1.1 What is personal data
Personal data is information that discloses or can disclose the user's identity. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.
1.2 Handling of personal data
Personal data is used exclusively to establish the contract, define its content, and implement or process the contractual relationship (Art. 6 (1 b) GDPR).
Beyond that, personal data will only be processed if we have received your consent to do so (Art. 6 (1 a) GDPR) or if it is data whose processing is necessary for our legitimate interests and insofar as the balancing process shows that no overriding interests, fundamental rights or freedoms on your part are opposed (Art. 6 (1 f) GDPR).
We may use order processors to process your personal data, but will not pass on the personal data to third parties beyond this as a matter of principle.
Only for the fulfillment of the contract will the data be passed on to the shipping company commissioned with the delivery, insofar as this is necessary to deliver ordered goods. The payment data required for the processing of payments will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.
The processing of your personal data takes place exclusively within the EU, unless otherwise stated below.
1.3 Usage data
When visiting the website, general technical information is collected. This is the IP address used, time, duration of the visit, browser type and, if applicable, the page of origin. This usage data is registered in a log file for technical reasons and can be used and stored for statistical evaluation of this website. This usage data is not linked to your other personal data.
1.4 Duration of storage
We store your personal data after the termination of the purpose for which the data was collected only as long as this is required by law (especially tax law).
2. Your rights
You can request information from us as to whether we are processing personal data about you and if so, you have a right to be informed about this personal data and to receive the further information referred to in Art. 15 of the GDPR.
2.2 Right to rectification
You have the right to rectification of inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 GDPR.
2.3 Right to erasure
You have the right to demand that we delete the personal data concerning you without undue delay. We are obliged to delete them without delay, in particular, if one of the following reasons applies:
The right to erasure does not exist insofar as your personal data is required to assert, exercise, or defend our legal claims.
2.4 Right to restriction of processing
You have the right to demand that we restrict the processing of your personal data if
2.5 Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and you have the right to transfer this data to another controller without hindrance from us, provided that the processing is based on consent or a contract and the processing is carried out by us with the help of automated processes.
2.6 Right of withdrawal
Insofar as the processing of your personal data is based on consent, you have the right to revoke this consent at any time.
2.7 General and right of appeal
The exercise of your above rights is generally free of charge for you. In the event of complaints, you have the right to directly contact the supervisory authority responsible for us, the State Data Protection Officer.
3.1 Data security
All data on our website is secured by technical and organizational measures against loss, destruction, access, modification and distribution.
3.2 Sessions and cookies
Below you will find the domain, name and duration of cookies used only based on your consent:
If you register for our newsletter, we use the data required for this purpose or separately provided by you to send you our e-mail newsletter regularly based on your consent according to Art. 6 (1 a) GDPR.
Unsubscribing from the newsletter is possible at any time and can be done either by sending us a message via the contact options provided in the imprint or via the link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data in a manner that goes beyond this, which is permitted by law and about which we inform you in this statement.
We use the following social media platforms for corporate presentation and communication (explicit reference is made to the privacy statements and opt-out options linked below).
Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland).
YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
These social media platforms may process personal data outside the EU, we refer in this respect to the above privacy statements of the social media platforms.
The respective social media platforms may create usage profiles from your usage behavior and the resulting interests and actions on your part and store cookies on your computer where your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior may even be stored independently of the device. For example, your usage profile can be used to place advertisements that presumably correspond to your interests.
We process the personal data exclusively for communicating with you via the social media platform you have chosen and for optimizing our online presence and ensure that no interests on your part are affected here that outweigh this legitimate interest on our part (Art. 6 (1 f) GDPR). Insofar as you have already given the respective operator of the social media platform effective consent to the corresponding data processing, the processing of your personal data will also be based on this consent (Art. 6 (1 a) GDPR).
6.1 Social media links
We have our own social media pages with third-party providers that can be reached via links from this website. Using the links will take you to the respective websites of the third-party providers (e.g. Facebook). To avoid unnecessary data transfer, we recommend that you log out of the respective third-party provider before using a corresponding link, so that usage profiles cannot be created by the third-party provider simply by using the link.
6.2 Use of YouTube
We use the tool Cookiebot (operated by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark) on our website. This tool lets us inform you about the cookies used on our website and obtain your consent for certain cookies. The information provided as part of the tool (consent, rejection or preference including date and time), your IP address (in anonymized form), and technical browser data are also sent to Cookiebot in this context to enable this function. In addition, Cookiebot can track user behavior on our website and use the information to improve its service. Cookies are stored for 12 months or shorter if we cancel the service in advance. Furthermore, processing your data will only occur within the European Union or within a country for which an adequacy decision exists. The legal basis for the processing of your data is Art. 6 (1 c) GDPR (fulfillment of legal obligation) or Art. 6 (1 a) GDPR (consent) or Art. 6 (1 f) GDPR (legitimate interest).
We use the OpenStreetMap mapping service (operated by the OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). OpenStreetMap is used to provide an interactive map on our website that shows you how to find and reach us.
We use the provider rapidmail (operated by rapidmail GmbH) for our newsletter.
6.6 External hosting
Our website is hosted by the external service provider PCXPRESS (operated by Mr. André Heer, Schefflenzer Str. 3, 74743 Seckach). The personal data collected on this website is stored on the servers of PCXPRESS. This may include, but is not limited to, IP addresses, contact information, contract information, website traffic and other data generated by a website. The hoster is used to fulfill the contract with our potential and existing customers (Art. 6 (1 b) GDPR) and in the interest of a safe, fast and efficient provision of our online offer by a professional provider (Art. 6 (1 f) GDPR). PCXPRESS will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.
6.7 CDN by jsdelivr
6.10 Booking tool
You can apply to us electronically, by telephone and in writing. Of course, we will only use your information to process your application and not pass it on to third parties. Please note that if you send your application by e-mail, unencrypted e-mails will not be protected against unauthorized access. Your personal data will be deleted immediately after completion of the application process or after a maximum of 6 months, unless you have given us your express consent to store your data for longer or a contract has been concluded. The legal basis is Art. 6 (1 a) or (1 b) or (1 f) GDPR and § 26 BDSG.
You are welcome to use the following contact options to contact us regarding data protection. Responsible person in the sense of the GDPR:
Marita Schaffers GmbH
97980 Bad Mergentheim
Phone: +49 7931 9712 0
Edelfinger Str. 7
97980 Bad Mergentheim
Phone: +49 7931 9712 0
Fax: +49 7931 9712 97
Managing Director: Daniel Schaffers
Monday to Friday
7 a.m. to 10 a.m.
Saturday and Sunday
7.30 a.m. to 10.30 a.m.
5 p.m. to 11 p.m.
(last order from kitchen 8.30 p.m)
Restaurant closed on Sunday and Monday
Restaurant guests must book in advance!
For enquiries, contact: +49 7931 9712 0