Privacy policy

This website is deliberately built so that simply visiting it creates no connection to any third party: no external fonts, no embedded map, no social media widgets, no tracking. That is also why there is no cookie banner — there would be nothing to consent to.

Note: this policy reflects the technical state of the website at the time it was written. The items marked TODO (in particular the hosting provider) must be added. Have it reviewed by a lawyer before going live. The German version is authoritative.

1. Controller

Brückenterrassen Restaurant & Café
Owner: Ullrich Heldt
Am Kreishafen 36, 24768 Rendsburg, Germany
Phone: +49 04331 22002
E-mail: restaurant@brueckenterrassen.de

In our assessment no data protection officer needs to be appointed. TODO(client): confirm.

2. Visiting the website and server log files

When you open this website your browser transmits technically necessary data which our host stores in log files: IP address, date and time of access, the page requested, the volume of data transferred, the access status, browser type and version, and operating system.

Purpose: providing the website, operational security, defending against attacks.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interest lies in the technically sound and secure operation of the website.
Retention: TODO(client): enter the host’s actual deletion period; 7 to 14 days is typical.

TODO(client): enter the name and address of the hosting provider and confirm that a data processing agreement under Article 28 GDPR is in place.

3. Reservation, event and application forms

When you submit one of our forms we process the details you enter. We only ask for what we need:

Form	Data	Purpose	Legal basis
Reservation	Date, time, number of guests, name, e-mail, phone, optionally occasion and notes	Handling and confirming your table reservation	Art. 6(1)(b) GDPR (pre-contractual measure)
Event enquiry	Occasion, preferred date, number of guests, name, e-mail, phone, free text	Preparing a proposal for your event	Art. 6(1)(b) GDPR
Application	Name, e-mail, phone, preferred working arrangement, message	Conducting the application process	Section 26(1) BDSG, Art. 6(1)(b) GDPR

Recipients: the details are delivered by e-mail to our own mailbox. They are not passed on to third parties; no external form or booking service is used.

Retention: we delete reservation and event enquiries once they have been dealt with and no statutory retention obligations apply. Application data is deleted no later than six months after the process ends, unless you have agreed to longer storage.

Spam protection: the forms contain an extra field that is invisible to you and check how much time passes between opening the page and submitting. No personal data is transmitted to third parties in the process. A captcha service such as Google reCAPTCHA is deliberately not used.

Provision: the required fields are necessary for us to handle your request. Without them no reservation can be made. All other fields are optional.

4. Contact by e-mail or telephone

If you call or write to us we process your details in order to deal with your enquiry. The legal basis is Article 6(1)(b) GDPR where a contract is being initiated, otherwise Article 6(1)(f) GDPR.

5. What this website does not do

No cookies and no comparable access to storage on your device.
No analytics or tracking services. No Google Analytics, no Meta pixel.
No external fonts. All fonts are hosted on our own server; there is no connection to Google Fonts.
No embedded map. The contact page shows a static map image stored on our own server. Only when you actively select “Open in Google Maps” do you leave our site.
No social media widgets. Facebook and Instagram are included purely as ordinary links. Only your click creates a connection to those providers, and their privacy terms then apply.
No newsletter and no marketing e-mails.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing (Art. 21 GDPR). Any consent given can be withdrawn at any time with future effect.

Simply contact restaurant@brueckenterrassen.de.

7. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Independent Centre for Privacy Protection Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.

8. Changes

We update this policy whenever the website or the legal situation changes.