Privacy policy

This is a courtesy translation. In case of any discrepancy, the German version is legally binding.

This privacy policy informs you about the nature, scope and purpose of the processing of personal data (hereinafter referred to as „data“) within our online offering and the websites, functions and content connected with it, as well as external online presences such as our social media profiles (hereinafter jointly referred to as the „online offering“). With regard to the terms used, such as „processing“ or „controller“, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Controller

Restaurant Pata Negra, KS Gastro GmbH & Co. KG
Karl-Liebknecht-Str. 75
04275 Leipzig, Germany
E-mail: info@patanegra.de

Types of data processed

• – Master data (e.g. names, addresses).
• – Contact data (e.g. e-mail addresses, telephone numbers).
• – Content data (e.g. text entries, photographs, videos).
• – Usage data (e.g. websites visited, interest in content, access times).
• – Meta and communication data (e.g. device information, IP addresses).

Categories of data subjects

Visitors and users of the online offering (hereinafter we also refer to the data subjects collectively as „users“).

Purpose of processing

• – Provision of the online offering, its functions and content.
• – Responding to contact requests and communicating with users.
• – Security measures.

Terms used

„Personal data“ means any information relating to an identified or identifiable natural person (hereinafter „data subject“); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. a cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

„Processing“ means any operation or set of operations performed on personal data, whether or not by automated means. The term is broad and covers practically any handling of data.

„Controller“ means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Relevant legal bases

In accordance with Art. 13 GDPR we inform you of the legal bases of our data processing. Where the legal basis is not stated in this privacy policy, the following applies: the legal basis for obtaining consent is Art. 6(1)(a) and Art. 7 GDPR; the legal basis for processing in order to perform our services and carry out contractual measures as well as to respond to enquiries is Art. 6(1)(b) GDPR; the legal basis for processing in order to fulfil our legal obligations is Art. 6(1)(c) GDPR; and the legal basis for processing in order to safeguard our legitimate interests is Art. 6(1)(f) GDPR. In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6(1)(d) GDPR serves as the legal basis.

Cooperation with processors and third parties

If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit data to them or otherwise grant them access to the data, this is done only on the basis of a legal permission (e.g. where a transfer of data to third parties such as payment service providers is necessary for the performance of a contract pursuant to Art. 6(1)(b) GDPR), where you have consented, where a legal obligation provides for it, or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).

Where we commission third parties to process data on the basis of a so-called „data processing agreement“, this is done on the basis of Art. 28 GDPR.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs in the context of using third-party services or disclosing or transferring data to third parties, this only takes place where it is necessary for the performance of our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have data processed in a third country only where the special requirements of Art. 44 et seq. GDPR are met. This means that processing takes place, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection equivalent to that of the EU (for the USA, the EU-US Data Privacy Framework), or compliance with officially recognised special contractual obligations (so-called „standard contractual clauses“).

Rights of data subjects

You have the right, pursuant to Art. 17 GDPR, to request that the relevant data be erased without undue delay, or alternatively, pursuant to Art. 18 GDPR, to request a restriction of the processing of the data.

You have the right to request confirmation as to whether the relevant data are being processed and to obtain information about those data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

You have the right to receive the data concerning you which you have provided to us in accordance with Art. 20 GDPR and to request its transfer to other controllers.

Pursuant to Art. 16 GDPR you have the right to request that data concerning you be completed or that inaccurate data concerning you be rectified.

You also have the right, pursuant to Art. 77 GDPR, to lodge a complaint with the competent supervisory authority.

Right of withdrawal

You have the right to withdraw consent you have given, with effect for the future, in accordance with Art. 7(3) GDPR.

Right to object

You may object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. In particular, you may object to processing for the purposes of direct marketing.

Cookies and the right to object to direct marketing

„Cookies“ are small files stored on users’ computers. Different pieces of information can be stored within cookies. A cookie serves primarily to store information about a user (or the device on which the cookie is stored) during or after their visit to an online offering. Temporary cookies, also called „session cookies“ or „transient cookies“, are cookies that are deleted after a user leaves an online offering and closes their browser. Such a cookie may store, for example, the contents of a shopping basket in an online shop or a login status. Cookies are described as „permanent“ or „persistent“ if they remain stored even after the browser has been closed. This makes it possible, for example, to store the login status when users return after several days. Such a cookie may also store users’ interests, which are used for reach measurement or marketing purposes. A „third-party cookie“ is a cookie offered by a provider other than the controller operating the online offering (otherwise, if only the controller’s own cookies are used, they are referred to as „first-party cookies“).

We may use temporary and permanent cookies and explain this within our privacy policy. If users do not wish cookies to be stored on their computer, they are asked to deactivate the corresponding option in their browser settings. Stored cookies can be deleted in the browser settings. Excluding cookies may lead to functional restrictions of this online offering. A general objection to the use of cookies for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US website https://www.aboutads.info/choices/ or the EU website https://www.youronlinechoices.com/.

Erasure of data

The data processed by us are erased or their processing is restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated within this privacy policy, the data stored by us are erased as soon as they are no longer required for their intended purpose and no statutory retention obligations prevent erasure. If the data are not erased because they are required for other and legally permissible purposes, their processing is restricted.

Hosting

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services which we use for the purpose of operating this online offering. In doing so, we and our hosting provider GONEO process master data, contact data, content data, contract data, usage data, meta data and communication data of customers, prospective customers and visitors to this online offering on the basis of our legitimate interests in the efficient and secure provision of this online offering pursuant to Art. 6(1)(f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

Contacting us

When you contact us (e.g. via a contact form, e-mail, telephone or social media), the user’s details are processed in order to handle and process the enquiry pursuant to Art. 6(1)(b) GDPR. Users’ details may be stored in a customer relationship management system („CRM system“) or a comparable enquiry management system.

Consent management (Cookiebot)

To obtain and manage your consent for non-essential services we use Cookiebot, a service provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. When you access our website your IP address is transmitted to Cookiebot and processed there in truncated form. Cookiebot stores a cookie documenting your decision so that we can demonstrate it and so that you are not asked again on every visit. The legal basis is Art. 6(1)(c) GDPR (fulfilment of our obligation to provide proof) as well as our legitimate interest in operating the website in compliance with the law pursuant to Art. 6(1)(f) GDPR. Further information: https://www.cookiebot.com/en/privacy-policy/

Services requiring consent are blocked automatically until you agree and are only loaded afterwards.

Google Maps

On our contact page we embed a map from the Google Maps service. For users in the European Economic Area the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is not loaded automatically. A notice appears in its place first; the map is only requested once you click „Load Google Maps“ there. When the map loads, your IP address is transmitted to Google, which means Google learns that you have visited this page. A transfer of your data to the USA cannot be ruled out; Google relies on the EU-US Data Privacy Framework for such transfers. We have no influence on whether and to what extent Google uses the data for its own purposes beyond this.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with sec. 25(1) of the German Digital Services Data Protection Act (TDDDG). If you grant the permission permanently, this is recorded in the cookie pn_embed_map in your browser. You can withdraw your consent at any time with effect for the future – you will find a button for this at the end of this page.

If you would rather avoid this, you can of course reach us without the map as well: Karl-Liebknecht-Str. 75, 04275 Leipzig, Germany. The „Get directions“ button opens Google Maps in a new window, where Google’s privacy terms likewise apply.

For details, please see Google’s privacy policy: https://policies.google.com/privacy

Online booking via TheFork

Restaurant Pata Negra is a partner of TheFork (hereinafter „TheFork“) and uses its booking technology. The booking service is provided by TheFork and embedded on our website via an iFrame. When the widget loads, your IP address is transmitted to TheFork; the details you enter in the widget are processed by TheFork in order to pass your booking on to us.

The widget is only loaded after you have released it via the notice on the booking page. The legal basis is Art. 6(1)(a) GDPR in conjunction with sec. 25(1) TDDDG, and Art. 6(1)(b) GDPR for the subsequent handling of your booking. A permanent permission is recorded in the cookie pn_embed_fork and can be withdrawn at the end of this page.

Please note that the restaurant services booked through TheFork are provided directly by us and not by TheFork. You are of course also welcome to book by telephone or e-mail. TheFork privacy policy: https://www.thefork.com/privacy-policy

Gift voucher portal

Our online gift vouchers are issued through a portal operated by Vectron Systems AG. The purchase does not take place on our website: clicking „Continue to the voucher shop“ opens the portal in a new window. Your details are only collected there, and the privacy terms of the portal operator apply. No data is transmitted to Vectron from our website itself.

Online presences on social media

We maintain online presences on Instagram and Facebook in order to communicate with guests and prospective guests and to inform them about our services. Our website contains only links to these profiles – no social plugins are embedded. Data is therefore only transmitted to these networks once you click one of those links. When you access the respective platform, the terms and privacy notices of its operator apply.

Third-party images

Some images in the gallery on our home page are loaded from the servers of the image service Unsplash. In doing so your IP address is transmitted to the provider so that the image can be delivered to your browser. The legal basis is our legitimate interest in an appealing presentation of our offering pursuant to Art. 6(1)(f) GDPR.

No web analytics, no advertising tools

We currently do not use any web analytics services (such as Google Analytics), no Google Fonts, no reCAPTCHA and no tools for reach measurement or for serving advertising. Fonts are taken from your own device. Should this change, we will amend this privacy policy accordingly beforehand.