Privacy Policy (GDPR)
I. Data protection at a glance
II. data protection declaration
1. general information
2nd Data Protection Officer
3. data collection on our website
4. plugins and tools
5. data transmission to third parties
I. Data protection at a glance
General information
The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. You will find detailed information on the subject of data protection in our data protection declaration listed under this text (item II.).
Data collection on our website
Who is responsible for the data collection on this website?
The data processing on this website is carried out by the owner and responsible person of the website. Its contact details can be found in Section II.1.2.
How do we collect your information?
On the one hand, your data is collected when you communicate it to us. This can be, for example, data that you enter into our contact form or send us directly by e-mail.
Other data is automatically collected by our IT systems when you visit our website. These are mainly technical data (e.g. Internet browser, operating system or time of page visit). This data is collected automatically as soon as you enter our website.
What do we use your data for?
Part of the data is collected in order to ensure error-free provision of the website. Other data can be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive information at any time and free of charge, e.g. about the origin, recipient and purpose of your stored personal data. You also have the right to request the correction, limitation, transfer, blocking or deletion of this data. You can also object to the processing of your personal data at any time and revoke your consent to the use of your data at any time. You can contact us at any time at the following e-mail address if you have any further questions on the subject of data protection: Datenschutz@restaurant-asador.de
You also have the right of appeal to the responsible supervisory authority.
II. data protection declaration
1. general information
1.1 Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
When you use this website, various personal data is collected. Personal data are data with which you can be personally identified. This data protection declaration explains which data we collect and for what we use it. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.
1.2 Note on the person responsible
The person responsible for data processing on this website is:
Mrs. Cansu Souaud
William route 22
10963 Berlin, Germany
E-mail: Datenschutz@restaurant-asador.de
Responsible body is the natural or legal person who alone or together with others decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).
1.3 Your rights
Revocation of your consent to data processing
Many data processing processes are only possible with your express consent. You can revoke your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing up to the revocation remains unaffected by the revocation.
Right of appeal to the responsible supervisory authority
In the event of breaches of data protection law, the person concerned has a right of appeal to the competent supervisory authority. The responsible supervisory authority for data protection issues is the data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found on the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/addresses_links-node.html
Right to data transferability
You have the right to have data which we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only take place if it is technically feasible.
Information, correction, restriction, blocking, deletion
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data at any time, e.g. its origin and recipient and the purpose of data processing and, if necessary, a right to correction, restriction, blocking or deletion of this data. For this and other questions on the subject of personal data, you can contact the person responsible at any time using the contact data specified under II.1.2.
Right of objection
Right of objection, Art. 21 GDPR
General right of objection (Art. 21 para. 1 GDPR)
You have the right to object at any time for reasons arising from your particular situation to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. e GDPR (public interest / exercise of official authority) or Art. 6 para. 1 lit. f GDPR (legitimate interest); this also applies to profiling based on these provisions.
Right of objection in direct marketing (Art. 21 para. 2 GDPR)
You can object to the processing of your personal data for the purpose of direct marketing at any time – without giving reasons. This also applies to profiling insofar as it is connected with such direct advertising.
Recipient of the opposition
Please address your objection to the person responsible using the contact data listed under II.1.2.
1.4 Data security
SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
1.5 Storage of your personal data
We will only keep your personal data for as long as is necessary to achieve the following processing purposes. If the respective processing purpose ceases to apply, the personal data will be deleted or blocked in accordance with legal requirements.
If the storage of your personal data is necessary due to a legal regulation to which the data controller is subject, your personal data will be blocked or deleted when the storage period prescribed by the legal regulation expires.
2. Data Protection Officer
We have appointed data protection officers for our company:
Mrs. Cansu Souaud
William route 22
10963 Berlin, Germany
E-mail: Datenschutz@restaurant-asador.de
3. data collection on our website
3.1 Log files (automatic data collection)
Every time you visit our website, we collect and use the data that your Internet browser automatically transmits to us. This data includes:
- Date and time of your access,
- Your IP address,
- Information about your browser type and version,
- The operating system you are using,
- The transferred data volume and the access status (e.g. file transferred, file not found, etc.),
- The loading times of our website,
- Information about the website from which you accessed our site,
- Information about websites you can access from our site.
We do not use the above data for personal evaluations. On the basis of Art. 6 para. 1 letter f GDPR, we use the above data solely for the purpose of enabling you to access our website and its contents, e.g. to display our website correctly in your browser.
3.2 Contact form, e-mail enquiries
Our website offers you the opportunity to contact us via a contact form. If you make use of this, the data you enter in the input mask will be transmitted to us and stored.
The mandatory information that we require in order to be able to answer your inquiry at all includes:
Your name, your e-mail address and the content of your message.
In addition, you can voluntarily provide us with the following data via the contact form:
the name of your company, your address, your telephone number, the type of event, the date and
the time of your reservation, the number of persons.
Furthermore, you can contact us via the e-mail address published on our website. In this case, the personal data that you provide us in the e-mail will be stored. This usually includes your email address, your name and the content of your message.
We use the personal data that you make available to us via the contact form or for e-mail enquiries solely for the purpose of processing your enquiries.
The legal basis for processing the above personal data is Art. 6 para. 1 letter f GDPR. Because it is in our legitimate interest to provide you with an uncomplicated and fast contact option for your enquiries. If your establishment of contact aims at the conclusion of a contract with us, then additionally Art. 6 exp. 1 letter b GDPR is legal basis for the processing of your personal data.
3.3 Cookies
Our website uses so-called cookies. Cookies do not cause any damage to your computer and do not contain any viruses. Cookies serve to make our website more user-friendly, effective and secure. For example, the use of cookies enables us to display the website in the language you have chosen, without you having to select your language again on each subpage.
Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your terminal until you delete them. These cookies enable us to recognize your browser the next time you visit our website.
Cookies used:
pll_language
local storage
Session memory
sp_DSGVO_cn_accepted
The use of cookies is based on Art. 6 Para. 1 letter f GDPR, as the technically error-free and optimized provision of our website is in our legitimate interest.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or generally and activate the automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of this website may be limited.
4. plugins and tools
4.1 Google Maps
This page uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
Personal data will be transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission’s adequacy decision. You can download the certificate at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.
The use of Google Maps is in the interest of an appealing representation of our online offers and at an easy findability of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
You can find more information about the handling of user data in the data protection declaration of Google:https://www.google.de/intl/de/policies/privacy/.
4.2 Google Web Fonts
This website uses external fonts, Google Web Fonts. Google Web Fonts is a service of Google Inc. (“Google”).
When you visit our website, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. To do this, the browser you are using must connect to Google’s servers. Google will be informed that our website has been accessed via your IP address. This usually sends your IP address to a Google server in the USA.
Personal data will be transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission’s adequacy decision. You can download the certificate at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.
The use of Google Web Fonts is in the interest of consistent and appealing presentation of our website and represents a legitimate interest within the meaning of Art. 6 para. 1 letter f DSGVO.
Further information can be found in Google’s privacy policy, which you can access here:
https://www.google.com/policies/privacy/
4.3 Quandoo Reservation Tool
We use Quandoo to process our online and offline reservations for us. Quandoo is a restaurant technology platform that allows us to accept, create and manage reservations along with the associated personal customer information so we can better focus on your culinary experiences.
Quandoo uses cookies and other technologies to collect and process data relating to reservations and visitor behaviour when using the booking functionality on this website. Quandoo will store this information securely on our behalf.
Use of the “quandoo-booking-widget” is in the interest of our online offer and easier reservation on our website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
You can find more information on the handling of user data in Quandoo’s privacy policy:
http://b2b.quandoo.com/de/privacy-policy/
http://b2b.quandoo.com/de/privacy-policy/#cookie-policy
5. integration of external service providers; data transfer to third parties
5.1 Integration of external service providers
We work together with external technical service providers (e.g. hosting service providers, service providers for the maintenance and servicing of our mail server) to provide our website and the functions integrated therein. Your personal data will only be passed on to the technical service providers to the extent necessary to perform the aforementioned tasks.
We will of course carefully select the technical service providers who support us in carrying out the above tasks and require that they use your personal data in accordance with this data protection declaration and existing order processing agreements. The technical service providers commissioned by us process the transmitted personal data in accordance with our instructions.
5.2 Data transmission to third parties
Unless expressly stated otherwise in this data protection declaration, we will only transfer the personal data that we collect and process in accordance with Sections II.2 to II.4 to third parties if you have given us your prior consent.
For the rest, we will only transfer your personal data to third parties if we are obliged to do so by law or by court or official orders.