Data protection
Privacy Policy
1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is all data that can be used to identify you personally. Detailed information on data protection can be found in our privacy policy listed below this text.
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the website's imprint.
How do we collect your data?
Your data is collected, on the one hand, when you provide it to us. This may, for example, be data you enter in a contact form.
Other data is automatically collected by our IT systems when you visit the website. This primarily involves technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Some of the data is collected in order to ensure that the website is error-free. Other data can be used to analyze your user behavior.
What are your rights with regard to your data?
You have the right to obtain information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking, or deletion of this data. You can contact us at any time at the address provided in the imprint for this purpose and for other questions regarding data protection. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority.
Analysis tools and third-party tools
When you visit our website, your browsing behavior may be statistically analyzed. This is done primarily with cookies and so-called analysis programs. The analysis of your browsing behavior is generally anonymous; it cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy.
You can object to this analysis. We will inform you about your options for objecting in this privacy policy.
2. General information and mandatory information
Data protection
The operators of these websites take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose.
We point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.
Note on the responsible body
The responsible body for data processing on this website is:
Maximilian Lorenz
Johannisstraße 64
50668 Cologne
Phone: 0221/988 161 010
Email: info@restaurant-maximilianlorenz.de
The responsible body is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done if it is technically feasible.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser's address bar.
If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.
Information, blocking, deletion
Within the scope of applicable law, you have the right at any time to obtain free information about your stored personal data, its origin and recipient, and the purpose of data processing, as well as the right to correct, block, or delete this data. You can contact us at any time at the address provided in the legal notice if you have any questions about this or other questions regarding personal data.
Objection to advertising emails
We hereby object to the use of the contact data published as part of the imprint obligation for sending unsolicited advertising and information material. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.
3. Data collection on our website
Cookies
Some of our websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.
You can configure your browser to inform you about the use of cookies, to only accept cookies on a case-by-case basis, to exclude cookies for specific cases or generally, and to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
Cookies that are necessary for electronic communication or for providing certain functions you have requested (e.g., the shopping cart function) are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. If other cookies (e.g., cookies for analyzing your surfing behavior) are stored, these are treated separately in this privacy policy.
Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
- Browser type and browser version
- operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of server request
- IP address
This data will not be merged with other data sources.
This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.
Contact form
If you send us inquiries via the contact form, your information from the form, including the contact details you provided there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not share this data without your consent.
The data entered into the contact form will therefore be processed exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time. To do so, simply send us an informal email. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation.
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular, retention periods—remain unaffected.
4. Plugins and tools
Gastronovi GmbH
Additional information for table reservations
Server log files
Table reservations automatically collect and store information in so-called server log files, which your browser automatically transmits to us. These include:
Browser type and version
operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
This data will not be merged with other data sources. This data is collected on the basis of Article 6 Paragraph 1 Letter f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - for this purpose the server log files must be recorded.
e-guma ticket & voucher shop system
Server log files
The system automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:
Browser type and version
operating system used
Referrer URL
Hostname of the accessing computer
Time of the server request
This data will not be merged with other data sources. This data is collected on the basis of Article 6 Paragraph 1 Letter f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website - for this purpose the server log files must be recorded.
Processing of personal data (type, purpose and use)
When you visit the website
When you visit this website, information is temporarily stored on the server in so-called log files. This information is automatically sent by your device's browser. Specifically:
- IP address of the contacting device
- Date and time
- URL of the accessed page
- Referrer URL
- Browser and other device information
We process the above data for the following purposes:
- Establishing a connection to the website
- Use of our website
- System security and stability
The data processing is carried out at your request and is necessary according to Art. 6 (1) (b) GDPR for the stated purposes for the fulfillment of the contract and pre-contractual measures.
Order processing
The following additional data is collected to process an order:
- Salutation
- First and Last Name
- Address
- Telephone
- E-Mail-Address
- credit card details if applicable
The data processing is carried out at your request and is necessary according to Art. 6 (1) (b) GDPR for the stated purposes for the fulfillment of the contract and pre-contractual measures.
Search
If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the provided email address and that you consent to receive the newsletter. No further data will be collected. We use this data exclusively to send the requested information and do not share it with third parties. You can revoke your consent to the storage of your data, your email address, and their use for sending the newsletter at any time, for example, via the "unsubscribe" link in the newsletter.
Transfer of data to third parties (including joint controllers and data processors)
For contract processing
To the extent permitted by law pursuant to Art. 6 (1) (b) GDPR and necessary for the processing of contractual relationships with you, your personal data will be passed on to third parties. The passed-on data may only be used by third parties for the stated purposes.
e-guma voucher and ticket system
The above-mentioned personal data will be stored and processed by the software provider e-guma® (Idea Creation GmbH, Walchestrasse 15, CH-8006 Zurich) of our online shop as part of the contract processing.
Digital infrastructure
This website uses services from Amazon Web Services (AWS) Inc., located at 410 Terry Avenue North, Seattle, WA 98109, USA. Data is processed and stored in the EU. Privacy information: Privacy Policy , "Privacy Policy," "Frequently Asked Questions on Data Protection," and "General Data Protection Regulation (GDPR) Center."
Shipping company
Your personal data will also be passed on to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the goods.
Google Web Fonts
This website uses so-called web fonts provided by Google for consistent font display. When you visit a page, your browser loads the required web fonts into your browser cache to display text and fonts correctly.
For this purpose, the browser you use must establish a connection to Google's servers. This allows Google to know that our website was accessed via your IP address. Google Web Fonts are used in the interest of a consistent and appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
If your browser does not support web fonts, a standard font from your computer will be used.
Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/ .
Google Maps
This site uses the Google Maps service via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the features of Google Maps, it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
We use Google Maps in the interest of providing an attractive presentation of our online offerings and making the locations we list on our website easy to find. This represents a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.
You can find more information about how user data is handled in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/ .
Data processing by Facebook: We have a publicly accessible profile on Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified under the EU-US Privacy Shield.
When you visit this profile, your user behavior can generally be comprehensively analyzed. This also applies if you visit a website with integrated social media content (e.g., like buttons or advertising banners). Visiting our social media presence triggers numerous data protection-relevant processing operations. In detail:
If you are logged into your Facebook account and visit our Facebook page, Facebook can associate this visit with your user account. However, your personal data may also be collected even if you are not logged in or do not have a Facebook account. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, Facebook can create user profiles that reflect your preferences and interests. This allows you to see interest-based advertising both on and off Facebook. If you have a Facebook account, interest-based advertising can be displayed on all devices on which you are or were logged in.
We cannot track all processing operations on Facebook. Therefore, additional processing operations may be carried out by Facebook. Details can be found in Facebook's Terms of Use and Privacy Policy.
We have entered into a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies which data processing activities we and Facebook are responsible for when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum .
You can adjust your advertising settings independently in your user account. To do so, click the following link and log in: https://www.facebook.com/settings?tab=ads .
For details, please see Facebook’s privacy policy: https://www.facebook.com/about/privacy/ .
5. Analysis tools and advertising
Google Analytics
Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our website within the meaning of Art. 6 (1) (f) GDPR), we use Google Analytics, a web analysis service provided by Google LLC ("Google"). Google uses cookies. The information generated by the cookie about the use of the website by users is usually transferred to a Google server in the USA and stored there.
Google is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
Google will use this information on our behalf to evaluate the use of our website by users, to compile reports on the activities within this website, and to provide us with other services related to the use of this website and internet usage. Pseudonymous user profiles may be created from the processed data.
We only use Google Analytics with activated IP anonymization. This means that the user's IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent Google from collecting the data generated by the cookie and relating to their use of the website, as well as from processing this data, by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
For further information on data usage by Google, settings and objection options, please see Google’s privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of advertisements by Google (https://adssettings.google.com/authenticated).
Users’ personal data will be deleted or anonymized after 14 months.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a conversion tracking cookie is set. Cookies are small text files that the internet browser stores on the user's computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
Each Google AdWords customer receives a different cookie. These cookies cannot be tracked across AdWords customers' websites. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie in your internet browser's user settings. You will then not be included in the conversion tracking statistics.
The storage of "conversion cookies" and the use of this tracking tool are based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
For more information about Google AdWords and Google Conversion Tracking, please see Google’s privacy policy: https://policies.google.com/privacy?hl=de.
You can configure your browser to inform you about the use of cookies, to only accept cookies on a case-by-case basis, to exclude cookies for specific cases or generally, and to automatically delete cookies when closing your browser. Disabling cookies may limit the functionality of this website.
Rights of those affected
1. Right to confirmation
Every data subject has the right granted by the European legislator to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed. If a data subject wishes to exercise this right of confirmation, they may contact our company at any time using the contact details provided in the imprint.
2. Right to information
Every person affected by the processing of personal data has the right, granted by the European legislature to obtain information about the personal data stored about him or her and a copy of this information from the controller at any time, free of charge. In addition, the European legislator has granted the data subject information on the following information:
- the purposes of processing
- the categories of personal data being processed
- the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations
- if possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria for determining this duration
- the existence of a right to rectification or erasure of personal data concerning them or to restriction of processing by the controller or a right to object to such processing;
- the existence of a right of appeal to a supervisory authority
- if the personal data are not collected from the data subject: all available information as to their source
- the existence of automated decision-making, including profiling, pursuant to Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject
Furthermore, the data subject has a right to information as to whether personal data has been transmitted to a third country or to an international organization. If this is the case, the data subject also has the right to receive information about the appropriate guarantees in connection with the transmission.
If a data subject wishes to exercise this right to information, he or she may contact our company at any time using the contact details provided in the imprint.
3. Right to rectification
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to request the immediate correction of incorrect personal data concerning them. Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data - including by means of a supplementary declaration.
If a data subject wishes to exercise this right to rectification, he or she may contact our company at any time using the contact details provided in the imprint.
4. Right to erasure (right to be forgotten)
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to demand that the person responsible delete the personal data concerning them immediately, provided that one of the following reasons applies and insofar as the processing is not necessary:
- The personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
- The data subject withdraws his or her consent on which the processing is based according to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, and there is no other legal ground for the processing.
- The data subject objects to the processing pursuant to Art. 21 Para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 Para. 2 GDPR.
- The personal data was processed unlawfully.
- The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which the person responsible is subject.
- The personal data was collected in relation to information society services offered in accordance with Article 8 Para. 1 GDPR.
If one of the above reasons applies, and a data subject wishes to request the deletion of personal data stored by us, they can contact our company at any time using the contact details provided in the imprint. We will ensure that the deletion request is complied with immediately.
If we have made the personal data public and are obliged to erase the personal data as the controller pursuant to Art. 17 (1) GDPR, we shall take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform other data controllers which process the published personal data that the data subject has requested the erasure by such controllers of all links to these personal data or of copies or replications of these personal data, unless processing is required. We will take the necessary steps in individual cases.
5. Right to restriction of processing
Each person affected by the processing of personal data has the right granted by the European legislator to obtain from
To request the controller to restrict processing if one of the following conditions applies:
- The correctness of the personal data is contested by the data subject for a period of time that enables the person responsible to check the correctness of the personal data.
- The processing is unlawful, the data subject opposes the erasure of the personal data and instead requests the restriction of the use of the personal data.
- The person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims.
- The data subject has objected to processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override those of the data subject.
- If one of the above-mentioned conditions is met, and a data subject wishes to request the restriction of personal data stored by us, they can contact our company at any time using the contact details provided in the imprint. We will initiate the restriction of processing immediately.
6. Right to data portability
Every data subject has the right granted by the European legislator to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format. He or she also has the right to transmit these data to another controller without hindrance from the controller to which the personal data was provided, as long as the processing is based on consent pursuant to point (a) of Article 6 (1) GDPR or point (a) of Article 9 (2) GDPR or on a contract pursuant to point (b) of Article 6 (1) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, in exercising his or her right to data portability pursuant to Article 20(1) GDPR, the data subject has the right to have the personal data transmitted directly from one controller to another, where technically feasible and when doing so does not adversely affect the rights and freedoms of others.
To assert the right to data portability, the data subject may contact our company at any time using the contact details provided in the imprint.
7. Right to object
Any person affected by the processing of personal data has the right granted by the European legislator to object at any time to the processing of personal data concerning him or her which is based on Article 6 (1) (e) or (f) GDPR, for reasons related to his or her particular situation.
To exercise the right to object, the data subject may contact our company directly using the contact details provided in the imprint. Furthermore, in connection with the use of information society services, the data subject is free to exercise their right of objection by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC.
In the event of an objection, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If we process personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data for such advertising purposes. If the data subject objects to processing for direct marketing purposes, we will no longer process the personal data for these purposes.
In addition, the data subject has the right to object to the processing of personal data concerning him or her which we carry out for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 (1) GDPR, unless such processing is necessary to perform a task carried out in the public interest.
8. Right to withdraw consent under data protection law
Every person affected by the processing of personal data has the right granted by the European legislator of directives and regulations to revoke consent to the processing of personal data at any time.
If the data subject wishes to exercise their right to withdraw their consent, they can contact our company at any time using the contact details provided in the legal notice. To do so, simply send us an informal email. The legality of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.
9. Right to lodge a complaint with the competent supervisory authority
In the event of a violation of data protection law, the data subject has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the State Data Protection Commissioner of the federal state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
