Privacy Policy

1. Controller

The controller responsible for data processing on this website is:
Staiger Gastronomie GmbH
Uwe Staiger
Neckarstr. 25
73207 Plochingen, Germany
Phone: +49 7153 72700
E-mail: info@staigers-waldhorn.de

2. General

We take the protection of your personal data seriously and treat it confidentially in accordance with statutory data protection regulations (GDPR) and this privacy policy. Using this website is generally possible without providing personal data. Please note that data transmission over the internet (e.g. by e-mail) can have security gaps; complete protection against third-party access is not possible.

3. Hosting and server log files

This website is hosted by a provider in Germany (IONOS SE, 56410 Montabaur). When the pages are accessed, the server automatically collects information in server log files sent by your browser: browser type and version, operating system, referrer URL, host name/IP address of the accessing device, and time of the request. This data is used for the technical delivery, stability and security of the website. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Log files are deleted after a short period unless needed to investigate misuse or malfunctions. A data processing agreement is in place with the host.

4. SSL/TLS encryption

For security reasons this site uses SSL/TLS encryption, recognisable by “https://” in the address bar and the lock icon in your browser.

5. Cookies

We use only technically necessary cookies; there is no tracking or analysis of your browsing behaviour:

• lang – stores your language choice (German/English).
• extconsent – stores your decision about loading the external reservation service (see section 7).
• waldhorn_sid – session cookie, only in the internal admin area after login.

These cookies are required to operate the website; the legal basis is Art. 6(1)(f) GDPR and § 25(2) TTDSG. You can delete cookies in your browser at any time or restrict their storage.

6. Contact by e-mail / phone

If you contact us by e-mail or phone, we process your details to handle your request and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual/contractual measures) or (f) (legitimate interest in replying). We do not use a contact form with server-side storage – enquiries reach us directly by e-mail.

7. Online reservation (DISH) – only with your consent

For table reservations we offer the reservation widget of DISH (DISH Digital Solutions GmbH, Metro-Straße 1, 40235 Düsseldorf, Germany) on the contact page. The widget is only loaded after you have explicitly consented (clicking “Allow reservation” or “Load reservation”). No connection to DISH is established before your consent.

With your consent the widget is loaded from DISH servers (reservation.dish.co); your IP address is transferred to DISH and DISH may set its own cookies. If you make a reservation, DISH processes the data entered (name, contact details, reservation time, number of guests) to carry out the reservation. The legal basis for loading the widget is your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG); for processing the reservation, Art. 6(1)(b) GDPR. A transfer to third countries cannot be excluded. You can withdraw your consent at any time via the “Cookie settings” link in the footer (effective for the future). More information: www.dish.co/de/privacy.

8. Link to Google Maps

On the contact page we use a plain link to Google Maps for directions. No map is embedded; a connection to Google is only established if you actively click the link and thereby leave our website. Google’s privacy policy then applies.

9. Virtual 360° tour

The 360° tour is served entirely from our own server; no data is transferred to third parties.

10. Anonymous analytics

To improve our offering we run our own cookieless and anonymous statistics. No IP addresses are stored and no cookies are set. Only aggregated figures are recorded (e.g. number of page views, popular pages, approximate time on page, clicks on the Google Maps link or the reservation widget, device type and language). To count unique visits, a daily, non-reversible check value is used which is deleted every day and does not allow any conclusions about individual persons. There is no personal reference. The legal basis is our legitimate interest in privacy-friendly analytics (Art. 6(1)(f) GDPR).

11. Voucher orders and payment via PayPal

If you order a voucher through our online shop, we process the data you provide (name and e-mail address of the buyer, the name of the sender and of the recipient, an optional personal message and, for postal delivery, the delivery address) to perform the purchase contract and to create, deliver and manage the voucher. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). To comply with commercial and tax retention obligations we store the order data for the statutory periods (Art. 6(1)(c) GDPR). The digital voucher is sent by e-mail via our mailbox at the provider IONOS SE.

Payment is processed via the payment service provider PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). If you choose to pay via PayPal, a connection to PayPal is established to process the payment and the data required for the transaction (including order/payment amount, order reference and the data stored in your PayPal account) is transferred to PayPal. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). PayPal is an independent controller for the processing carried out within its area of responsibility. A transfer to third countries cannot be excluded; PayPal relies on appropriate safeguards (EU standard contractual clauses) for this. For details on data processing by PayPal see www.paypal.com/de/webapps/mpp/ua/privacy-full.

12. Newsletter (weekly menu)

On our website you can subscribe to our free newsletter, with which we send you our current weekly menu. We use the double opt-in procedure: after you sign up, we send an email to the address provided asking you to confirm your subscription by clicking a confirmation link. Only after your confirmation do we add your address to the mailing list.

We process your email address, an optionally provided name, the preferred language and the timestamps of your sign-up and confirmation (proof of consent). We do not store IP addresses for this. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

You can unsubscribe at any time and withdraw your consent with effect for the future – via the unsubscribe link at the bottom of every newsletter email or by sending us a short message. After unsubscribing, your address will no longer be used for the newsletter. Newsletters are sent via our email mailbox at the provider IONOS SE.

13. AI-assisted processing of incoming emails

To help us handle messages sent to our mailbox info@staigers-waldhorn.de, we use an AI-assisted system. It automatically checks incoming emails for whether they contain a table reservation, a change or a cancellation, and transfers the recognised details (e.g. name, date, time, party size, contact details provided) into our reservation system. For the content analysis we use the service OpenAI (OpenAI Ireland Ltd.); the subject and body of the message are transmitted for this purpose, with signatures removed beforehand. A data processing agreement is in place with the provider, and processing takes place within the EU where possible. The legal basis is our legitimate interest in efficient handling of enquiries as well as the initiation and performance of the guest contract (Art. 6(1)(f) and (b) GDPR). No automated decision with legal effect within the meaning of Art. 22 GDPR takes place – outgoing replies and binding commitments are always made by our staff.

14. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent given with effect for the future. Please contact us using the details above.

15. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is: State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.