Privacy Policy

1. Controller

The controller responsible for data processing on this website is:
Staiger Gastronomie GmbH
Uwe Staiger
Neckarstr. 25
73207 Plochingen, Germany
Phone: +49 7153 72700
E-mail: info@staigers-waldhorn.de

2. General

We take the protection of your personal data seriously and treat it confidentially in accordance with statutory data protection regulations (GDPR) and this privacy policy. Using this website is generally possible without providing personal data. Please note that data transmission over the internet (e.g. by e-mail) can have security gaps; complete protection against third-party access is not possible.

3. Hosting and server log files

This website is hosted by a provider in Germany (IONOS SE, 56410 Montabaur). When the pages are accessed, the server automatically collects information in server log files sent by your browser: browser type and version, operating system, referrer URL, host name/IP address of the accessing device, and time of the request. This data is used for the technical delivery, stability and security of the website. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Log files are deleted after a short period unless needed to investigate misuse or malfunctions. A data processing agreement is in place with the host.

Once a day we automatically analyse the previous day's log files on our own server in order to distinguish visits by real people from access by search engines, AI services and other automated programs ("bots") as well as attack attempts. This produces totals only (e.g. "search engine X fetched 120 pages", "15 visitors came via a link in an AI assistant"); IP addresses are not stored in the process and are not passed on to third parties. The legal basis is our legitimate interest in secure operation and in reliable analytics cleaned of automated access (Art. 6(1)(f) GDPR).

4. SSL/TLS encryption

For security reasons this site uses SSL/TLS encryption, recognisable by “https://” in the address bar and the lock icon in your browser.

5. Cookies and consent

On your first visit we ask which additional services you consent to. You can choose "Accept all", "Reject all" or select individually, and you can change or withdraw your choice at any time via the "Cookie settings" link in the footer – just as easily as you gave it. Your choice is stored only in your browser (cookie "swc", without an identifier). How often the banner was accepted or rejected is counted only as an anonymous daily total.

Necessary cookies (no consent needed, Art. 6(1)(f) GDPR, § 25(2) TDDDG):
• swc – stores your choice in the consent banner (6 months).
• lang – stores your language choice German/English (1 year).
• waldhorn_sid – session cookie, only for certain functions such as newsletter sign-up or in the internal admin area (session, at most 24 hours).

External media (only with consent): see section 7.

You can also delete cookies in your browser at any time or restrict their storage.

6. Contact by e-mail / phone

If you contact us by e-mail or phone, we process your details to handle your request and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual/contractual measures) or (f) (legitimate interest in replying). We do not use a contact form with server-side storage – enquiries reach us directly by e-mail.

7. Guest reviews (DISH) – only with your consent

On the contact page we can show guest reviews via the service DISH (DISH Digital Solutions GmbH, Metro-Straße 1, 40235 Düsseldorf, Germany). The review widget is only loaded after you have consented – in the consent banner (category "External media") or with the "Show reviews" button on the contact page. No connection to DISH is established before your consent. Our online table reservation runs on our own website and is not affected.

With your consent the widget is loaded from DISH servers (reservation.dish.co); your IP address is transferred to DISH and DISH may set its own cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). A transfer to third countries cannot be excluded. You can withdraw your consent at any time via the cookie settings (effective for the future). More information: www.dish.co/de/privacy.

8. Link to Google Maps

On the contact page we use a plain link to Google Maps for directions. No map is embedded; a connection to Google is only established if you actively click the link and thereby leave our website. Google’s privacy policy then applies.

9. Virtual 360° tour

The 360° tour is served entirely from our own server; no data is transferred to third parties.

10. Analytics without cookies

To improve our offering we run our own statistics on our own server – without cookies, without third parties and without storing IP addresses. For each page view we only evaluate information your browser sends anyway: the page requested and the hour; the origin, i.e. the referring website (its address only, e.g. "google.de" or "chatgpt.com") and campaign tags in links (e.g. "utm_source"); device type (phone, tablet, computer) and website language; whether the page was found; in our forms and planners, which steps reached the server (e.g. "available times shown", "price calculated", "submitted") and which notice appeared on submission – never the content entered; and clicks on links that redirect via our server (e.g. Google Maps, partner websites).

So that several page views on the same day count as one visit and automated access can be filtered out, we derive a non-reversible check value from the IP address and browser identifier together with a random value that is generated anew every day. The IP address itself is not stored. Within the same day, this check value is also used to determine the order of pages viewed, the time until the next page view and – if you make an enquiry or reservation that day – how you came to our website (e.g. Google or an AI assistant); your enquiry itself is not linked to it. The random value is deleted after 48 hours at the latest, after which the check value can no longer be attributed to anyone. Individual entries are aggregated into daily totals overnight and then deleted. In addition, a small script without cookies reports the approximate time on page and clicks on the Google Maps link; we also count how often a form (e.g. reservation, enquiry, voucher) was successfully submitted – the number only, not its content.

The legal basis is our legitimate interest in privacy-friendly analytics (Art. 6(1)(f) GDPR). You have the right to object to this processing on grounds relating to your particular situation (Art. 21 GDPR).

10a. Web analytics with your consent

Only if you consent to the "Statistics" category in the consent banner do we additionally use more detailed web analytics. It is self-operated: no third party is involved, all data stays on our server in Germany and is neither passed on nor transferred to third countries.

We record: pages viewed and the origin of the visit (referring website, campaign tags), device class, browser and operating-system family and a rounded screen width, active time on page and scroll depth, the position of clicks and the element clicked (for a click overview, a so-called heatmap), clicks on the phone number, e-mail address, map and external links, progress in our forms and planners (which step was reached and, if abandoned, the name of the field last used – never what you type), technical error messages and page load times. No screen recordings are made, no IP addresses are stored and no "fingerprint" of your device is created.

For recognition we store two cookies containing random values only: swa_v (visitor ID, 13 months, not extended) and swa_s (session, 30 minutes). Individual data is deleted after 13 months (click positions after 90 days); only anonymous daily totals remain. We use the analytics to improve our website and our reservation and enquiry forms; there is no profiling for advertising and no automated decision-making.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it at any time with effect for the future via the cookie settings in the footer, where you can also delete the statistics data already stored about your visits yourself.

11. Voucher orders and payment via PayPal

If you order a voucher through our online shop, we process the data you provide (name and e-mail address of the buyer, the name of the sender and of the recipient, an optional personal message and, for postal delivery, the delivery address) to perform the purchase contract and to create, deliver and manage the voucher. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). To comply with commercial and tax retention obligations we store the order data for the statutory periods (Art. 6(1)(c) GDPR). The digital voucher is sent by e-mail via our mailbox at the provider IONOS SE.

Payment is processed via the payment service provider PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg). If you choose to pay via PayPal, a connection to PayPal is established to process the payment and the data required for the transaction (including order/payment amount, order reference and the data stored in your PayPal account) is transferred to PayPal. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). PayPal is an independent controller for the processing carried out within its area of responsibility. A transfer to third countries cannot be excluded; PayPal relies on appropriate safeguards (EU standard contractual clauses) for this. For details on data processing by PayPal see www.paypal.com/de/webapps/mpp/ua/privacy-full.

12. Newsletter (weekly menu)

On our website you can subscribe to our free newsletter, with which we send you our current weekly menu. We use the double opt-in procedure: after you sign up, we send an email to the address provided asking you to confirm your subscription by clicking a confirmation link. Only after your confirmation do we add your address to the mailing list.

We process your email address, an optionally provided name, the preferred language and the timestamps of your sign-up and confirmation (proof of consent). We do not store IP addresses for this. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

You can unsubscribe at any time and withdraw your consent with effect for the future – via the unsubscribe link at the bottom of every newsletter email or by sending us a short message. After unsubscribing, your address will no longer be used for the newsletter. Newsletters are sent via our email mailbox at the provider IONOS SE.

13. AI-assisted processing of incoming emails

To help us handle messages sent to our mailbox info@staigers-waldhorn.de, we use an AI-assisted system. It automatically checks incoming emails for whether they contain a table reservation, a change or a cancellation, and transfers the recognised details (e.g. name, date, time, party size, contact details provided) into our reservation system. For the content analysis we use the service OpenAI (OpenAI Ireland Ltd.); the subject and body of the message are transmitted for this purpose, with signatures removed beforehand. A data processing agreement is in place with the provider, and processing takes place within the EU where possible. The legal basis is our legitimate interest in efficient handling of enquiries as well as the initiation and performance of the guest contract (Art. 6(1)(f) and (b) GDPR). No automated decision with legal effect within the meaning of Art. 22 GDPR takes place – outgoing replies and binding commitments are always made by our staff.

14. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent given with effect for the future. Please contact us using the details above.

15. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is: State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.