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

Further information on data use by Google, on setting and objection options, and on data protection can be found on the following Google web pages:

Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de

Google website statistics: https://services.google.com/sitestats/de.html

(3) Google Maps

On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google). Google Maps is a web service for displaying interactive (land) maps to visually display geographical information. By using this service, our location is shown to you and a possible approach is facilitated.

Already when calling up those sub-pages in which the map of Google Maps is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there, this may also result in a transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

The collection, storage and evaluation are carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of Google's legitimate interest in the display of personalized advertising, market research and / or the design of Google websites to meet the needs. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html, the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html.

Detailed information on data protection in connection with the use of Google Maps can be found on the Google website (Google Privacy Policy): https://www.google.de/intl/de/policies/privacy/.

(4) Facebook Pixel, Custom Audiences and Facebook Conversion.

Within our online offer, the so-called Facebook pixel of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook), is used due to our legitimate interests in the analysis, optimization and economic operation of our online offer and for these purposes.

Facebook is certified under the Privacy Shield agreement and thereby offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). With the help of the Facebook pixel, it is possible for Facebook, on the one hand, to determine the visitors to our online offer as a target group for the display of advertisements (so-called Facebook ads). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called Custom Audiences).

With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook pixel, we can further track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called conversion).

The processing of the data by Facebook takes place within the framework of Facebook's data usage policy. Accordingly, general information on the display of Facebook ads, in Facebook's data usage policy: https://www.facebook.com/policy.php.

Specific information and details about the Facebook Pixel and how it works can be found in Facebook's help section: https://www.facebook.com/business/help/651294705016616.

You can object to or directly prevent the collection by the Facebook pixel and use of your data to display Facebook ads by disabling Facebook tracking here. To adjust which types of ads are displayed to you within Facebook, you can visit the page set up by Facebook and follow the instructions there regarding the settings for usage-based advertising: https://www.facebook.com/settings?tab=ads. The settings are made in a platform-independent manner, i.e. they are applied to all devices, such as desktop computers or mobile devices.

4.2 Embedded fonts

(1) Google Font

This site uses so-called fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (Google) for the uniform display of fonts. When you call up a page, your browser loads the required fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google obtains knowledge that our website was accessed via your IP address. Google Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. If your browser does not support fonts, a standard font from your computer will be used.

You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

5 Business-related processing

5.1 Third-party providers

We currently use the services of the following providers:

(1) Hosting

The hosting services used by us serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services, which we use for the purpose of operating our online offers.

We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer.

Below we provide specific information about the service providers used:

(1.1) Web hosting restaurant-reservierung.de

This website is operated on server systems of Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen. Hetzner's data centers are located in data center parks in Nuremberg and Falkenstein. In addition, Hetzner operates a data center in Helsinki, Finland.

Hetzner Online is certified according to DIN ISO/IEC 27001. The certificate proves adequate security management, security of data, confidentiality of information and availability of IT systems. For the purpose of providing and delivering the website, connection data is processed. For the mere purpose of delivery and provision of the website, the data is not stored beyond the call.

The legal basis for the data processing is the legitimate interest (unconditional technical necessity for the provision and delivery of the service website expressly requested by them through your call) pursuant to Art. 6 para. 1 lit. f DSGVO.

For the operation of the website, the connection data and other personal data are additionally processed within the scope of various other functions or services. This is informed about in detail in the context of this data protection declaration for the individual functions or services. The data protection regulations of Hetzner Online AG are available at https://www.hetzner.de/rechtliches/datenschutz/.

(1.2) Amazon Web Services Hosting

Our website uses services provided by Amazon Web Services (AWS) Inc, located at 410 Terry Avenue North Seattle WA 98109, USA. AWS supports our website by cloud-based delivery of website content. In the process, information such as your (anonymized) IP and visit duration may also be transmitted. We have concluded a DSGVO-compliant Data Processing Addendum with AWS for this purpose. The personal data is transferred to the US under the EU-US Privacy Shield based on the European Commission's adequacy decision.

Further information on this and on AWS data protection measures can be found here: https://aws.amazon.com/de/compliance/eu-data-protection/.

(2) Coralogix

We use the service Coralogix for general logging of our application. The provider is Coralogix Ltd, 680 Folsom St., San Francisco CA, 94107. The following personal data may be included in the logs: IP address, name, email address, phone number, address and other personal data of restaurant owners and guests. For this purpose, we have concluded a DSGVO-compliant addendum to the data processing agreement (Data Processing Agreement) with Coralogix. In it, Coralogix Ltd. undertakes to protect our customers' data and not to pass it on to third parties.

The privacy policy of Coralogix can be found here: https://coralogix.com/privacy-policy/

(3) Sentry

We use the Sentry service (Sentry, 1501 Mariposa St #408, San Francisco, CA 94107, USA) to improve the technical stability of our service by monitoring system stability and identifying code errors. Personal data may be collected as part of the code errors.

For more information, please see Sentry's privacy policy: https://sentry.io/privacy/

6 Social media links

We currently use the following social media plug-ins: Facebook, Instagram, Twitter, Xing, LinkedIn, YouTube, Pinterest.

We use the so-called two-click solution. This means that when you visit our site, no personal data is initially passed on to the providers of the plug-ins. You can recognize the provider of the plug-in by the marking on the box above its initial letter or logo. We open up the possibility for you to communicate directly with the provider of the plug-in via the button. Only if you click on the marked box and thereby activate it, the plug-in provider receives the information that you have accessed the corresponding website of our online offer. In addition, the data mentioned in section 2.1 of this declaration is transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymized immediately after collection.

By activating the plug-in, personal data is therefore transmitted from you to the respective plug-in provider and stored there (in the case of US providers, in the USA). Since the plug-in provider collects the data in particular via cookies, we recommend that you delete all cookies via your browser's security settings before clicking on the grayed-out box.

We have no influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information on the deletion of the collected data by the plug-in provider.

The plug-in provider stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) for the display of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Via the plug-ins, we offer you the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 para. 1 p. 1 lit. f DS-GVO.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, your data collected from us will be directly assigned to your account with the plug-in provider. If you click the activated button and link to the page, for example, the plug-in provider also saves this information in your user account and shares it publicly with your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid an assignment to your profile with the plug-in provider.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the data protection declarations of these providers provided below. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.

Addresses of the respective plug-in providers and URL with their privacy notices:

a) Facebook Inc, 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

b) Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) privacy policy: http://instagram.com/about/legal/privacy/. Configuration of advertising and cookie settings can be made via the Network Advertising Initiative at http://www.networkadvertising.org/managing/opt_out.asp, the Digital Advertising Alliance at http://www.aboutads.info/ or the European Digital Advertising Alliance at http://youronlinechoices.eu/.

c) Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) privacy policy: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization

d) Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany), privacy policy: https://privacy.xing.com/de/datenschutzerklaerung, Opt-Out: https://nats.xing.com/optout.html?popup=1&locale=de_DE

e) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

f) Pinterest (Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA), Privacy Policy: https://about.pinterest.com/de/privacy-policy, Opt-Out: Please use the Do Not Track function of your browser.

g) Google/YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated?hl=de,

7 Integration of Youtube videos

We integrate videos of the platform Youtube of the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on our websites. When playing the video, Youtube sets cookies to collect information about user behavior. These are used, for example, to improve the user-friendliness of the Youtube offer and to prevent misuse. If you have a Google account and are logged in to it, the videos you watch are assigned to your Google account. The processing of data by Google is governed by the contractual relationship, if any, between you and Google or by Google's data protection policy, which you can access at https://www.google.de/intl/de/policies/privacy. You can also find information about the Google service that is available to you there. There you will also find information about your statutory right of revocation against the processing. A contract has been concluded with Google in accordance with the EU standard contractual clauses to ensure an adequate level of data protection when transferring personal data to third countries.

By clicking on the play button of a Youtube video embedded on our websites, you consent to the one-time data processing for playing the corresponding video. The legal basis is Art. 6 para. 1 sentence 1 lit. a) DSGVO.

You can revoke your consent at any time. To terminate the data processing by YouTube, please contact Google directly. For more information, please visit https://www.google.de/intl/de/policies/privacy.

8 Analyses and market researchs

In order to operate our business economically, to be able to recognize market trends, customer and user wishes, we analyze the data we have on business transactions, contracts, inquiries, etc.. In doing so, we process inventory data, communication data, contract data, payment data, usage data, metadata on the basis of Art. 6 para. 1 lit. f. DSGVO, whereby the data subjects include customers, interested parties, business partners, visitors and users of the online offer.

The analyses are carried out for the purpose of business evaluations, marketing and market research. In doing so, we may take into account the profiles of registered users with details of, for example, their purchase transactions. The analyses serve us to increase the user-friendliness, the optimization of our offer and the business management. The analyses are processed exclusively by resmio and are not disclosed externally, unless they are anonymous analyses with aggregated values.

If these analyses or profiles are personal, they will be deleted or anonymized upon termination of the user, otherwise two years after termination. Otherwise, the overall business analyses and general tendency analyses are created anonymously, if possible.

9 Duration of storage of personal data

The duration of the storage of personal data is measured by the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for the fulfillment or initiation of a contract or if we have a legitimate interest in continuing to store it, the data will be deleted when it is no longer required for these purposes or when you exercise your right of revocation or objection.

10 Data subject rights

Data protection law grants them comprehensive data subject rights vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below. You have the right to:

in accordance with Art. 15 DSGVO to request information about your personal data processed by us. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling and, if applicable. The data subject shall be informed of the logic involved and the implications for him or her and the intended effects of such processing, as well as of his or her right to be informed of the safeguards pursuant to Article 46 of the GDPR in the event that his or her data are transferred to third countries;

in accordance with Art. 16 DSGVO, to demand without delay the correction of any inaccurate and/or incomplete personal data concerning you that we have stored;

pursuant to Art. 17 DSGVO, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;

in accordance with Art. 18 DSGVO to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected on the grounds of your particular situation in accordance with Art. 21 DSGVO, as long as it has not yet been determined whether our legitimate grounds prevail;

assert the right to rectification, erasure or restriction of processing against the controller pursuant to Art. 19 DSGVO and the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning them have been disclosed, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about this recipient;

in accordance with Art. 20 DSGVO, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible;

in accordance with Art. 7 (3) DSGVO, to revoke your consent once given at any time with effect for the future. In the event of revocation, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. By the revocation of consent about the lawfulness of the consent until the revocation occurred processing not affected;

pursuant to Article 77 of the GDPR, if you consider that the processing of personal data concerning you infringes the GDPR, without prejudice to any other administrative or judicial remedy, the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement.

11 Right of objection

If your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 (1) p. 1 lit. f DSGVO, you have the right to object at any time pursuant to Art. 21 DSGVO, with effect for the future, to the processing of your personal data, provided that there are grounds for doing so that arise from your particular situation. If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to continue processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If your personal data is processed by us for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing. You can exercise the objection as described above. If you exercise your right to object, we will stop processing the data concerned for direct marketing purposes.

Please send the objection to [email protected].

12 Data security

This website uses for security reasons and to protect the transmission of personal data and other confidential content (eg: Requests to the responsible person a SSL or TLS encryption. You can recognize an encrypted connection by the string https:// and the lock symbol in your browser line.

We also use appropriate technical and organizational security measures to protect your data against loss, destruction or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

13 Links to other providers

Our website also contains - clearly recognizable - links to the websites of other companies. As far as links to websites of other providers exist, we have no influence on their contents. Therefore, no guarantee or liability can be assumed for these contents. The respective provider or operator of the pages is always responsible for the content of these pages.

The linked pages were checked for possible legal violations and recognizable infringements at the time of linking. Illegal contents were not recognizable at the time of linking. However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements, such links will be removed immediately.

14 Topicality and change of this privacy policy

This data protection declaration is currently valid and has the status July 2021.

Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy.

You can access and print out the current data protection declaration at any time on the website at https://restaurant-reservierung.de/en/datenschutzerklaerung.