Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this
website. Personal data is any data that can be used to personally identify you. Detailed information on data
protection can be found in this Privacy Policy.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The operator’s contact details can be
found in the section “Information on the Responsible Party” in this Privacy Policy.

How do we collect your data?

Some of your data is collected when you provide it to us. This may include, for example, data that you send to us
by email, telephone, or via the reservation tool embedded on this website.

Other data is collected automatically or after your consent when you visit the website by our IT systems. This is
primarily technical data, such as your internet browser, operating system, time of page access, or IP address.
This data is collected automatically as soon as you enter this website.

What do we use your data for?

Part of the data is collected to ensure the error-free provision of the website. Other data is used to process
your enquiries or reservations. We also use Matomo Analytics for the statistical evaluation and optimisation of
our website. Matomo is operated as a WordPress plugin; IP addresses are anonymised.

What rights do you have regarding your data?

You have the right to obtain information free of charge at any time about the origin, recipients, and purpose of
your stored personal data. You also have the right to request the correction or deletion of this data. If you have
given consent to data processing, you may withdraw this consent at any time with effect for the future. You also
have the right, under certain circumstances, to request the restriction of the processing of your personal data.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding this or any other questions relating to data protection.

Third-Party Tools

This website uses an external reservation tool as well as Matomo Analytics. Matomo is operated as a WordPress
plugin. IP addresses are anonymised. Further information about the services used can be found in the following
sections of this Privacy Policy.

2. Hosting

We host the content of our website with the following provider:

STRATO

The provider is STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

When you visit our website, STRATO collects various server log files. These may include, in particular, your IP
address, date and time of access, pages accessed, browser type, operating system, referrer URL, and other
technical access data.

The use of STRATO is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the reliable, secure, and
error-free provision of our website.

Further information can be found in STRATO’s privacy policy:

https://www.strato.de/datenschutz/

Data Processing Agreement

We have concluded a data processing agreement with the above-mentioned provider. This is a contract required under
data protection law which ensures that the provider processes the personal data of our website visitors only in
accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Information

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal
data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.

When you use this website, various personal data is collected. Personal data is data that can be used to
personally identify you. This Privacy Policy explains what data we collect, what we use it for, and how and for
what purpose this is done.

Please note that data transmission over the internet, for example when communicating by email, may be subject to
security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the Responsible Party

The responsible party for data processing on this website is:

Volkan Ugurlu
Gia.moo Grill & Bar
Steinbacher Straße 68
76534 Baden-Baden
Germany

Phone: 07223 9423783
Email: info@giamoo.de

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes
and means of the processing of personal data.

Storage Period

Unless a more specific storage period is stated in this Privacy Policy, your personal data will remain with us
until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or
withdraw your consent to data processing, your data will be deleted unless we have other legally permissible
reasons for storing your personal data, for example tax or commercial law retention periods. In the latter case,
deletion will take place after these reasons no longer apply.

General Information on the Legal Bases for Data Processing on This Website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. If you
have consented to the storage of cookies or access to information on your device, processing is also carried out
on the basis of Section 25(1) TDDDG. Consent may be withdrawn at any time.

If your data is required for the performance of a contract or for the implementation of pre-contractual measures,
we process your data on the basis of Art. 6(1)(b) GDPR. If we are legally obliged to process your data, processing
is carried out on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our
legitimate interest pursuant to Art. 6(1)(f) GDPR. The applicable legal basis in each individual case is explained
in the respective sections of this Privacy Policy.

Recipients of Personal Data

In the course of our business activities, we work with various external parties. In some cases, this may involve
the transfer of personal data to these external parties. We only pass on personal data to external parties if this
is necessary for the performance of a contract, if we are legally obliged to do so, if we have a legitimate
interest in the transfer, or if another legal basis permits the transfer of data.

When using processors, we only pass on personal data on the basis of a valid data processing agreement.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You may withdraw consent that you have
already given at any time. The lawfulness of the data processing carried out prior to the withdrawal remains
unaffected by the withdrawal.

Right to Object to Data Collection in Special Cases and to Direct Advertising

If data processing is carried out on the basis of Art. 6(1)(e) or Art. 6(1)(f) GDPR, you have the right at any
time to object to the processing of your personal data on grounds relating to your particular situation. This also
applies to profiling based on these provisions.

If you object, we will no longer process your affected personal data unless we can demonstrate compelling
legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves
the establishment, exercise, or defence of legal claims.

If your personal data is processed for direct advertising purposes, you have the right to object at any time to the
processing of personal data concerning you for such advertising purposes.

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory
authority, in particular in the Member State of their habitual residence, their place of work, or the place of the
alleged infringement.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of
a contract in a commonly used, machine-readable format, or to have it transferred to a third party. If you request
the direct transfer of the data to another controller, this will only be done where technically feasible.

Access, Rectification, and Deletion

Within the framework of the applicable legal provisions, you have the right at any time to obtain information free
of charge about your stored personal data, its origin and recipients, and the purpose of the data processing, as
well as, where applicable, the right to rectification or deletion of this data. You may contact us at any time
regarding this or any other questions relating to personal data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any
time to exercise this right. The right to restriction of processing exists in particular in the following cases:

  • If you dispute the accuracy of the personal data stored by us, we generally need time to verify this. For the
    duration of this verification, you have the right to request the restriction of the processing of your personal
    data.
  • If the processing of your personal data was or is unlawful, you may request the restriction of data processing
    instead of deletion.
  • If we no longer need your personal data, but you need it for the establishment, exercise, or defence of legal
    claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
  • If you have lodged an objection pursuant to Art. 21(1) GDPR, a balancing of your interests and our interests
    must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to
    request the restriction of the processing of your personal data.

SSL or TLS Encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.
You can recognise an encrypted connection by the fact that the address line of your browser changes from
“http://” to “https://” and by the lock symbol in your browser bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

4. Data Collection on This Website

Cookies

Our website uses so-called cookies. Cookies are small data packets and do not cause any damage to your device.
They are stored either temporarily for the duration of a session or permanently on your device.

Cookies may originate from us or from third-party companies. Some cookies are technically necessary in order to
provide certain website functions. Other cookies may be used to analyse user behaviour or for marketing purposes.

We use Matomo Analytics in a privacy-friendly configuration with anonymised IP addresses. If Matomo uses cookies
or comparable technologies, their use is based solely on your consent via our cookie consent tool.

Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is stated.
We have a legitimate interest in the technically error-free and optimised provision of our website.

If consent to the storage of cookies or comparable technologies has been requested, processing is carried out
exclusively on the basis of this consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be
withdrawn at any time.

You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual
cases, to exclude the acceptance of cookies for certain cases or in general, and to automatically delete cookies
when closing the browser. If cookies are disabled, the functionality of this website may be limited.

Consent Management with Complianz

This website uses the cookie consent tool Complianz to obtain and document your consent to the storage of certain
cookies on your device or to the use of certain technologies.

When you enter our website, a Complianz cookie may be stored in your browser in which the consents you have given
or the withdrawal of these consents are stored.

Complianz is used to obtain and document the legally required consents for the use of certain technologies. The
legal basis for this is Art. 6(1)(c) GDPR.

Online Reservations with DISH Reservation

An online reservation tool provided by DISH Reservation is embedded on our website. The provider is
DISH Digital Solutions GmbH, Metro-Straße 1, 40235 Düsseldorf, Germany.

The reservation tool is loaded via external JavaScript from the domain reservation.dish.co. When the
page on which the reservation tool is embedded is accessed, a connection to DISH servers may be established. In
this process, technical data such as your IP address, date and time of access, browser information, and information
about your device may be processed.

If you make a reservation via the reservation tool, the data you enter will be processed. This may include, in
particular, your name, contact details, reservation date, time, number of guests, and any other information relating
to the reservation.

The processing of reservation data is carried out for the purpose of handling and carrying out your reservation on
the basis of Art. 6(1)(b) GDPR. The technical integration and provision of the reservation tool is based on our
legitimate interest in providing a simple and efficient online reservation option pursuant to Art. 6(1)(f) GDPR.

If DISH Reservation uses cookies or comparable technologies, their use, where required, is based on your consent
pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Further information on data processing by DISH Reservation can be found in the provider’s privacy policy:

https://cdn.reservation.dish.co/static-static/static/pp-tc/privacy_DE.pdf

Enquiries by Email or Telephone

If you contact us by email or telephone, your enquiry, including all personal data resulting from it, will be
stored and processed by us for the purpose of handling your request. We do not pass on this data without your
consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a
contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is
based on our legitimate interest in effectively handling enquiries addressed to us pursuant to Art. 6(1)(f) GDPR
or on your consent pursuant to Art. 6(1)(a) GDPR, if such consent has been requested.

The data you send to us will remain with us until you request its deletion, withdraw your consent to storage, or
the purpose for storing the data no longer applies, for example after your request has been fully processed.
Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Local Fonts

This website uses fonts that are embedded locally on our server. When you access the website, no connection to
Google Fonts servers is established.

Social Media Links

Our website contains links to our profiles on social networks. These are simple links. When you merely visit our
website, no personal data is transferred to the respective social networks via these links.

If you click on such a link, you leave our website and are redirected to the respective provider. The respective
provider is responsible for the processing of personal data on its platform.

5. Analytics and Tracking Tools

Matomo Analytics

This website uses the web analytics service Matomo. Matomo is operated on this website as a WordPress plugin. The
analytics data collected is processed within our own WordPress and hosting environment and is not transferred to
an external analytics service.

Matomo enables us to analyse the use of our website. This allows us to understand which pages are accessed, how
visitors interact with the website, and how we can improve our offering from a technical and content perspective.

In connection with the use of Matomo, the following data in particular may be processed: shortened or anonymised
IP address, date and time of access, pages accessed, referrer URL, browser used, operating system, device type,
screen resolution, and general usage data.

We have configured Matomo so that IP addresses are anonymised. This means that your IP address is shortened before
it is stored, thereby reducing direct personal identifiability.

The use of Matomo is based on our legitimate interest in the statistical analysis, optimisation, and economically
efficient provision of our website pursuant to Art. 6(1)(f) GDPR.

If Matomo uses cookies or comparable technologies, their use is based exclusively on your consent pursuant to
Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time via our cookie consent tool.

Further information on data protection at Matomo can be found at:

Web Analytics Privacy in Matomo